Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc2d4732-e5f6-3c05-9d2d-024c4a66b355.roa
File:                     bc2d4732-e5f6-3c05-9d2d-024c4a66b355.roa (raw, json)
Hash identifier:          S6qzPzvdUQCF5EaaZUni7SvFE8Z61uw6PCxiNv4yePc=
Subject key identifier:   C2:25:D6:04:D0:40:26:D9:94:4E:8D:F8:2D:20:98:AC:08:0F:02:B5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8146621A2EA2A3293578C660
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc2d4732-e5f6-3c05-9d2d-024c4a66b355.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:5580::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:62:1a:2e:a2:a3:29:35:78:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=674f2162-6c22-4289-bc7a-6d64d6b3bf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:40:9b:30:72:62:93:ba:c0:68:e5:c7:de:79:
                    28:31:e0:ca:eb:98:07:f3:23:cc:38:08:0c:96:bc:
                    01:b7:4c:22:a7:e1:a2:b1:d0:49:a6:af:93:8f:12:
                    95:f2:b3:5b:ab:30:eb:33:c8:a1:d0:f9:8e:b7:ea:
                    97:cd:7f:ff:e2:19:5b:c8:68:4f:27:0b:74:b5:ad:
                    a5:c2:fa:01:16:9f:48:94:d7:bc:9f:21:42:05:1c:
                    4f:c4:89:5d:9e:d0:16:a4:db:64:27:f2:52:1d:48:
                    95:a5:8a:10:ac:98:13:05:b0:9f:26:a4:d3:cf:97:
                    ec:f3:b8:3c:2c:32:66:47:d2:33:b9:8f:10:a4:bf:
                    87:3e:76:68:13:8b:c1:2a:3c:48:38:01:76:4e:a8:
                    9d:27:54:c4:57:a8:98:3a:64:8b:4e:b1:2b:a3:e7:
                    ad:6d:e3:30:ea:ba:44:e2:99:da:69:d3:6e:4b:9c:
                    f5:3c:aa:df:86:37:9f:03:61:1e:1a:0e:5f:2f:13:
                    85:db:58:e1:6d:91:cb:05:b3:4c:c2:b6:da:97:77:
                    c7:02:80:26:0a:6b:22:3f:e4:bc:e2:29:37:ed:a4:
                    c6:cf:26:7d:3f:62:9d:2c:33:03:67:12:a9:9f:ef:
                    8d:a4:40:7d:78:09:87:ce:b3:6a:e3:57:1d:a4:4f:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:25:D6:04:D0:40:26:D9:94:4E:8D:F8:2D:20:98:AC:08:0F:02:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bc2d4732-e5f6-3c05-9d2d-024c4a66b355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5580::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:38:06:0c:a8:7c:61:4f:5a:a9:75:dc:16:0c:4a:26:d4:49:
         eb:05:d8:44:34:86:c8:8b:f5:27:07:93:ba:30:59:61:26:2e:
         5b:6c:e2:f2:80:16:28:c5:69:47:15:18:01:15:0f:7f:33:51:
         7e:64:56:14:9d:47:e4:0c:30:39:39:e8:c6:ff:24:82:e8:56:
         98:ee:78:96:b2:44:9b:f2:8c:6e:8c:4c:82:ad:48:6e:f0:e7:
         d3:2f:4a:22:f3:af:84:7a:87:34:3a:62:5f:21:2a:ae:1d:58:
         dd:9d:17:d1:53:54:e7:4d:46:6a:a3:4d:80:cb:69:f6:2b:0b:
         66:fb:36:a9:a5:fd:c6:ad:f2:7e:b1:86:6f:59:6f:35:26:66:
         36:6a:63:80:49:8b:c1:85:fd:38:9d:60:96:2e:c0:d3:71:e2:
         41:d4:3f:ca:6c:f6:f8:76:e6:f2:8d:7d:1e:32:33:2b:96:1c:
         a3:ff:ed:93:bf:a2:ed:a0:5d:fe:d6:b8:f9:fa:04:86:86:a2:
         45:a1:1c:19:90:b8:fd:e2:af:7a:55:3b:57:87:fd:61:3f:e4:
         29:54:b7:2e:23:d1:5c:c2:61:56:20:17:8c:be:62:ea:32:e3:
         78:61:a8:90:36:fa:34:07:1e:74:06:64:43:0d:84:b7:31:24:
         98:c2:d6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:27:48 2025 by rpki-client