Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c36fa9d2-f562-3f50-ad7d-dbda54403c2d.roa
File:                     c36fa9d2-f562-3f50-ad7d-dbda54403c2d.roa (raw, json)
Hash identifier:          kRT4B3suc4yC66tVBOC5HYKAtTSU6VrWml24yVhcqdQ=
Subject key identifier:   09:18:3D:81:C1:23:2C:85:22:42:3D:6C:99:43:FD:C2:E6:BA:39:00
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A814630C113C4D9166FFC40C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c36fa9d2-f562-3f50-ad7d-dbda54403c2d.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        2604:2d80:b280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:30:c1:13:c4:d9:16:6f:fc:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=78b28c4a-7400-44b3-998f-7daa4cb88769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:de:c5:0a:ef:da:2b:92:38:e2:9c:07:29:
                    0f:c0:77:74:7b:85:ef:d2:1f:4c:3d:33:49:f7:5b:
                    de:31:1b:95:a9:85:f3:3a:5b:3d:36:0e:ce:da:1b:
                    54:04:6e:24:ec:41:dc:1f:1c:92:33:f4:19:af:7f:
                    76:61:e3:d9:4f:30:05:bd:e0:96:67:5a:17:f7:c7:
                    d9:84:5c:9a:7b:18:7c:83:52:57:12:cc:ce:3c:16:
                    44:bc:8c:04:d0:2f:62:e2:3f:85:48:a9:13:ea:00:
                    a3:0e:ec:6f:85:1a:9a:14:f7:73:c5:24:df:7f:26:
                    e7:91:fb:4b:e8:ae:49:75:25:4b:e0:95:ab:75:5a:
                    ea:6f:88:1a:ff:21:b2:55:89:59:99:71:9d:08:d9:
                    26:39:00:45:a1:cc:3f:2e:11:e8:be:61:33:be:e5:
                    96:c8:aa:6b:11:f4:58:71:db:b3:d2:ee:97:42:16:
                    72:1e:1b:3b:20:1f:bf:3a:21:8e:7c:33:48:5a:f1:
                    6e:8a:6b:56:07:ae:23:6d:ea:24:41:a3:66:df:f7:
                    ff:09:1a:22:ac:18:ed:91:a7:17:e4:49:06:4b:d5:
                    36:75:16:79:98:ff:fe:9d:12:86:bd:53:3b:b7:9e:
                    e6:1b:49:8c:f1:31:5d:49:56:cc:88:11:f6:7b:ce:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:18:3D:81:C1:23:2C:85:22:42:3D:6C:99:43:FD:C2:E6:BA:39:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c36fa9d2-f562-3f50-ad7d-dbda54403c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:41:df:31:3e:f7:e3:67:73:32:64:d6:dd:d5:3a:8c:b9:5e:
         4c:af:1f:a3:1f:fa:07:ea:96:85:37:55:40:06:a5:e3:5a:5b:
         73:e3:8a:82:1f:50:31:b5:e2:da:d9:6b:32:e4:66:7f:d8:02:
         21:3c:6b:3c:98:fc:ce:ba:34:d4:e9:f0:37:ab:90:4b:86:ff:
         27:cf:9b:ef:ff:f1:39:98:f5:67:e8:d9:f0:5e:64:24:f5:5c:
         f6:d3:9e:f0:0a:e6:ee:e3:01:ec:ed:0f:b7:d4:b1:57:1b:56:
         95:a1:1c:87:5a:ca:66:85:c9:0c:2d:f8:70:87:ce:38:5b:63:
         ed:67:5d:3a:23:db:d9:3b:f2:fc:33:fc:bf:19:d4:f8:de:74:
         b3:ae:c5:9f:f9:79:b7:c1:6f:f4:b9:27:e8:f8:a1:67:bf:91:
         ee:e7:6b:4f:eb:84:0a:f9:f7:0c:07:d0:35:d7:b5:49:4c:a2:
         9a:5c:01:85:15:27:65:7d:96:c6:f8:aa:66:97:46:13:58:1b:
         e0:6d:7a:74:3c:7a:e0:6f:bc:fd:2b:66:c5:6a:d7:0b:94:f1:
         6c:30:5f:7e:bb:70:00:86:1f:07:bd:3a:1d:f7:bf:63:69:ca:
         ec:6d:8a:8d:9c:b3:52:50:36:82:5f:31:7b:43:f9:1e:28:0c:
         51:2c:89:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:42:32 2025 by rpki-client