Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e05347c-dab4-3861-bf46-07e20ade4d89.roa
File:                     6e05347c-dab4-3861-bf46-07e20ade4d89.roa (raw, json)
Hash identifier:          OUyhiUkjexJ/Itl31OC+qdqX3OctEy03BNc3HXO4I+I=
Subject key identifier:   E9:E4:22:59:58:16:44:64:CA:9D:92:E3:56:87:32:70:AC:8D:0B:90
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A7FE08EB052798F7905482280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e05347c-dab4-3861-bf46-07e20ade4d89.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     30036
IP address blocks:        2604:2d81:1480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:8e:b0:52:79:8f:79:05:48:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=8c2d1556-6f80-40fb-8b84-54646399785e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:65:a4:f7:f5:cd:79:66:1f:dc:68:b6:7b:
                    31:38:4a:07:67:71:9f:67:36:ed:40:22:49:06:a9:
                    b3:3d:c5:a3:9c:a5:02:24:f6:6b:66:66:22:fa:c2:
                    6c:67:c0:ab:1d:b9:c4:17:8d:0e:a4:de:36:81:c5:
                    7c:89:4f:3d:92:14:72:31:02:59:a2:5a:a2:ba:8c:
                    a0:96:4f:9c:85:73:80:0e:92:aa:14:5f:63:4e:9e:
                    f2:39:47:f7:61:d4:8b:30:13:53:d4:85:07:64:9e:
                    8c:9a:a7:5d:22:6a:cd:ad:df:de:f5:05:6d:5d:42:
                    94:b1:41:8a:d4:48:3d:03:d4:2f:96:a7:c4:76:48:
                    8e:05:6b:80:14:2f:83:0c:b1:11:c1:a0:8b:0d:8f:
                    ee:55:ee:ff:4b:f1:3b:81:59:b6:03:2b:3a:81:4e:
                    3c:91:d2:aa:e1:43:3f:a0:dc:48:2c:7d:7b:f7:a3:
                    a5:99:6d:83:c4:83:b5:3f:0b:28:60:ae:4b:e7:d7:
                    ce:a2:cf:07:e8:88:19:a4:f2:36:96:f5:1a:44:3b:
                    3e:62:c8:8e:07:8e:8a:cd:35:54:c2:89:03:db:fb:
                    1f:9e:4a:6f:ca:bf:29:51:b1:26:a9:2b:84:f7:cd:
                    ad:f8:ed:38:05:62:b5:70:9c:48:84:d9:1f:68:c1:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E4:22:59:58:16:44:64:CA:9D:92:E3:56:87:32:70:AC:8D:0B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e05347c-dab4-3861-bf46-07e20ade4d89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:2d:49:41:e4:f8:4d:ac:cb:b8:9f:49:4b:05:36:c5:a7:
         8a:eb:d7:9a:6a:d6:fd:d9:3d:a8:22:97:2d:26:e9:58:2d:7c:
         13:06:a3:9a:61:9d:aa:98:3d:0a:a9:5b:82:d6:9a:d1:51:92:
         68:8a:63:27:d4:54:dc:0d:cc:2b:1f:06:54:db:fb:10:4a:d6:
         4c:f9:0d:8d:91:aa:90:5a:a5:10:0b:c1:bf:bb:80:02:e6:d7:
         36:67:55:f9:af:c3:4e:1e:56:f2:4d:64:e1:24:41:d6:65:81:
         59:17:5b:a5:61:da:62:59:20:d9:ab:ef:e3:53:a7:f1:7c:d2:
         be:5b:b3:3b:c7:d1:76:85:6c:5e:3c:fb:64:ca:01:e3:04:8e:
         07:e8:2a:18:4a:81:f5:2f:c1:15:e7:9e:0f:8a:cc:02:25:1a:
         3a:bb:9e:de:63:83:b2:e9:0a:83:a2:8b:2d:df:19:e1:04:76:
         eb:4c:1c:5f:b6:ea:41:11:b9:93:bc:4d:59:96:02:ff:ce:88:
         08:04:a3:ee:cc:fe:8b:d0:fd:a5:bb:39:a2:de:28:f0:ef:e5:
         43:63:22:f5:bd:b8:9a:03:79:3e:99:df:8c:57:d8:90:e5:96:
         82:c4:4a:1d:96:f5:8a:44:24:f5:dc:65:ad:35:ec:30:de:00:
         cb:1a:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:03:24 2025 by rpki-client