Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae1c4459-5a20-3827-8079-bfc9acb23f70.roa
File:                     ae1c4459-5a20-3827-8079-bfc9acb23f70.roa (raw, json)
Hash identifier:          hssLPUPxOgHFz2ZXCGmxqDYuio+ZvYRzYyvnbYJcX9w=
Subject key identifier:   A9:31:8E:48:42:43:C7:7D:56:13:9B:25:F1:70:E8:25:AB:AB:03:5E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410D52392E1EF04AF760180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae1c4459-5a20-3827-8079-bfc9acb23f70.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:d800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:d5:23:92:e1:ef:04:af:76:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3193bbd6-471d-4cbf-afca-2801c04f2b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:8a:ce:bd:f7:77:db:ab:94:15:11:3c:5d:
                    45:6f:d9:70:33:09:18:bd:7e:42:e0:d3:16:20:ad:
                    83:d0:50:13:65:b4:45:97:b8:eb:5e:80:f8:91:70:
                    fa:55:a3:45:57:37:c1:31:88:48:3e:d5:a9:56:16:
                    cd:1c:fb:98:68:59:f9:09:a4:0b:95:bb:39:2c:81:
                    10:58:e6:1a:b0:ef:b6:e5:08:f0:fa:35:b7:ee:89:
                    ec:ab:a7:77:4b:48:ff:ba:8f:ee:7d:8e:07:e3:bf:
                    cf:4d:6e:cc:f9:bc:d1:85:67:ce:3b:fd:f3:d2:2b:
                    e3:a9:8b:99:71:3b:2c:2f:5a:85:82:50:b0:91:dd:
                    6b:01:96:1e:32:70:df:2c:3e:52:76:38:c9:c3:2d:
                    16:bc:b0:de:d2:b4:dd:4f:3c:a4:54:84:7d:6f:89:
                    22:c5:53:2c:0c:5b:ea:b2:e1:fb:d9:9d:a5:d6:1a:
                    0c:7c:8f:94:b6:b3:11:fc:6d:b4:52:e5:3d:5d:88:
                    72:2b:0e:0b:0e:6d:3b:b2:d8:2c:21:59:f3:6c:a5:
                    3a:ee:a1:b4:5d:02:8a:2b:81:41:e6:de:36:f3:d7:
                    44:b0:6f:90:b2:51:69:b8:6c:be:c2:10:86:f6:05:
                    90:41:53:0c:8d:79:7e:f2:f5:85:9e:de:48:c4:bb:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:31:8E:48:42:43:C7:7D:56:13:9B:25:F1:70:E8:25:AB:AB:03:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae1c4459-5a20-3827-8079-bfc9acb23f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5c:d9:3c:23:02:dc:11:ee:3a:a0:5a:d6:92:ad:d0:48:08:
         ec:03:08:0c:3b:fd:2c:95:d1:c5:02:d6:9f:77:aa:35:ff:6d:
         8b:5e:13:3c:80:33:ce:73:7b:f7:91:f4:b9:e4:7f:69:ef:5c:
         cd:4c:7d:e5:e8:e0:c6:95:5f:c8:e5:48:4f:3c:e3:98:b5:65:
         19:42:fd:8c:7c:2a:ec:4f:ae:14:24:20:db:8c:0e:22:ed:6d:
         85:26:05:89:e9:61:09:d7:80:2b:20:76:58:d8:80:c1:3f:07:
         25:77:6a:1d:33:f6:77:3c:67:cc:00:3e:95:1a:66:b7:9d:7c:
         eb:9c:00:3e:b9:cf:5d:1e:85:ce:7e:73:49:ef:74:ac:62:11:
         55:f1:8b:ca:8b:52:bf:19:8b:0a:28:ce:2c:c7:36:be:a1:7c:
         c8:f9:72:78:7b:27:dd:77:f2:c0:34:09:67:94:00:0b:41:0d:
         53:c0:99:17:07:cb:a1:cf:1b:87:5e:0a:b5:bc:34:d5:38:f6:
         52:ed:76:03:cb:41:3e:bf:86:0a:87:f6:cc:b9:61:06:88:e4:
         15:47:9a:a9:56:88:f0:1f:a1:c8:a8:d1:23:d3:ab:4d:e4:64:
         56:cf:b7:00:55:3a:ea:f6:3e:66:5c:17:ca:68:ba:67:d5:9f:
         e1:39:4c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:59:40 2025 by rpki-client