Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f6f9e8e-e9d6-34ff-8ea6-a5e0c071b9e2.roa
File:                     5f6f9e8e-e9d6-34ff-8ea6-a5e0c071b9e2.roa (raw, json)
Hash identifier:          bnDWdOC35u99jWKv1xFC4oBIWVxRIgJZddL4cVycbsM=
Subject key identifier:   79:5A:07:97:90:5E:64:98:BD:83:13:61:B4:08:21:33:2D:3C:BD:67
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81465EE79A50F77910605390
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f6f9e8e-e9d6-34ff-8ea6-a5e0c071b9e2.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:6300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:5e:e7:9a:50:f7:79:10:60:53:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=2d144ebc-2eab-4690-8c49-42260d01016c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:16:f2:61:9a:6c:c0:56:d8:e2:2f:0a:ac:
                    a1:9f:4a:85:81:af:d4:6e:4f:af:53:31:4e:8e:41:
                    c5:55:ab:18:f3:cd:03:48:04:77:65:84:b4:2f:1f:
                    39:b7:db:6f:2d:6b:37:e3:4f:f9:f4:5c:55:c6:92:
                    d6:51:e4:50:64:5b:a7:36:97:84:76:69:72:fc:9e:
                    b4:38:99:a6:52:ac:d8:85:53:64:1c:dc:fd:2d:cb:
                    62:2a:6d:0f:5c:ac:42:ed:9f:5e:22:66:21:ad:fb:
                    69:62:03:c2:f9:18:a1:ac:84:c7:f7:36:7f:2e:fe:
                    9b:b1:b9:7a:02:cb:d2:59:57:fa:7d:46:02:fa:20:
                    d7:81:3d:28:50:f2:19:6b:f0:17:d4:5a:1d:7d:be:
                    4f:08:1f:6d:38:4c:bc:b1:09:51:1a:3d:b4:dc:2b:
                    68:d6:09:83:c9:4f:21:db:5e:75:97:62:f5:5e:eb:
                    b2:7d:a3:2d:d7:e7:70:ce:4b:65:39:64:ba:08:eb:
                    b3:9d:f3:05:9a:38:4a:76:d4:7a:05:9a:74:f3:e3:
                    50:1f:14:01:ab:10:31:84:8f:64:df:51:c0:7d:53:
                    96:68:08:36:aa:5d:9d:cb:af:1d:2c:bb:2c:72:df:
                    10:56:dd:96:33:52:98:ca:e0:59:41:ad:25:bf:40:
                    1c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5A:07:97:90:5E:64:98:BD:83:13:61:B4:08:21:33:2D:3C:BD:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f6f9e8e-e9d6-34ff-8ea6-a5e0c071b9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e7:8c:4f:5f:cc:fa:68:86:04:7a:ec:3a:7d:93:46:a9:00:
         c1:a3:29:8b:fe:35:f8:39:87:cd:d0:93:e2:41:2b:45:dc:97:
         95:c1:dc:d1:38:f2:66:76:99:2b:9e:7a:b3:79:9e:4c:f4:a7:
         67:33:bb:ac:8c:0d:6a:06:f2:2a:b8:7a:82:90:97:8b:cc:52:
         ef:04:c3:d9:1e:ca:cc:1f:1a:56:45:e2:e0:46:de:90:17:70:
         ef:1b:bf:7e:12:04:6c:bd:df:4e:fe:f0:88:21:60:d9:eb:02:
         d5:10:9d:d5:c4:cc:1b:0d:ff:db:d1:77:3a:64:20:c7:9e:8c:
         a1:3d:fb:06:df:d5:64:98:0d:f0:c0:2b:3e:6a:7f:25:15:2f:
         7e:8a:19:a3:d0:1f:15:72:ac:56:d5:c9:ca:96:13:f6:14:87:
         fb:5c:bf:e5:25:12:f8:90:82:ee:09:ce:7d:cd:96:45:7d:4c:
         89:9f:09:d3:e7:cd:5f:2d:1e:33:9c:b9:49:ff:cc:a5:0e:20:
         93:23:43:31:12:55:76:80:b9:bd:10:08:59:0a:07:e2:52:64:
         69:40:f1:57:71:cc:ec:2f:8e:16:ad:a0:d9:87:16:45:cc:00:
         67:e9:25:a2:e9:0e:8a:e9:89:70:15:f3:66:88:24:10:03:c4:
         9f:65:4e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:08:48 2025 by rpki-client