Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbdcaacf-ab0f-38c7-83d2-941e25c09178.roa
File:                     cbdcaacf-ab0f-38c7-83d2-941e25c09178.roa (raw, json)
Hash identifier:          YLOzDYcdS/5lHNANAT0E1Xz5b0JXavK0J0wF7Wi35c8=
Subject key identifier:   5F:40:4D:73:8E:A1:D8:21:EB:82:05:EE:F8:99:07:64:E0:1D:85:2E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A841257CEADC22895D6842900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbdcaacf-ab0f-38c7-83d2-941e25c09178.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:5680::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:57:ce:ad:c2:28:95:d6:84:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=0e422419-439d-4176-a960-d667c3af127b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:aa:55:55:95:9f:db:7a:79:5a:00:bb:58:
                    e2:82:93:2f:56:65:67:5e:17:1b:34:1a:dc:9e:0b:
                    d7:03:31:de:33:36:f0:00:0d:11:57:c0:fc:cb:b3:
                    f5:71:64:af:92:72:7e:a7:9b:bf:fd:c5:68:0a:57:
                    a4:f9:29:f8:36:aa:d5:62:99:8a:af:9e:9e:7c:8c:
                    24:4c:8f:a8:71:ee:11:2d:d7:ae:ce:11:2d:d8:74:
                    41:5a:31:c3:ce:46:e4:83:c3:9f:3f:d1:77:72:5d:
                    f5:8f:df:cf:1d:ee:a5:ab:b5:70:0e:8b:26:a6:84:
                    da:92:e9:6f:e6:b5:7e:a3:bb:e6:7a:4b:61:1d:20:
                    55:46:46:df:15:38:85:72:fe:cd:36:7e:ff:6f:ae:
                    c1:57:ae:7b:4c:73:87:39:a6:b0:70:be:4a:a5:ea:
                    7a:14:d9:4e:07:e9:a9:11:15:7f:79:3c:be:98:e9:
                    4a:ad:3e:5a:a6:82:27:9d:8a:3d:57:42:7a:4c:2f:
                    e2:94:e1:83:c4:26:53:a5:95:f9:42:6a:81:b0:66:
                    c2:71:c2:89:c6:12:4e:35:62:e3:b0:80:bb:58:1e:
                    36:6e:b6:55:74:39:24:81:09:08:3a:83:21:ae:30:
                    84:6e:39:61:a0:7f:ee:4f:a8:c8:62:91:51:d5:af:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:40:4D:73:8E:A1:D8:21:EB:82:05:EE:F8:99:07:64:E0:1D:85:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbdcaacf-ab0f-38c7-83d2-941e25c09178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5680::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9e:b6:2d:7b:e4:6a:57:c6:01:3a:a9:eb:04:cc:9e:6e:b8:
         0c:4b:f9:a7:bd:91:0d:7c:db:ee:03:48:24:af:cf:38:5c:31:
         ce:d6:29:c1:17:89:ac:cb:35:17:7c:73:f1:d2:93:99:8a:61:
         c9:72:92:5a:c9:9a:3b:07:a5:39:87:4f:a4:16:c7:9d:0f:b2:
         02:39:24:0d:4a:ac:94:99:cd:98:4d:6d:ad:01:2f:41:f9:71:
         1a:ad:f4:be:0a:29:78:13:78:5c:d5:d6:02:7c:d6:21:b3:9a:
         e3:4a:fd:73:07:79:47:c1:d6:34:cd:9a:af:56:02:dc:48:8a:
         04:4e:18:52:03:99:ec:15:25:80:39:8d:24:fe:af:6a:81:34:
         ff:99:1a:84:09:49:98:e5:37:51:70:3b:bd:a5:d6:d5:0a:fb:
         7a:14:05:e8:e8:66:6b:33:8d:89:06:23:76:55:76:25:e8:76:
         c8:3c:e0:d9:fa:54:85:ac:c2:18:ed:c8:a0:0f:a9:5b:39:b6:
         ad:ef:40:f1:67:cf:e9:77:ce:ea:7c:3f:33:ac:f9:4d:66:a7:
         83:03:e3:e2:4c:64:1c:a9:89:f0:0b:f0:e3:c0:34:ca:30:bb:
         7b:d3:b6:49:06:76:0f:0e:30:88:75:15:cc:22:c2:81:cf:ed:
         07:ea:25:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEElfOrcIoldaEKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MGU0MjI0MTktNDM5ZC00MTc2LWE5NjAtZDY2N2MzYWYxMjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgaqVVWVn9t6eVoAu1jigpMvVmVnXhcbNBrc
ngvXAzHeMzbwAA0RV8D8y7P1cWSvknJ+p5u//cVoClek+Sn4NqrVYpmKr56efIwk
TI+oce4RLdeuzhEt2HRBWjHDzkbkg8OfP9F3cl31j9/PHe6lq7VwDosmpoTakulv
5rV+o7vmekthHSBVRkbfFTiFcv7NNn7/b67BV657THOHOaawcL5Kpep6FNlOB+mp
ERV/eTy+mOlKrT5apoInnYo9V0J6TC/ilOGDxCZTpZX5QmqBsGbCccKJxhJONWLj
sIC7WB42brZVdDkkgQkIOoMhrjCEbjlhoH/uT6jIYpFR1a8WGQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF9ATXOOodgh64IF7viZB2TgHYUuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2JkY2FhY2YtYWIwZi0z
OGM3LTgzZDItOTQxZTI1YzA5MTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFaA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAqeti175GpXxgE6qesEzJ5uuAxL+ae9kQ182+4DSCSvzzhcMc7W
KcEXiazLNRd8c/HSk5mKYclyklrJmjsHpTmHT6QWx50PsgI5JA1KrJSZzZhNba0B
L0H5cRqt9L4KKXgTeFzV1gJ81iGzmuNK/XMHeUfB1jTNmq9WAtxIigROGFIDmewV
JYA5jST+r2qBNP+ZGoQJSZjlN1FwO72l1tUK+3oUBejoZmszjYkGI3ZVdiXodsg8
4Nn6VIWswhjtyKAPqVs5tq3vQPFnz+l3zup8PzOs+U1mp4MD4+JMZBypifAL8OPA
NMowu3vTtkkGdg8OMIh1FcwiwoHP7QfqJZ4=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:51:13 2025 by rpki-client