Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acdeb875-c830-3aab-97a0-3b8183c25f0c.roa
File:                     acdeb875-c830-3aab-97a0-3b8183c25f0c.roa (raw, json)
Hash identifier:          UMM4r/SHT7JHtpKqVg6+IeU3xJODGovmpZ3Dhb+hdgs=
Subject key identifier:   17:8C:E4:2C:32:87:CE:C9:D4:24:FB:DF:AE:2B:70:68:B2:8E:C4:85
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DB706142CE3A362963F380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acdeb875-c830-3aab-97a0-3b8183c25f0c.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:70:61:42:ce:3a:36:29:63:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=18e0cbf3-2991-4580-b32c-9c54f6c6afd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:3a:64:f0:74:b1:1e:c7:dc:54:89:b8:b1:
                    00:0c:6e:43:54:57:df:ed:49:19:c9:38:8f:a2:3c:
                    c5:bc:fc:29:3b:da:00:fa:7d:f3:e7:e2:d3:4c:7e:
                    80:54:ed:ab:ee:82:fa:f0:75:49:af:cd:23:c2:a9:
                    77:d4:e1:e3:bb:28:f2:45:69:9c:02:07:f8:be:1a:
                    a1:52:18:5f:2f:d8:8b:ec:2f:7f:af:8d:ce:55:41:
                    bd:7b:58:87:47:a8:df:ea:b1:9e:b3:85:1e:42:97:
                    9f:d2:bc:b4:ef:68:31:27:22:06:e1:7f:7d:98:cc:
                    5b:2b:f9:dd:4e:d8:7f:83:46:b1:65:9e:22:4d:a7:
                    90:14:a5:6d:4c:25:fe:4e:80:60:d4:6d:8c:2e:a9:
                    fa:2f:7a:00:d9:4e:f3:7c:73:10:34:14:19:05:93:
                    e8:eb:eb:7e:87:d2:75:0c:70:14:f1:d1:2f:32:ed:
                    71:6c:b7:b7:ae:b6:db:90:f1:02:f7:4e:da:1e:14:
                    94:67:ef:84:c1:20:42:3c:da:6a:dc:d2:98:be:5b:
                    13:02:5b:b0:6e:dd:64:4c:90:43:5e:55:57:59:ff:
                    50:95:37:8a:0e:7f:de:e8:75:93:f4:e6:62:41:cc:
                    e8:0a:ea:63:ea:e4:02:4e:13:4d:4d:a7:9f:5f:e6:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8C:E4:2C:32:87:CE:C9:D4:24:FB:DF:AE:2B:70:68:B2:8E:C4:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acdeb875-c830-3aab-97a0-3b8183c25f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:8e:9b:e2:62:5d:61:00:4f:24:4e:02:e1:bf:a9:1c:69:ee:
         66:e2:97:da:88:81:4c:60:f1:91:f6:8a:87:3d:c9:7b:cf:72:
         9c:d2:87:8c:9b:c3:ec:75:0f:6b:55:93:02:bc:15:88:0d:5b:
         a3:68:5c:ba:c6:8e:7e:7e:5c:78:19:91:ac:f6:ec:91:32:3b:
         e4:27:6d:ff:cd:93:19:7e:51:11:7c:4b:e5:1a:7a:32:2b:3a:
         c8:d0:27:5d:20:da:92:a3:de:56:3f:d6:8d:2b:ce:4c:c8:af:
         7b:5f:14:fa:13:60:f3:8c:3d:97:e0:e9:7f:0b:5b:3c:89:ad:
         4c:8f:c7:1a:49:dd:5b:92:45:12:96:1d:22:4a:ff:49:49:17:
         3e:b7:b8:69:6c:f6:ad:14:c2:68:cc:bf:73:95:14:8b:0e:e6:
         83:ec:da:f5:e5:77:51:c5:df:9f:72:b5:e5:c6:4a:79:b3:42:
         9f:67:55:4d:c8:53:3e:2f:28:06:19:07:5d:a0:77:b3:d6:58:
         2d:58:19:c7:33:34:93:e0:1f:ec:35:e8:15:6b:80:e8:3c:bf:
         fd:52:6b:d7:e0:e0:f3:28:b4:0f:83:6e:65:97:ba:0d:a7:7f:
         14:dc:46:d7:ae:21:cf:a7:c1:8d:a3:5b:da:25:c9:a0:44:45:
         0a:2d:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:49 2025 by rpki-client