Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3d76336-9ed3-36b0-b747-ca9114cd1c67.roa
File:                     a3d76336-9ed3-36b0-b747-ca9114cd1c67.roa (raw, json)
Hash identifier:          LCFkRec7cW9YX76dUQwJSyrx1aSsIEYQZ9V/yUR/syA=
Subject key identifier:   2A:F9:90:02:0A:82:20:39:DE:66:E7:5D:62:D4:5E:77:F6:A6:51:AE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A90A0A933BB9446B15245A900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3d76336-9ed3-36b0-b747-ca9114cd1c67.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        2604:2d81:1500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:a9:33:bb:94:46:b1:52:45:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=7175c525-f9e4-4c02-b81a-d90d41b4aa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:cd:0f:79:6c:bf:5b:ac:7b:06:fe:3a:27:
                    90:b8:9c:67:f4:81:fb:2c:2d:80:d7:1d:ab:bd:64:
                    8f:e6:0a:dc:0d:4a:0c:0d:93:81:10:ef:70:55:eb:
                    af:21:01:46:95:f5:3d:7d:7b:83:e5:e7:78:88:b9:
                    ad:fd:d3:1a:84:8b:59:14:ba:76:17:91:13:fe:de:
                    9a:15:b4:6c:fa:1a:3f:85:2c:ad:83:75:d2:79:9e:
                    d3:61:49:b3:7d:09:a0:d5:67:65:a4:af:df:f8:bb:
                    0e:31:2c:a6:42:5a:df:ae:b9:a7:8c:48:5f:1d:65:
                    66:ac:6b:6a:63:81:8c:0e:f1:c0:8f:6d:c0:31:98:
                    8d:3e:ee:3e:ef:eb:81:73:d0:5d:ab:cd:35:a1:ab:
                    f9:34:f5:40:f2:fd:be:5c:db:8e:d7:ec:54:f8:1b:
                    3f:e1:5d:81:20:3a:35:36:09:7e:fe:10:0a:1f:87:
                    46:68:da:23:fb:75:34:39:fd:21:25:ed:07:2d:79:
                    f3:eb:93:e9:0d:62:aa:35:ac:43:f9:98:fd:aa:da:
                    17:5d:0e:38:81:f0:61:f1:31:99:58:ef:ea:46:37:
                    6f:f3:5e:be:6e:7d:f1:24:4d:ca:f0:21:50:1d:f4:
                    5e:38:26:7b:39:31:fa:0e:f5:c6:bd:2b:ed:6f:b7:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:90:02:0A:82:20:39:DE:66:E7:5D:62:D4:5E:77:F6:A6:51:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3d76336-9ed3-36b0-b747-ca9114cd1c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3c:34:19:56:e1:36:60:60:a5:a7:a7:50:05:63:fb:34:37:
         1a:80:73:9a:e1:dd:ab:20:91:74:62:08:af:c0:ae:40:77:90:
         a6:aa:b8:b8:fb:e8:4d:77:2b:eb:8d:2b:4b:3c:9b:7f:79:02:
         d1:5f:4f:6e:dc:8d:bd:75:dd:58:c9:4b:cc:da:d9:04:c7:02:
         32:dd:61:98:41:34:f6:7b:0e:e0:31:d2:4b:56:7f:45:1e:61:
         41:fa:79:fe:bb:3c:2c:43:e5:8b:b8:36:d6:5a:6c:11:86:de:
         64:94:df:56:92:75:e3:a2:63:6c:4c:89:2d:41:8b:c2:cb:fa:
         f5:6b:30:02:48:cc:88:0f:38:37:3d:1e:f4:6a:96:ec:8a:93:
         66:a3:18:d2:c5:96:4b:e5:9b:a5:bb:16:ff:b6:38:e6:f9:96:
         dc:f8:d7:49:ab:35:ae:64:51:b9:68:f8:e5:d6:e7:95:50:7f:
         1b:04:c9:47:bb:af:bd:32:09:07:89:b5:c0:21:f5:37:7a:5b:
         d6:d5:2f:5d:0e:2c:f8:ee:a5:1b:9b:47:d6:a6:f7:b8:6e:85:
         af:f1:8b:4b:db:a0:00:00:4b:05:53:ce:01:e1:60:2f:ac:fd:
         c7:b0:7e:ca:38:2d:82:d1:76:9c:77:de:11:2f:a1:9b:c8:c5:
         e0:88:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:14 2025 by rpki-client