Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2d5e7b6-a1e6-3266-b0b0-93c2ecb9e1e9.roa
File:                     b2d5e7b6-a1e6-3266-b0b0-93c2ecb9e1e9.roa (raw, json)
Hash identifier:          5eUDPKxitonueqE5PM1L2KGG79zWLMO6Usgbz+NbvxE=
Subject key identifier:   84:29:77:BF:39:8D:84:1F:EC:BC:39:77:B9:A1:5F:AD:43:74:31:60
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81465BAF17B0B4D2F6B5EEC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2d5e7b6-a1e6-3266-b0b0-93c2ecb9e1e9.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:4880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:5b:af:17:b0:b4:d2:f6:b5:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=da69486f-d30a-4c07-9ed9-f472051ced4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:37:90:ed:22:a4:81:8b:c4:86:b2:7f:fc:
                    8f:d8:3c:ca:94:08:6e:fb:34:a3:00:92:77:59:25:
                    34:d6:40:8f:e5:39:91:aa:00:84:59:bb:a2:82:b1:
                    d7:ba:cd:47:dd:4a:71:45:01:ca:53:59:28:a8:1b:
                    b7:8d:84:80:cb:7e:de:b6:21:44:ab:49:cf:90:d5:
                    7b:8f:40:d2:ea:fe:e1:e3:30:22:80:9e:ec:f7:4a:
                    3d:e4:ae:5a:f3:27:0e:ce:51:75:93:cd:42:7d:22:
                    d0:0b:ee:8d:b5:5d:4b:a6:8b:2a:4e:97:1b:54:21:
                    f5:c4:d0:20:78:51:b4:15:68:e9:52:fb:11:0c:59:
                    e7:91:eb:61:02:70:c1:17:dc:34:c5:44:d9:27:1c:
                    e7:59:0a:01:d3:20:c2:b8:44:91:e7:f0:d9:a1:7c:
                    64:c8:c4:b0:a2:c9:fe:72:eb:27:03:48:ee:ad:f8:
                    bc:d6:b0:76:2f:cb:27:c7:0c:2a:d1:7c:82:12:3b:
                    8b:38:a9:49:0f:39:e3:6d:0d:09:50:69:4e:ee:de:
                    21:7b:e7:71:18:4a:9c:09:b8:1c:3e:0b:23:b7:8a:
                    e7:ce:3b:f1:b1:31:51:66:21:08:f3:57:cf:98:e0:
                    52:42:f9:1a:5e:2b:d4:82:d0:12:0e:23:f2:78:7c:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:29:77:BF:39:8D:84:1F:EC:BC:39:77:B9:A1:5F:AD:43:74:31:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2d5e7b6-a1e6-3266-b0b0-93c2ecb9e1e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:82:48:03:f1:fa:55:f7:2e:92:f7:ca:df:45:83:9d:75:a4:
         4f:38:b1:2c:da:44:8d:ed:37:ba:01:0e:37:07:83:10:3a:2e:
         44:3f:96:e9:fd:c4:2a:3c:2f:7b:20:d6:76:a4:a9:f0:e5:cd:
         c0:6c:50:99:1a:14:45:49:f2:04:f6:cb:32:ee:21:1e:b7:c3:
         52:3d:2a:78:e0:6f:a6:21:6f:d1:1d:74:c1:53:8c:bc:37:58:
         18:5e:b6:85:f7:0d:a6:75:56:0a:e1:f5:1a:79:cb:cb:0c:69:
         d0:b9:aa:35:54:6e:17:f5:8e:e7:49:e8:6f:55:c7:30:63:55:
         08:e5:06:c1:d9:55:3e:f2:2a:50:d8:7f:6f:4f:c7:b3:03:70:
         fb:59:6c:cf:c0:03:27:d6:ba:ad:9a:51:d0:70:49:6d:01:f5:
         74:f1:0c:1e:54:30:26:a3:c4:85:15:a6:10:9b:67:fc:a5:bd:
         a9:33:1c:19:94:42:ee:d9:d5:f1:38:1b:37:53:d1:2e:a6:32:
         d1:ac:a6:4d:80:28:fb:5f:64:39:4f:47:2b:24:f8:b4:80:51:
         58:3c:3d:d1:4f:8e:15:18:68:7f:ad:98:a2:30:6f:b7:8e:bd:
         3f:64:6f:54:11:d3:db:92:a9:d1:8d:a2:e0:d7:fb:4b:38:a7:
         1b:ed:f5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:02:23 2025 by rpki-client