Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91e3e0e-6ffe-3c6f-b40a-bead9b467662.roa
File:                     d91e3e0e-6ffe-3c6f-b40a-bead9b467662.roa (raw, json)
Hash identifier:          ssyV9EpArGiDIqNjQaXjqRBG4oJw1dvCw4R5fGy+CZY=
Subject key identifier:   8E:21:82:B9:C8:83:5D:98:76:F4:2D:7F:40:1C:15:37:9F:A4:D0:DC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F2E5239CBEE8B20AD8BA1940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91e3e0e-6ffe-3c6f-b40a-bead9b467662.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:d000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:23:9c:be:e8:b2:0a:d8:ba:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=b8550a59-fb48-4743-812d-088172fb9cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:b5:e9:64:de:29:54:d8:50:1f:4e:a1:00:
                    a8:1c:35:b5:a0:30:c8:05:29:b6:eb:01:5d:d8:1d:
                    0f:ff:b9:8c:24:41:82:61:24:0d:9b:8d:2c:2c:47:
                    b2:e0:76:f6:cd:cb:d8:88:bb:d0:92:45:62:7c:b4:
                    ef:9d:57:29:6a:38:38:26:3c:2a:f2:d2:e9:f2:ef:
                    bf:f7:53:9c:f0:a0:cd:e7:e6:48:5f:72:92:d3:30:
                    b4:98:e7:24:7f:3d:5e:6b:7d:f1:0e:34:d1:bd:49:
                    c8:07:fb:cf:4e:07:7b:3a:6a:f1:4a:f7:83:48:6f:
                    b5:d5:9c:40:73:9f:7b:68:9e:b4:2d:a2:4d:a4:cb:
                    44:4d:08:c8:c7:a2:62:71:e9:13:f5:55:79:5e:0e:
                    45:54:03:db:21:fd:5d:28:d1:95:52:7c:b2:b4:1b:
                    ad:0a:6e:9a:1c:d5:b1:f4:e7:f4:33:97:ee:72:1d:
                    5c:4a:11:5f:44:18:42:84:e6:4d:4b:45:66:79:a7:
                    41:4b:21:2a:de:71:3b:f0:cd:8c:06:6d:44:0a:06:
                    f1:bf:5c:3b:9e:88:5a:0c:cf:c9:fa:ff:fd:05:88:
                    3b:1e:53:4b:98:4c:ff:61:03:20:30:7c:80:45:aa:
                    6e:0a:82:50:0a:39:fb:e3:04:db:2d:64:30:8f:86:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:21:82:B9:C8:83:5D:98:76:F4:2D:7F:40:1C:15:37:9F:A4:D0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91e3e0e-6ffe-3c6f-b40a-bead9b467662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:18:13:ab:26:7f:05:06:5f:93:2b:39:3c:d4:ff:1f:88:e5:
         18:3e:9e:9e:b8:7a:a7:64:66:fa:5a:9e:f1:44:23:00:a0:aa:
         dd:3f:d8:03:20:d5:3f:bb:21:8c:14:51:7c:cb:71:c2:a6:35:
         de:11:cf:cb:e9:29:64:af:00:51:05:23:10:08:7d:f3:1b:31:
         53:4d:63:a3:51:18:78:13:14:bc:34:e2:b0:62:41:b9:c1:87:
         8b:f7:04:50:45:52:dd:12:15:fb:9e:bb:d5:f5:96:e7:76:27:
         50:fe:fa:99:92:d3:10:a1:aa:3e:6a:b8:58:1f:c0:25:9a:c0:
         ab:2b:99:ea:f7:17:e9:48:75:06:1f:80:04:d9:d3:83:ad:5d:
         72:a3:c7:d9:41:30:0b:00:6f:5f:5f:c5:6a:42:df:be:4d:1d:
         71:d2:36:d5:0a:9b:67:5c:67:01:a5:d9:67:e2:52:aa:4b:3a:
         c9:75:a0:1f:7f:77:d8:4d:74:80:6f:25:04:4a:d3:af:5c:32:
         d4:c1:27:c4:80:89:34:36:bf:9f:d7:5b:a5:06:f5:b1:9e:e1:
         7e:cf:b2:fa:e4:15:4e:08:0d:bb:e5:66:bd:64:42:c5:f6:4e:
         79:09:2e:6c:34:c7:cc:0a:fa:75:08:6f:b1:16:86:f8:ff:92:
         e9:eb:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:40:28 2025 by rpki-client