Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/524a63bf-4c6c-33c5-8f16-ebfa02114794.roa
File:                     524a63bf-4c6c-33c5-8f16-ebfa02114794.roa (raw, json)
Hash identifier:          B4qozUQw97arAna9yby1B1oxI4+HiC9lqTzjdgYYnIg=
Subject key identifier:   56:56:D2:A2:93:7B:2E:85:E2:BF:27:EB:1F:7B:CF:BD:07:0E:BA:58
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A85760608412797A13FB75E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/524a63bf-4c6c-33c5-8f16-ebfa02114794.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        2604:2d81:800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:76:06:08:41:27:97:a1:3f:b7:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=347b562e-b839-4110-b377-4b6d099416b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:87:51:c7:21:96:5e:50:7a:02:e0:e9:57:
                    45:a1:af:75:00:c5:de:a8:9d:09:9a:f2:63:a0:10:
                    0f:ee:27:60:50:64:15:f8:d7:b9:ea:24:c0:9f:9d:
                    e6:9b:1c:da:16:67:4b:a8:6a:42:3c:af:95:dd:be:
                    80:c2:5d:69:bf:ae:db:e9:31:75:16:91:f7:85:a8:
                    d5:70:3e:1d:d8:69:a3:14:03:2a:b8:05:73:ff:8a:
                    c1:bd:36:b3:df:32:8f:e2:90:e7:a5:f6:ee:36:3c:
                    73:39:88:fe:66:cc:62:47:bf:a4:cf:8b:12:96:ee:
                    9c:a3:92:50:4f:65:89:2c:20:51:60:9f:f7:3f:96:
                    cf:9b:c1:eb:8b:63:6c:f9:d6:37:29:5c:92:b7:84:
                    27:66:21:24:41:ac:b1:23:2f:a9:fc:ac:ec:56:1c:
                    68:02:8e:f2:90:0d:53:08:43:b2:97:a1:4c:0a:e0:
                    9a:ab:0f:4e:b7:22:a7:a8:bf:5b:6a:1e:70:71:f0:
                    ec:92:64:b4:35:09:5c:e8:eb:8d:c2:1d:31:cc:45:
                    5f:7f:dd:ad:c6:d1:c9:4b:36:10:63:7d:7c:0f:e8:
                    96:90:f8:90:ed:f3:8e:cb:7b:47:a2:fa:46:c8:e2:
                    56:ae:41:0b:41:83:31:95:da:64:ac:29:d4:d6:1d:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:56:D2:A2:93:7B:2E:85:E2:BF:27:EB:1F:7B:CF:BD:07:0E:BA:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/524a63bf-4c6c-33c5-8f16-ebfa02114794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:45:4e:27:a4:70:b4:db:d3:06:b9:ca:78:10:37:02:de:82:
         cb:75:bc:7d:3d:c9:59:2c:c5:86:75:ef:19:cc:f1:05:ee:40:
         e4:ff:b6:ad:e9:49:0e:cc:97:b9:4d:f3:7c:e6:3b:65:dd:9f:
         8c:a5:5f:ee:1a:6e:a4:da:b9:54:57:44:84:73:87:de:6f:08:
         f4:b7:d7:ec:db:cd:a6:f2:e3:a9:14:3b:98:5c:01:a6:c4:6a:
         4d:2e:3d:b1:78:4d:43:23:8d:4d:a2:e4:fb:7c:2e:9e:10:70:
         35:bf:2f:8b:10:db:f5:cb:b8:72:b4:e1:3d:aa:4d:08:f0:a3:
         5a:f3:39:86:fd:60:64:fb:eb:da:65:d3:39:a3:8a:30:8a:6b:
         5a:b6:cd:17:86:df:c9:33:14:d4:e6:8d:47:a3:1d:15:2a:c9:
         b7:78:cf:d2:89:7c:eb:4a:1a:7b:72:1c:ec:96:47:22:45:45:
         80:5b:3d:a5:3e:56:ff:e8:97:ad:49:f1:83:c9:0f:59:73:a3:
         82:2b:7c:29:bb:8b:b6:6e:70:55:37:af:37:ab:74:0e:76:41:
         5d:ff:7b:92:01:2f:24:14:15:e2:59:a8:91:8e:ca:2f:3a:7f:
         15:53:4d:e6:dd:b5:1c:a1:70:07:40:02:61:ac:b4:73:b5:f0:
         14:19:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:26 2025 by rpki-client