Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a917afc-3cb4-3a5a-b388-f884d9b17576.roa
File:                     5a917afc-3cb4-3a5a-b388-f884d9b17576.roa (raw, json)
Hash identifier:          45VYxY5yzRuWX+z5QiWPHVaapFCPRWwRPaLuy6srJHw=
Subject key identifier:   E5:D4:A6:B0:91:CD:AD:5E:B0:BA:CB:11:37:90:40:2D:AE:D6:46:BB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81464B44B9DDE94AB4CCDF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a917afc-3cb4-3a5a-b388-f884d9b17576.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:3080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:4b:44:b9:dd:e9:4a:b4:cc:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=d540872f-a4c3-49fc-a3f2-9931c4da56ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2e:30:e5:ad:c0:d4:bf:8b:93:a9:29:68:16:
                    15:e3:60:7f:ee:ba:77:13:fa:b6:e3:94:82:6b:cd:
                    77:2b:48:89:ce:84:3b:63:15:0b:65:e0:aa:86:3f:
                    12:71:c2:48:2b:44:7a:4f:c3:bc:97:85:8d:db:26:
                    82:48:4a:3e:d7:9a:50:6c:d2:b3:ca:61:61:a5:e7:
                    be:0e:ed:b5:29:ad:fd:d0:16:43:36:21:f8:5a:92:
                    36:0d:ea:c5:dd:f0:04:36:6b:3f:d4:f8:9a:3f:d3:
                    7b:e9:18:c5:05:a8:0e:67:d4:68:2b:7b:75:0a:62:
                    b5:93:e9:8b:45:2d:65:19:1b:13:70:7f:e9:68:9a:
                    10:60:e5:e5:7c:36:7a:08:ac:3f:c3:84:ae:00:98:
                    b7:5f:88:86:8f:9d:f6:ab:7e:9f:0f:e2:98:6c:b2:
                    f5:fd:52:da:90:b5:1c:37:c3:fc:40:e7:23:cc:1c:
                    f7:a4:b5:3e:92:bf:1f:44:e8:f6:b9:08:59:41:80:
                    47:a9:a2:bd:6b:a5:ba:e5:fa:b1:7a:2b:e1:a9:69:
                    59:74:3b:9c:7a:49:5e:49:b0:cf:12:46:14:62:b9:
                    14:1f:ba:60:00:de:0e:f3:ee:ce:4a:9e:c5:08:c3:
                    fb:20:35:78:b0:bf:cb:1c:1d:ae:7a:01:68:2e:c4:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D4:A6:B0:91:CD:AD:5E:B0:BA:CB:11:37:90:40:2D:AE:D6:46:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a917afc-3cb4-3a5a-b388-f884d9b17576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c1:43:f2:a9:e1:97:6c:f3:eb:13:db:a7:00:d0:a5:d2:41:
         dd:ea:39:d9:47:8e:2d:5d:4a:4d:09:a0:e3:0a:c5:42:b2:24:
         17:49:ca:ef:a4:fd:1a:88:af:47:75:e6:2e:17:0d:e6:52:4b:
         6a:3c:2f:c0:25:1d:18:7d:27:ae:eb:a6:ab:2f:a5:a3:56:11:
         e5:7d:9d:ea:82:c7:89:1b:9d:e1:df:fd:ce:7a:96:d2:f0:c3:
         b4:97:bd:19:b6:b3:83:ed:2d:15:5b:8a:3d:f4:cf:c9:d6:f5:
         31:06:c9:a2:53:5c:92:7a:b6:bf:d2:3d:9b:f1:40:b7:10:2f:
         54:c5:cb:52:9d:47:1c:43:53:fa:60:80:3f:40:44:3c:27:ab:
         21:05:e2:4c:39:71:b7:f3:60:f5:91:9c:fa:24:86:9b:14:6b:
         81:87:e9:a3:05:61:a0:a7:8c:ae:46:5b:af:71:01:91:1f:16:
         d5:ec:06:cc:f8:17:9b:9f:2e:b7:dd:d4:5b:84:34:5a:75:68:
         4d:27:0d:f1:ea:de:10:94:0a:33:33:cb:f7:55:31:60:3d:b1:
         c7:d9:c0:ce:8f:90:4a:ef:be:46:85:99:6c:a0:a6:98:da:91:
         17:6b:f8:c0:f4:21:2e:07:86:0f:d8:9c:10:fb:f7:50:aa:0c:
         67:d1:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:40 2025 by rpki-client