Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fd8575-561a-3ebd-b432-952e8c925344.roa
File:                     c1fd8575-561a-3ebd-b432-952e8c925344.roa (raw, json)
Hash identifier:          44f/D7C3LML3OKJ36+ek4Bpj7nkL7uKL5voQYUPMh1Q=
Subject key identifier:   74:95:F2:27:E6:D3:40:41:5A:E8:9D:0D:8C:5A:DA:BD:38:A2:12:C8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AC19428DA57B64984887D2CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fd8575-561a-3ebd-b432-952e8c925344.roa
Signing time:             Tue 05 Aug 2025 13:50:18 +0000
ROA not before:           Tue 05 Aug 2025 13:50:18 +0000
ROA not after:            Mon 03 Nov 2025 14:50:18 +0000
asID:                     30036
IP address blocks:        2604:2d81:2480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:94:28:da:57:b6:49:84:88:7d:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  5 13:50:18 2025 GMT
            Not After : Nov  3 14:50:18 2025 GMT
        Subject: CN=8501d344-3e84-4785-9bb7-41e47dbeb8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:60:cc:b3:2b:c8:c9:4b:85:38:32:9f:83:
                    94:b7:56:f8:3f:35:8c:54:4e:5d:bf:c3:d3:91:5c:
                    ef:e0:83:8a:dc:ac:f6:d7:16:9b:88:5d:f4:88:d4:
                    54:f2:e8:6e:b9:ae:07:fb:79:9c:45:87:5b:36:e5:
                    ad:70:a2:68:28:c2:49:4e:33:90:4e:19:8a:d4:c6:
                    42:e7:89:8d:19:9f:c6:a5:da:96:aa:57:2b:98:2f:
                    6a:fb:ce:1c:5a:71:c4:43:7c:83:02:13:9c:43:a2:
                    cf:67:ed:1b:4c:33:98:1a:5e:c8:7a:de:7e:73:b7:
                    b0:04:b8:02:15:17:11:64:7b:6e:a7:82:39:a6:ab:
                    c0:5a:df:90:4f:d6:67:b9:9e:b0:c4:d9:49:4c:b0:
                    52:d4:c3:70:1c:f5:b2:9b:53:de:9b:ef:ed:c9:58:
                    c5:2a:2f:62:c0:ac:46:33:e0:60:bf:37:c8:4e:c2:
                    b5:ca:21:dc:b2:c3:25:61:44:99:05:36:11:23:4d:
                    bf:02:02:82:f4:1f:73:e5:35:72:86:12:7e:a3:29:
                    8e:1c:56:f6:96:df:2e:74:e0:5f:30:87:74:e9:28:
                    01:aa:6b:a2:82:e7:3a:da:e6:16:87:cf:19:94:83:
                    16:d2:30:b5:0e:53:85:62:3f:f4:36:fe:88:ff:3f:
                    90:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:95:F2:27:E6:D3:40:41:5A:E8:9D:0D:8C:5A:DA:BD:38:A2:12:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fd8575-561a-3ebd-b432-952e8c925344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d2:31:50:e8:cb:4e:25:7d:3c:1c:dc:a9:78:b7:69:d9:cb:
         e8:fa:54:a7:2b:c1:aa:56:56:30:a3:66:c3:78:f7:b9:53:e3:
         a6:8b:c4:97:72:83:41:18:90:90:cb:72:46:58:e4:c4:62:30:
         93:04:ca:39:33:e8:1b:e2:eb:f9:74:c6:f6:f8:fe:d5:8e:d4:
         9c:d4:7c:54:57:0c:ea:37:97:da:b2:a4:a2:ed:3a:be:56:34:
         9d:75:f3:e6:b7:ab:7c:4a:0a:e2:47:9d:50:da:9c:25:25:e2:
         1a:ca:0d:e2:eb:aa:30:f5:64:c0:04:24:4a:a8:cd:d8:6a:35:
         a1:ac:63:8f:3e:c5:b8:7d:65:7a:d1:89:1c:68:e4:3a:5d:c8:
         61:da:d5:b6:ed:12:14:c9:02:55:9f:b1:ca:74:93:2e:cf:4d:
         d0:51:0c:6d:7a:fa:28:5b:a2:fc:cf:5b:ef:42:83:86:48:85:
         8b:7a:97:e9:0d:7c:b2:32:65:23:48:8b:48:dd:bc:5a:86:16:
         2e:6d:5c:30:9a:e0:7e:13:5d:26:a5:95:b8:e2:6e:59:d0:b8:
         d0:03:47:3c:14:24:e8:c2:1e:2b:b6:c0:3c:e0:f6:92:ab:d4:
         b4:1d:ff:c6:dd:aa:41:55:dd:01:96:81:92:24:f9:c8:91:76:
         2e:55:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:37 2025 by rpki-client