Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f2cd2f2-7017-3d82-b304-d7987abdd3a6.roa
File:                     3f2cd2f2-7017-3d82-b304-d7987abdd3a6.roa (raw, json)
Hash identifier:          8D6Xq9eWhEMDymxB1ebb+1FZUbIiewdoiVt44jCzrlA=
Subject key identifier:   1B:97:7B:E4:D8:42:CB:6F:0F:2E:8B:FC:A7:62:26:59:E4:E4:CA:7B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124D041BD20FA555BCEA40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f2cd2f2-7017-3d82-b304-d7987abdd3a6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:b880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4d:04:1b:d2:0f:a5:55:bc:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=da7dda6f-4e81-448a-9f7c-502456224519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:e2:56:44:1b:d1:ff:93:83:aa:3e:1f:e6:
                    81:79:e8:42:f8:eb:18:0a:f7:70:4d:58:38:7c:3b:
                    69:23:d2:13:58:67:10:9a:d9:cd:09:06:85:cf:f6:
                    44:49:77:a7:c5:db:bf:84:16:61:d3:2d:25:0d:77:
                    ae:28:e9:8e:79:d4:be:91:d2:b2:ab:9e:fd:04:cd:
                    5b:a0:31:2d:cd:3b:53:fe:7f:ad:cb:59:db:0a:ca:
                    b3:c5:87:2a:e7:6a:f9:a7:0c:1d:4c:19:7a:1d:89:
                    44:ab:81:a1:1e:be:fc:b7:20:3e:e1:19:15:2f:6c:
                    4f:0e:c8:be:66:0c:54:00:bf:38:5b:f4:71:14:61:
                    77:26:34:ef:f4:d3:41:91:94:25:ab:3a:54:d6:50:
                    3d:9f:29:96:7e:2d:cd:e8:9a:82:be:17:c7:10:b1:
                    64:0a:11:8a:9e:64:33:ea:f4:7c:52:bf:15:55:d7:
                    ff:ae:e6:8e:f8:eb:03:92:80:bf:fd:43:39:b2:7f:
                    f8:13:a2:9b:10:c4:77:6a:37:b6:f3:fc:18:fe:79:
                    17:9d:1d:1b:2f:4e:65:2a:82:78:ca:f0:d5:a6:bf:
                    2e:9c:12:31:ed:25:12:aa:de:ae:4f:bb:a8:5f:49:
                    5c:a4:82:b3:57:75:cf:bb:48:33:17:59:62:e4:8b:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:97:7B:E4:D8:42:CB:6F:0F:2E:8B:FC:A7:62:26:59:E4:E4:CA:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f2cd2f2-7017-3d82-b304-d7987abdd3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:92:0c:60:1b:8d:75:f2:62:56:b9:e1:74:95:c9:34:e1:9a:
         6a:09:8a:38:18:c9:76:0e:57:37:ff:2e:f4:6a:f6:32:02:4a:
         97:f2:8e:2c:e4:a5:44:7c:e9:d6:c0:d7:38:f2:95:e4:ab:74:
         ce:07:ae:16:a6:42:86:8f:81:0e:f8:bc:ee:0d:ca:b7:ab:6e:
         d4:d2:48:b3:93:76:fd:69:0e:7b:19:19:7b:4a:74:21:02:6f:
         2c:84:28:40:cd:20:cb:5f:3b:d7:33:36:da:7c:17:60:17:f6:
         e4:29:bc:90:ba:7b:cc:0b:98:f1:c2:89:18:5c:46:cf:3e:f6:
         86:e9:78:d3:92:e1:75:99:db:89:fa:76:27:42:af:23:22:ee:
         1c:49:c9:3d:40:9d:f8:86:3f:a6:b9:17:df:3b:70:a3:bb:ca:
         9b:9e:0e:4a:43:e1:c1:f6:35:38:47:59:39:c2:7d:e4:f4:fe:
         d0:a1:d9:ff:3c:0f:fd:4e:3a:35:fe:5d:58:f8:75:91:95:75:
         5e:3f:49:e5:40:b7:d4:90:1a:9c:f6:3f:a3:51:fc:95:01:e6:
         b9:5a:3c:49:3a:81:d0:af:09:e4:52:2a:80:15:c7:88:dc:27:
         bf:57:e8:34:d8:90:87:de:ea:f5:13:84:77:15:30:c1:7b:e3:
         6a:85:79:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEk0EG9IPpVW86kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZGE3ZGRhNmYtNGU4MS00NDhhLTlmN2MtNTAyNDU2MjI0NTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT/iVkQb0f+Tg6o+H+aBeehC+OsYCvdwTVg4
fDtpI9ITWGcQmtnNCQaFz/ZESXenxdu/hBZh0y0lDXeuKOmOedS+kdKyq579BM1b
oDEtzTtT/n+ty1nbCsqzxYcq52r5pwwdTBl6HYlEq4GhHr78tyA+4RkVL2xPDsi+
ZgxUAL84W/RxFGF3JjTv9NNBkZQlqzpU1lA9nymWfi3N6JqCvhfHELFkChGKnmQz
6vR8Ur8VVdf/ruaO+OsDkoC//UM5sn/4E6KbEMR3aje28/wY/nkXnR0bL05lKoJ4
yvDVpr8unBIx7SUSqt6uT7uoX0lcpIKzV3XPu0gzF1li5IvOSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBuXe+TYQstvDy6L/KdiJlnk5Mp7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2YyY2QyZjItNzAxNy0z
ZDgyLWIzMDQtZDc5ODdhYmRkM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLiA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACOSDGAbjXXyYla54XSVyTThmmoJijgYyXYOVzf/LvRq9jICSpfy
jizkpUR86dbA1zjyleSrdM4HrhamQoaPgQ74vO4NyrerbtTSSLOTdv1pDnsZGXtK
dCECbyyEKEDNIMtfO9czNtp8F2AX9uQpvJC6e8wLmPHCiRhcRs8+9obpeNOS4XWZ
24n6didCryMi7hxJyT1AnfiGP6a5F987cKO7ypueDkpD4cH2NThHWTnCfeT0/tCh
2f88D/1OOjX+XVj4dZGVdV4/SeVAt9SQGpz2P6NR/JUB5rlaPEk6gdCvCeRSKoAV
x4jcJ79X6DTYkIfe6vUThHcVMMF742qFeZQ=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:14:19 2025 by rpki-client