Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be6ecf73-2cce-3a8a-91e8-23664e521e04.roa
File:                     be6ecf73-2cce-3a8a-91e8-23664e521e04.roa (raw, json)
Hash identifier:          URQFqerBNIB21U05XPL3T3sS6YPoXYfPwqNdiTLGWgc=
Subject key identifier:   C3:BB:84:84:EF:07:D3:CC:71:34:17:27:E9:A0:F1:2E:51:C1:A7:7D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410E6708BFCBA05DFB00B00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be6ecf73-2cce-3a8a-91e8-23664e521e04.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:2180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:e6:70:8b:fc:ba:05:df:b0:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=6aef1e20-69a5-4ce8-ac60-b0878a1de414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:d8:3a:af:16:d6:e5:74:d0:f4:a4:42:65:
                    aa:c1:59:6c:89:4d:32:fc:f6:94:37:d8:b8:a4:5c:
                    a7:63:aa:0d:88:e8:95:1e:a9:b1:fb:72:22:b9:fa:
                    2d:05:cd:ea:62:2e:18:9a:a8:77:69:3a:a7:7e:55:
                    0d:f7:19:50:c9:55:63:1d:63:05:1b:70:84:81:03:
                    42:5b:4e:80:9a:db:4e:37:f2:59:cd:59:7b:16:07:
                    41:6c:4e:bc:f8:e1:44:a1:dd:2d:5f:cf:c0:cc:37:
                    89:2f:4a:f4:84:bb:6f:21:ce:1f:99:67:b5:34:2b:
                    92:7a:6a:44:4f:85:a9:02:43:ee:b0:86:35:58:51:
                    8a:e0:f5:9c:e8:54:7c:81:45:71:88:b3:e1:7f:1f:
                    27:d4:f0:d7:4e:07:a3:14:9c:94:ee:9d:10:d3:47:
                    6a:eb:4c:09:89:9b:47:61:b6:4d:eb:52:5f:6c:24:
                    42:2d:42:97:2f:26:62:21:ab:ba:60:85:dc:4a:9c:
                    cc:f6:17:1c:a5:3e:f4:0b:a3:70:83:f2:e2:46:10:
                    54:2d:f2:55:d7:8a:dd:a5:a1:17:87:65:e6:f3:a7:
                    a6:76:4d:0b:15:4c:c9:64:dd:8f:53:62:ed:42:7e:
                    f6:9e:b5:46:2f:db:47:0b:be:6c:f4:fc:4b:1e:c1:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BB:84:84:EF:07:D3:CC:71:34:17:27:E9:A0:F1:2E:51:C1:A7:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be6ecf73-2cce-3a8a-91e8-23664e521e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:da:84:61:8b:5c:ea:12:20:25:e1:7e:2d:97:b7:0a:a2:cc:
         61:82:d6:5f:96:bf:c7:92:18:2c:0a:47:50:01:51:68:a3:f5:
         29:65:8e:fa:5b:a7:04:dc:9b:ad:cd:38:5e:9a:eb:15:47:61:
         c6:0b:2f:75:16:73:fb:d8:b8:6a:ed:b6:6e:90:c0:48:77:fc:
         69:bc:2c:56:52:8c:f2:02:a5:a9:9b:29:9a:c8:48:36:a1:0b:
         52:04:53:36:9c:63:3b:44:e6:7b:c6:fd:48:40:a8:2a:8c:56:
         6f:02:30:07:17:36:80:3a:15:e1:a2:f4:58:80:0f:6d:28:09:
         e1:2d:2a:30:47:96:93:e1:9d:0d:79:4c:4b:e8:2a:9d:f3:44:
         27:49:31:eb:b5:a7:36:4f:f9:df:78:df:5a:3c:0d:f3:98:3a:
         30:18:b1:e6:fd:b7:62:c6:ab:a3:99:7a:f3:0a:3e:54:fb:8d:
         28:10:a3:68:fa:51:88:3b:d2:84:fa:14:61:b6:56:b3:11:70:
         20:33:04:d2:e7:84:3d:88:f2:95:64:84:9d:61:d2:2d:f4:b0:
         65:c5:db:8f:53:8e:23:80:08:f0:6b:1b:56:2a:0b:de:19:2c:
         f6:76:7a:72:d9:20:81:21:b5:65:49:28:c1:c4:5d:ba:a0:bc:
         e6:40:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:02:21 2025 by rpki-client