Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6fc7196a-de9b-3784-8d23-efca621e507a.roa
File:                     6fc7196a-de9b-3784-8d23-efca621e507a.roa (raw, json)
Hash identifier:          lAWGm267B/VyULGQYff/9h4m/lQy58r6C+frb6fILY0=
Subject key identifier:   86:5C:85:5D:58:66:E3:CA:FB:88:5E:C8:AC:CC:78:E3:B9:05:DF:95
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412590C52B7BCEBF56B49E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6fc7196a-de9b-3784-8d23-efca621e507a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:ab80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:59:0c:52:b7:bc:eb:f5:6b:49:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=869d9e14-60d0-403b-8389-3e2eb446e747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b7:35:e2:c6:bb:75:4f:ca:79:0f:a2:6b:28:
                    08:0c:81:89:cf:17:85:77:35:39:24:f5:17:64:39:
                    25:b7:b1:95:a3:7e:e7:a9:ed:e4:21:23:14:51:70:
                    75:99:ee:31:e4:82:20:a2:d1:ca:10:d5:9b:76:9c:
                    b3:be:5a:7e:7f:12:5f:ff:5b:75:cc:7e:c9:04:63:
                    d8:84:b9:25:90:a3:99:03:fa:79:35:74:9d:ad:6d:
                    1a:52:8f:2a:a0:98:4f:7e:a5:7c:aa:d0:f2:69:c2:
                    a6:73:3b:f3:66:5c:58:ff:67:4e:b0:01:6c:ea:1f:
                    80:18:38:3b:06:5f:eb:35:e1:2f:45:d1:0d:1e:8a:
                    43:67:9b:7e:a1:dd:eb:db:13:8a:66:5a:48:26:fb:
                    a6:82:12:a1:7a:46:3e:3f:72:4b:a8:23:1b:f9:d1:
                    38:af:7e:4d:05:01:11:19:40:cf:9e:cc:c7:e0:35:
                    0b:e1:36:71:06:10:c5:f9:c3:4c:1f:89:86:28:4f:
                    e0:0c:06:9f:6e:cf:46:1f:9a:9d:52:5b:a4:de:88:
                    11:66:ca:1d:1f:8c:d6:59:c4:8d:c8:13:38:c6:b3:
                    e6:48:28:a5:79:ac:de:1d:4a:b2:cc:bb:e7:5d:d7:
                    33:50:e0:1d:02:c1:66:28:21:17:da:a8:5b:02:0c:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:85:5D:58:66:E3:CA:FB:88:5E:C8:AC:CC:78:E3:B9:05:DF:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6fc7196a-de9b-3784-8d23-efca621e507a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ab80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a9:f4:fc:71:df:27:5c:b7:ac:de:b9:17:3e:66:de:0e:54:
         7f:27:17:49:7b:b2:5f:cc:b8:b6:19:31:f9:dc:75:18:43:dc:
         27:c7:60:4a:b2:33:6d:32:62:da:91:5f:ad:50:da:51:7e:4e:
         5f:8c:1b:e7:54:6d:c4:55:9b:df:92:32:74:4a:54:8e:a4:46:
         27:56:2c:3a:12:5d:5f:a0:6e:d3:72:d5:45:c4:ef:cd:de:f0:
         b4:bb:3e:c7:c1:1c:bf:aa:db:71:86:9c:f1:13:5b:89:dc:0f:
         3f:15:09:80:ef:5c:91:1d:68:a9:56:05:19:9d:33:d6:32:d3:
         28:86:0c:3f:bb:1d:49:ba:2f:d4:2b:65:93:38:64:28:70:42:
         f1:53:e7:7a:7e:86:c6:d7:c6:31:dd:0d:f0:4d:69:49:5a:13:
         d5:70:13:f3:c4:ca:f0:67:03:d0:72:dc:00:32:52:15:61:7e:
         ce:f7:fd:dd:d1:7d:eb:81:cb:61:18:16:87:b6:9a:4b:04:34:
         39:a7:57:35:24:9e:e0:bc:52:0f:9f:a0:e9:91:bb:c0:23:75:
         6d:1b:18:79:49:25:eb:2e:73:d7:4e:01:80:df:0c:e4:89:81:
         1c:15:09:35:a9:4e:69:54:f0:8c:4d:9d:0f:d6:62:65:9d:29:
         3f:b8:a6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:07:20 2025 by rpki-client