Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/582dc307-e918-3ff4-94bb-d05ae44d8939.roa
File:                     582dc307-e918-3ff4-94bb-d05ae44d8939.roa (raw, json)
Hash identifier:          xC5YmPrJHWMBByGftY12iSD4xB1RUZ28fPOThzpgB0Y=
Subject key identifier:   FD:CF:ED:30:30:4B:20:02:61:73:AD:04:3C:91:67:04:CA:DD:5B:BD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F2E52216F403D0A4A4593CA8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/582dc307-e918-3ff4-94bb-d05ae44d8939.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:9800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:22:16:f4:03:d0:a4:a4:59:3c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=c0c21e40-5305-46fd-8696-3218bacf5ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:22:e8:2c:39:71:d9:fa:f4:29:f1:0f:76:
                    47:e6:a4:18:8e:40:d3:11:8e:11:9f:89:83:37:60:
                    bf:9d:fc:98:b2:a9:3a:ee:86:a2:f4:b9:98:36:9a:
                    1b:83:e1:ff:35:84:6a:25:ac:e2:57:49:9e:68:be:
                    ab:18:2a:2c:58:67:81:99:fa:19:cc:ea:f7:67:54:
                    b0:3e:d5:fe:62:6e:13:3a:d2:e2:76:90:2b:aa:68:
                    9a:a9:8a:ea:d5:24:93:ed:90:a2:96:7a:83:ae:81:
                    3c:5e:00:ea:3d:46:91:f6:5b:0f:f8:22:54:c0:a3:
                    d7:69:23:a1:ef:b5:2b:c9:a5:24:00:ba:e9:17:9a:
                    ba:29:14:74:f5:0e:07:b6:8b:99:48:a4:f9:db:2e:
                    04:6b:41:59:4d:e2:be:60:b6:8b:e6:f8:21:e9:a9:
                    46:04:01:eb:c4:2e:19:32:10:72:87:11:c0:08:f8:
                    ce:bc:de:c8:d9:9c:e7:b4:d1:7b:18:4e:58:84:d5:
                    bc:6e:9c:b2:4b:6c:cb:61:11:6e:f0:27:39:68:af:
                    34:0c:d3:42:57:99:16:37:f7:e4:e5:e1:39:1a:9b:
                    98:f8:dc:cb:3f:48:5c:a5:ae:5b:a2:82:91:08:86:
                    fa:93:f4:0b:6b:63:b6:bd:87:0f:75:6c:24:de:56:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CF:ED:30:30:4B:20:02:61:73:AD:04:3C:91:67:04:CA:DD:5B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/582dc307-e918-3ff4-94bb-d05ae44d8939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d6:96:9f:e8:8a:b9:30:7c:df:69:a2:2f:51:d5:2a:88:58:
         23:81:e8:a5:70:79:b4:52:12:c2:64:8e:be:a5:72:a1:02:44:
         c2:c7:2a:ff:6d:09:14:82:0b:09:9c:4c:02:cf:51:9a:2f:eb:
         97:eb:5b:ac:04:7c:60:6e:b6:14:03:5c:75:d2:25:13:da:72:
         59:3c:14:78:ec:16:91:6f:3d:8d:9a:44:69:18:25:44:73:82:
         bd:31:af:86:47:50:aa:7c:92:49:13:e6:5e:0e:44:1c:6b:0d:
         c9:fe:69:33:d7:73:7d:b8:26:b4:78:db:87:40:72:a2:b0:9a:
         39:96:a0:6d:7b:3e:83:50:b8:b1:52:6a:14:d6:0f:67:2f:d1:
         a2:3b:59:49:02:74:30:7d:76:2b:f1:3b:87:c5:ab:56:7d:cb:
         3c:85:12:cc:83:b2:be:22:ae:31:e7:a7:be:26:92:d3:8e:d7:
         1b:1f:3e:96:91:e4:1e:91:d1:e6:1d:c7:65:28:d1:8e:c8:cd:
         01:dd:e0:ae:75:bb:0f:c3:7a:78:10:61:ab:6b:f1:77:10:6b:
         fd:90:8b:f7:bf:e2:7a:04:02:80:25:5b:61:bb:3a:b4:46:dd:
         79:4b:89:11:d7:c3:33:34:9c:ac:65:04:35:5f:fa:56:f5:86:
         75:34:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:52:17 2025 by rpki-client