Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/92209de2-ccc0-37fc-ac5c-29f247cb9323.roa
File:                     92209de2-ccc0-37fc-ac5c-29f247cb9323.roa (raw, json)
Hash identifier:          qGDQgIo7XV6lqarzE68CIrZIXWJaddDS4UTckwOR6Yo=
Subject key identifier:   24:A6:4C:5B:7A:A9:EB:E0:1E:1E:81:CF:98:60:AF:3B:42:F2:EE:D4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124953C903E6535E909E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/92209de2-ccc0-37fc-ac5c-29f247cb9323.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:9200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:49:53:c9:03:e6:53:5e:90:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=298d5ddd-e024-4b39-af58-17c37c717d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:c1:cd:8d:d6:dc:f0:4b:7d:74:c8:af:f2:
                    ba:0f:47:5d:52:b5:f4:71:04:ab:9b:60:2a:a5:ec:
                    31:d0:e4:f1:a2:c7:53:41:91:e4:bd:42:c9:00:9f:
                    b8:77:96:fc:12:17:c4:e0:a7:df:4d:9a:46:d1:56:
                    af:8a:96:1d:05:87:85:e8:52:8d:53:ed:4d:83:c5:
                    db:01:3a:2b:7f:05:52:fc:58:23:68:5f:f4:92:15:
                    0b:f0:cf:8a:b2:ed:f4:b4:78:4d:a9:24:2d:fd:0b:
                    62:1f:05:52:ce:23:bf:a6:56:42:2c:cf:8b:58:f9:
                    38:d4:05:bd:43:3c:f0:72:9d:67:db:41:a5:51:4f:
                    21:99:8e:47:74:dd:4d:80:17:ce:2e:76:c0:1d:1c:
                    1c:27:3b:53:9f:7a:de:cc:2c:ff:69:36:73:0d:87:
                    fc:ed:19:88:62:26:ca:99:05:f8:6b:e5:1b:2d:b3:
                    19:05:1b:1a:44:7e:99:51:e8:38:7c:ad:80:0b:3e:
                    73:6b:11:3c:d4:e5:54:d0:23:38:0f:ff:ea:a5:52:
                    5a:68:a0:ce:3c:11:f3:5c:4a:46:b5:b4:e3:4a:1d:
                    ff:8b:0f:79:b9:e3:7d:a2:81:be:91:8f:4f:e1:ee:
                    9b:44:07:68:98:e9:2f:b3:50:d7:69:38:ec:c0:4c:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A6:4C:5B:7A:A9:EB:E0:1E:1E:81:CF:98:60:AF:3B:42:F2:EE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/92209de2-ccc0-37fc-ac5c-29f247cb9323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:f9:f7:ef:86:62:b2:db:0b:90:31:d6:e2:64:f2:67:16:
         a6:bb:7c:c9:f4:f3:0b:98:8e:c1:3d:76:a5:64:fa:53:df:ab:
         4a:13:1c:07:63:33:a9:b8:67:6e:05:66:58:4c:15:9b:5f:22:
         8e:cb:f1:06:6c:6c:73:7b:7f:75:5e:9e:e4:3d:2a:68:f9:8a:
         9a:59:b1:db:04:d4:a8:d5:7b:c9:1d:05:0b:2e:7c:c7:57:dd:
         e8:c6:2b:63:b5:85:7d:dd:31:d3:a8:e2:d8:3e:b3:32:89:e9:
         be:f4:4d:fb:28:c7:4f:53:58:69:17:db:81:12:6c:c5:aa:88:
         ad:3e:b5:72:53:8a:87:29:0e:5e:24:5b:89:42:07:3a:05:67:
         96:7e:5d:cf:8a:88:8e:47:65:7b:a4:3f:e0:90:f7:94:f4:b5:
         bf:a5:c7:0e:f5:e8:df:5b:44:c8:c2:a1:bb:3e:72:7e:8d:a6:
         c1:54:1c:bb:7b:e9:98:b1:a2:df:e8:99:04:bb:5d:6e:71:14:
         fc:4f:27:8b:2f:54:6c:8e:fc:a4:aa:5c:f7:91:d7:4a:26:c7:
         ff:08:28:4f:b7:8b:50:24:c4:0a:63:49:d0:18:83:ee:7d:59:
         fd:75:38:d3:49:f9:4e:91:ed:4c:76:57:43:d4:a4:e7:ad:22:
         64:e9:1f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:40 2025 by rpki-client