Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/273708a7-d2f0-3e18-a55b-588fcb083a61.roa
File:                     273708a7-d2f0-3e18-a55b-588fcb083a61.roa (raw, json)
Hash identifier:          noMflM1Qp456qEo7LPqbdd7OI8QcyBDRVjiazPnc1Q8=
Subject key identifier:   E2:00:60:EE:22:99:8E:F2:63:A8:E0:AC:C9:4C:7B:50:C2:03:89:1B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81466627CCFE0DEDDE2A1080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/273708a7-d2f0-3e18-a55b-588fcb083a61.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:ee00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:66:27:cc:fe:0d:ed:de:2a:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=27e47e3c-cf5b-497c-8eb9-cd19b5384a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:92:86:97:43:d7:f8:d5:6a:43:8f:c4:43:
                    8b:c6:52:30:9e:97:cc:60:b4:8a:59:eb:13:20:77:
                    74:0f:48:40:7c:c2:61:45:63:85:b1:c6:fe:b1:36:
                    1b:04:03:94:44:f9:41:da:97:0c:c6:e1:2e:2d:68:
                    5f:ef:e7:5c:26:9a:d8:3f:d2:53:28:60:46:cb:37:
                    54:e9:bf:82:8a:d2:c8:01:52:fd:f3:ee:3f:1d:af:
                    2d:70:cf:0a:fd:32:0c:d1:58:8d:80:7d:e5:29:63:
                    bc:3f:51:08:e9:ac:2a:79:ac:81:98:ee:ff:85:81:
                    37:fe:32:07:e0:0e:bd:50:2a:a7:1f:98:05:fa:54:
                    df:6d:a9:ad:56:b8:eb:c3:e1:92:10:23:48:5c:fa:
                    a7:df:c3:05:18:cd:3e:52:ed:80:08:33:a2:cb:d6:
                    de:50:3a:ca:92:ed:23:23:a1:8b:8d:94:26:1d:13:
                    06:30:b1:81:76:e9:dc:55:3c:60:60:28:eb:85:8e:
                    97:05:75:c3:35:a3:75:4c:4a:b8:d7:cf:3c:86:ad:
                    39:7d:84:3f:87:46:82:bb:7c:bf:f7:28:cf:8f:06:
                    06:87:79:46:f7:e6:2e:e0:8a:c3:54:ad:ee:a4:98:
                    59:c0:64:05:ea:83:f5:58:fa:d6:1e:f5:02:29:8a:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:00:60:EE:22:99:8E:F2:63:A8:E0:AC:C9:4C:7B:50:C2:03:89:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/273708a7-d2f0-3e18-a55b-588fcb083a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ee00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:96:45:a8:e6:f3:c6:33:e5:73:b0:57:89:bd:26:4e:51:64:
         10:34:de:50:2e:7f:95:90:35:51:f8:b3:07:ff:dc:08:72:bb:
         2a:78:af:88:a8:9c:5d:87:42:c9:74:d9:ed:88:ea:91:57:17:
         86:b8:7f:03:a6:4a:f1:76:79:ed:bf:30:8b:51:89:ca:16:11:
         56:9e:bf:54:59:c4:22:0a:9c:cd:a2:cf:1f:df:b1:be:9f:ed:
         df:e6:2d:19:54:97:0c:fc:5f:10:d2:c0:47:73:ac:4e:3a:99:
         4f:a2:72:bb:53:70:25:c4:55:68:03:57:8b:ee:5b:7d:30:96:
         05:8f:29:b9:69:8d:fc:94:80:41:f1:33:c4:a7:bb:b9:5b:43:
         e2:32:4f:c8:bc:5a:ac:3f:1d:37:e9:d6:01:08:34:c0:2e:08:
         64:e5:ed:0f:3e:42:29:87:1e:89:04:e1:e7:e0:03:be:2f:55:
         b7:72:1b:9c:70:f9:2f:77:39:0f:61:91:de:2c:ee:93:c4:8e:
         5e:b7:92:70:19:d6:e9:89:36:53:21:2c:66:76:43:86:e5:88:
         74:07:5b:dd:23:88:fb:76:df:2f:b6:69:96:75:a9:01:25:68:
         ba:53:81:b4:f0:79:12:c1:f0:33:eb:68:08:80:a4:7d:c3:dc:
         26:f0:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:15 2025 by rpki-client