Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce6319a2-bff4-394f-858d-b6575d052fc3.roa
File:                     ce6319a2-bff4-394f-858d-b6575d052fc3.roa (raw, json)
Hash identifier:          eiiCG3v2OxOpd045dbzIrRmHyRPa+D3tAFbUPaGbDwE=
Subject key identifier:   6A:A6:4F:2C:1D:CE:2B:85:DF:36:85:7A:3C:72:C0:44:F7:C0:70:44
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124140C3BA112CB78C8480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce6319a2-bff4-394f-858d-b6575d052fc3.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:2300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:41:40:c3:ba:11:2c:b7:8c:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=06a1b1f6-ccf4-4647-9278-7306e03fdd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:6a:3c:27:0a:aa:32:d3:a2:d2:01:c5:ff:
                    94:c5:95:03:9e:96:28:cf:09:9b:03:e8:42:b7:91:
                    2b:27:ed:79:a7:74:61:18:b7:80:1d:a5:69:7f:da:
                    8e:33:0b:2c:35:41:f4:11:2f:e7:9a:18:d9:52:4d:
                    13:63:0c:73:6c:a7:9d:73:c5:7a:dd:53:bf:5c:e6:
                    2f:8b:c2:89:5e:b6:21:d8:3f:ef:c3:70:ba:c2:59:
                    a7:6d:bf:b2:b8:c3:f9:65:50:9f:50:89:18:cd:ab:
                    91:aa:8a:2b:01:83:fb:4b:3b:34:33:44:96:1b:9f:
                    a3:22:e3:00:65:2d:e2:9b:ae:b1:2d:55:94:91:43:
                    99:bb:da:69:7a:31:7e:f8:1b:46:94:fd:e1:c8:a9:
                    6c:7c:2e:4d:93:b9:c2:39:48:c7:3a:a8:75:37:42:
                    86:f7:3b:bc:ef:f8:8a:2d:2d:2e:7b:29:fa:d8:41:
                    91:a0:74:62:74:cb:7d:98:ca:39:21:3d:5e:df:a8:
                    c9:c9:41:60:e1:26:de:3f:1a:bc:85:ef:5a:fd:59:
                    cb:7c:6e:b7:c0:26:f1:06:b6:ca:5c:4b:fe:19:1f:
                    d5:0b:d5:16:86:c0:28:af:d0:3c:10:dc:9f:d5:eb:
                    41:8e:b4:e0:1e:55:bd:98:57:d7:b2:02:da:7a:c3:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A6:4F:2C:1D:CE:2B:85:DF:36:85:7A:3C:72:C0:44:F7:C0:70:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ce6319a2-bff4-394f-858d-b6575d052fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:47:53:42:ac:0a:c6:05:cc:c2:8d:7a:9d:7d:4b:f4:f1:
         bb:a0:32:a7:ac:53:06:27:a7:e1:b5:c6:6f:a3:31:6f:40:29:
         e7:b3:e9:db:e4:18:71:41:e1:00:a3:d2:94:62:2e:16:33:fc:
         1b:1e:f3:43:a5:0d:55:5b:28:c7:62:0c:2e:43:cc:87:54:82:
         97:c7:30:21:ff:aa:d1:e0:b3:0c:c8:04:02:48:d7:51:61:20:
         09:dd:66:50:a5:5d:44:42:f4:8a:c7:76:93:84:08:6e:96:9b:
         d7:94:69:24:a5:c8:2c:58:2d:48:8f:87:b1:87:51:7a:26:c4:
         92:7e:ec:67:75:19:96:ec:04:74:c0:55:f7:eb:10:f2:c5:f3:
         d2:3a:30:56:70:79:eb:a6:bc:fe:80:bc:06:12:f2:02:0a:a8:
         15:ca:2b:aa:b6:01:40:a9:a3:f3:55:83:32:7d:2c:07:b1:07:
         21:be:ac:a6:18:ed:87:72:48:9b:c5:e6:08:ee:9d:21:76:08:
         96:8f:8b:7d:e5:d4:41:6a:0e:ae:ee:4a:10:9e:05:9c:75:f6:
         89:d2:61:81:a2:17:58:7f:d3:4f:eb:bc:df:19:02:63:da:e4:
         04:16:4e:78:d2:44:d1:18:e7:59:68:8f:cd:22:cd:f1:35:c7:
         60:f2:b8:77
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqEEkFAw7oRLLeMhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
MDZhMWIxZjYtY2NmNC00NjQ3LTkyNzgtNzMwNmUwM2ZkZDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsdqPCcKqjLTotIBxf+UxZUDnpYozwmbA+hC
t5ErJ+15p3RhGLeAHaVpf9qOMwssNUH0ES/nmhjZUk0TYwxzbKedc8V63VO/XOYv
i8KJXrYh2D/vw3C6wlmnbb+yuMP5ZVCfUIkYzauRqoorAYP7Szs0M0SWG5+jIuMA
ZS3im66xLVWUkUOZu9ppejF++BtGlP3hyKlsfC5Nk7nCOUjHOqh1N0KG9zu87/iK
LS0ueyn62EGRoHRidMt9mMo5IT1e36jJyUFg4SbePxq8he9a/VnLfG63wCbxBrbK
XEv+GR/VC9UWhsAor9A8ENyf1etBjrTgHlW9mFfXsgLaesMtyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGqmTywdziuF3zaFejxywET3wHBEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2U2MzE5YTItYmZmNC0z
OTRmLTg1OGQtYjY1NzVkMDUyZmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgCMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEEtR1NCrArGBczCjXqdfUv08bugMqesUwYnp+G1xm+jMW9AKeez
6dvkGHFB4QCj0pRiLhYz/Bse80OlDVVbKMdiDC5DzIdUgpfHMCH/qtHgswzIBAJI
11FhIAndZlClXURC9IrHdpOECG6Wm9eUaSSlyCxYLUiPh7GHUXomxJJ+7Gd1GZbs
BHTAVffrEPLF89I6MFZweeumvP6AvAYS8gIKqBXKK6q2AUCpo/NVgzJ9LAexByG+
rKYY7YdySJvF5gjunSF2CJaPi33l1EFqDq7uShCeBZx19onSYYGiF1h/00/rvN8Z
AmPa5AQWTnjSRNEY51loj80izfE1x2DyuHc=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:45 2025 by rpki-client