Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e65bf30-e09b-3cb3-bcc4-c5a9276deb26.roa
File:                     7e65bf30-e09b-3cb3-bcc4-c5a9276deb26.roa (raw, json)
Hash identifier:          blBYHTurJci7QRXPOKeGRNwnu+8ZuvEV+cc6T2lD7j8=
Subject key identifier:   24:50:AB:38:87:D1:3F:86:CA:E3:DC:0B:0C:82:05:3C:BE:ED:DA:98
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DBFB93B357563ED154E340
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e65bf30-e09b-3cb3-bcc4-c5a9276deb26.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:5800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:fb:93:b3:57:56:3e:d1:54:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=8a5d09c4-63af-4d34-bcb4-d6f8656597f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7e:c1:e5:da:66:fb:71:ad:d6:24:b8:62:b8:
                    51:a1:67:72:50:0e:18:5a:e7:ff:55:a5:97:ec:a9:
                    32:2f:40:63:c1:e0:70:f8:d4:24:fe:f7:45:6e:55:
                    84:b7:d5:b2:cb:da:d4:cf:82:a5:9c:39:55:7c:b5:
                    72:61:2f:11:0d:2f:e5:01:77:64:17:45:d3:ce:23:
                    48:af:2c:2a:0b:0b:d8:19:0f:1c:b8:9e:c2:01:8e:
                    77:9a:f3:66:5d:3d:60:7a:29:2a:d7:5c:44:20:4d:
                    cf:a5:23:45:0b:94:cc:c9:e6:3c:e3:f9:4c:9d:8c:
                    30:79:97:13:81:21:19:fb:ab:14:77:55:a3:92:da:
                    52:02:43:e9:c3:f1:95:77:a2:36:3e:5d:cc:ec:a7:
                    3b:f8:35:c4:8b:8c:8c:d9:e8:34:a2:c5:6a:d1:26:
                    e4:45:cf:9d:f1:42:21:94:6d:40:5a:36:9b:c2:51:
                    a9:3f:63:a1:eb:74:46:bb:d1:37:b9:2f:7b:9c:1d:
                    3e:bc:e7:3f:7c:40:8a:81:f7:29:a4:09:e8:aa:55:
                    70:d2:81:3d:05:b6:ef:7c:3d:4b:7b:a8:c3:32:75:
                    15:d0:a7:55:15:91:f9:55:96:b7:64:dd:73:2a:09:
                    87:d3:3d:0a:1b:dd:80:32:9f:5e:45:b8:1d:42:c2:
                    90:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:50:AB:38:87:D1:3F:86:CA:E3:DC:0B:0C:82:05:3C:BE:ED:DA:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e65bf30-e09b-3cb3-bcc4-c5a9276deb26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8a:88:36:64:eb:c4:98:b3:92:0c:61:db:60:29:ca:ed:8b:
         41:a1:a8:55:46:d1:56:72:87:0a:a8:ef:c9:74:6e:f8:df:19:
         1c:1e:07:80:1b:d8:b8:0c:5c:eb:ca:c7:e4:d2:3e:12:71:5f:
         e0:ca:9b:9e:93:84:44:48:4e:7a:c1:75:19:67:39:30:15:91:
         ef:22:34:bd:d9:05:d0:0c:96:d3:c0:3d:79:53:b7:07:59:93:
         91:fa:0b:3a:13:3c:e2:14:6a:6b:8d:d2:c7:c2:de:9b:06:5f:
         10:29:75:0c:33:80:5f:15:43:03:db:fb:80:06:ef:15:5e:07:
         7c:07:36:90:43:cc:1c:bd:6e:da:7a:b7:72:1e:c5:43:88:a6:
         47:99:36:49:fc:f2:cf:a3:21:07:44:04:bb:17:67:6b:05:81:
         0e:ea:2e:74:29:8b:c5:26:74:9f:b0:28:ce:9b:5a:44:a2:b6:
         16:45:83:77:9c:c4:69:f1:f4:e2:0f:17:6a:ee:56:7c:35:97:
         16:e1:8a:c6:55:c9:63:9c:61:d8:6f:6d:9d:f0:a6:17:f9:aa:
         df:3e:d5:fa:c4:4d:9d:78:d2:8f:4a:89:63:f3:61:e3:60:6a:
         f7:23:e8:cf:18:9b:30:ec:82:0f:0d:d7:dc:6e:dc:07:25:16:
         37:75:b6:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqG2/uTs1dWPtFU40AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
OGE1ZDA5YzQtNjNhZi00ZDM0LWJjYjQtZDZmODY1NjU5N2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh37B5dpm+3Gt1iS4YrhRoWdyUA4YWuf/VaWX
7KkyL0BjweBw+NQk/vdFblWEt9Wyy9rUz4KlnDlVfLVyYS8RDS/lAXdkF0XTziNI
rywqCwvYGQ8cuJ7CAY53mvNmXT1geikq11xEIE3PpSNFC5TMyeY84/lMnYwweZcT
gSEZ+6sUd1WjktpSAkPpw/GVd6I2Pl3M7Kc7+DXEi4yM2eg0osVq0SbkRc+d8UIh
lG1AWjabwlGpP2Oh63RGu9E3uS97nB0+vOc/fECKgfcppAnoqlVw0oE9BbbvfD1L
e6jDMnUV0KdVFZH5VZa3ZN1zKgmH0z0KG92AMp9eRbgdQsKQkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCRQqziH0T+GyuPcCwyCBTy+7dqYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2U2NWJmMzAtZTA5Yi0z
Y2IzLWJjYzQtYzVhOTI3NmRlYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABOKiDZk68SYs5IMYdtgKcrti0GhqFVG0VZyhwqo78l0bvjfGRwe
B4Ab2LgMXOvKx+TSPhJxX+DKm56ThERITnrBdRlnOTAVke8iNL3ZBdAMltPAPXlT
twdZk5H6CzoTPOIUamuN0sfC3psGXxApdQwzgF8VQwPb+4AG7xVeB3wHNpBDzBy9
btp6t3IexUOIpkeZNkn88s+jIQdEBLsXZ2sFgQ7qLnQpi8UmdJ+wKM6bWkSithZF
g3ecxGnx9OIPF2ruVnw1lxbhisZVyWOcYdhvbZ3wphf5qt8+1frETZ140o9KiWPz
YeNgavcj6M8YmzDsgg8N19xu3AclFjd1tjo=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:02:20 2025 by rpki-client