Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/908ad269-4259-3cd8-a11d-d644fe15b8e7.roa
File:                     908ad269-4259-3cd8-a11d-d644fe15b8e7.roa (raw, json)
Hash identifier:          SOBTF00GdH1Uwexe1vIIaC1gZwvNzIcM4WbhkMNeHyg=
Subject key identifier:   48:0C:4B:8B:52:5D:6F:C6:FD:ED:A0:47:DD:63:BD:CD:A3:9F:ED:AD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DB6D5B2711D673C52ABE00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/908ad269-4259-3cd8-a11d-d644fe15b8e7.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:5f80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:6d:5b:27:11:d6:73:c5:2a:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=98e50f4a-8c07-423b-b382-0c0c3e8a6a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:d8:85:8c:e4:88:85:64:52:3f:f0:eb:e9:
                    f5:b8:8c:c4:63:6a:37:7d:26:47:c8:ab:2c:51:8b:
                    f9:01:6a:6f:a8:ac:41:57:3e:21:4f:7a:de:eb:84:
                    10:bf:e0:5f:ad:1d:a0:d3:0a:d5:5c:53:71:ee:97:
                    62:49:b8:a2:b6:5f:9b:69:37:4a:d9:65:6a:f8:fe:
                    00:c2:41:cc:36:ae:17:63:23:f9:11:cd:eb:35:15:
                    af:6c:82:df:fe:fb:c8:7b:4e:c6:ba:d9:7e:3b:d4:
                    10:89:35:6f:56:7a:23:ad:a8:54:03:5f:0c:34:5b:
                    92:55:fc:d2:90:ee:20:c6:59:f8:22:ba:f9:c2:5d:
                    ff:9d:75:5a:10:6a:51:61:9e:80:e1:f9:a7:42:98:
                    32:24:12:d0:69:f1:1e:a5:94:ec:58:3f:1c:d6:b8:
                    04:eb:6d:3e:c0:a6:31:ae:03:fc:5d:32:6b:6d:c9:
                    f2:06:e5:ee:9d:04:0b:6e:36:c1:b8:4e:22:5b:38:
                    bc:2d:fb:e4:8b:c0:53:60:dd:fe:94:2c:d0:a3:55:
                    ff:94:3c:19:9b:fd:42:db:8f:ac:1d:57:ee:14:0d:
                    07:41:da:15:02:49:0c:2c:bf:43:5c:1a:f5:6b:47:
                    b9:7d:95:d6:13:0a:f7:3d:25:f4:86:93:b8:58:4d:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0C:4B:8B:52:5D:6F:C6:FD:ED:A0:47:DD:63:BD:CD:A3:9F:ED:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/908ad269-4259-3cd8-a11d-d644fe15b8e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5f80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9b:ac:58:c0:f5:dc:48:37:1b:ce:39:8a:28:69:4c:e3:6a:
         1d:b4:e8:1e:59:7c:40:f5:ff:ce:ff:27:fe:20:c3:6f:97:61:
         17:8b:d1:90:f1:81:fc:82:78:67:c2:2e:9a:92:47:66:79:9a:
         cf:4e:1b:96:84:de:ed:1b:33:cd:7f:eb:ee:30:85:19:d5:47:
         db:5b:31:35:08:0b:56:35:66:58:81:d0:b0:ae:71:31:14:b7:
         65:00:3a:aa:37:9a:54:a2:0d:25:e0:b8:2a:a2:53:4a:46:c7:
         9a:2f:92:0a:e1:c6:b8:d2:0a:2c:24:f0:01:18:c0:67:b7:f5:
         64:78:8c:54:c3:11:3d:19:e4:9b:8f:1d:ea:f7:32:16:47:67:
         77:06:56:0b:02:99:72:18:ba:76:09:70:95:d4:eb:d7:22:a6:
         8d:4c:0f:d9:c9:5e:73:ca:95:41:c7:4b:20:1d:f9:b3:93:c9:
         25:2d:0e:81:8e:d6:52:50:d1:3d:1e:34:9c:45:14:a0:14:20:
         1b:51:61:51:dd:92:90:39:bf:64:d7:81:a5:9b:c7:45:dc:7c:
         4b:18:d0:2f:76:04:70:49:96:7c:20:73:c9:d0:ba:72:bd:8e:
         59:33:0b:16:d9:fa:83:62:fe:d3:cd:e0:f8:24:07:19:0a:93:
         46:64:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:09 2025 by rpki-client