Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa
File:                     d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa (raw, json)
Hash identifier:          cGDLWry9Ie0PU4B/r381bPndh+zo2BgP1ZadlZWzSlY=
Subject key identifier:   2E:8E:2E:73:51:EB:BC:E5:90:CF:AB:E9:96:49:ED:1F:12:AD:67:36
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A9BCB672FD260B71A9FA49480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     30036
IP address blocks:        2604:2d81:780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:67:2f:d2:60:b7:1a:9f:a4:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=9faf6d56-06f5-4221-962f-4e0c92134d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:cf:46:4b:63:37:48:ad:42:1f:7f:e0:71:
                    93:0c:3b:08:a3:46:a4:d4:77:18:54:56:56:9e:08:
                    59:71:25:55:87:b9:6c:ee:5d:ad:db:2e:75:7c:21:
                    01:8e:eb:dd:45:80:fa:a5:11:25:6f:28:7d:25:f8:
                    28:9b:79:1e:e1:c4:c1:c6:70:b5:65:ad:55:df:bf:
                    63:ca:ca:f7:fe:60:01:e9:b3:7e:7c:cc:7b:57:b4:
                    8a:4c:79:bf:46:98:2a:20:95:cd:f3:2b:30:5e:0c:
                    d6:11:2c:af:65:d6:d3:e7:c9:ea:dc:0e:bb:a5:80:
                    38:60:26:97:cb:cc:91:d1:d4:86:e0:a8:91:23:eb:
                    64:76:a4:34:67:ab:77:f8:dd:13:b8:cf:cc:34:f2:
                    02:f3:58:51:4d:c7:de:c0:44:c5:43:2d:75:2f:31:
                    0d:1f:94:45:0e:26:57:91:6b:75:b9:28:77:0d:02:
                    25:06:c8:f6:76:86:b6:27:dc:3d:f3:0c:5d:40:da:
                    c8:dd:4f:ec:8c:67:52:f4:80:18:41:4f:ce:ab:ba:
                    65:44:23:7c:01:00:65:ba:7e:24:10:6c:9e:e6:5d:
                    da:51:1d:e0:7e:44:72:bc:4f:1a:87:7d:7f:eb:14:
                    27:a1:14:53:2f:91:3b:59:79:13:3f:eb:a7:26:00:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8E:2E:73:51:EB:BC:E5:90:CF:AB:E9:96:49:ED:1F:12:AD:67:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d91f8734-fd0a-3e54-b04c-f7eac9e90e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d8:69:c3:26:21:5b:85:1e:1a:d5:38:5e:f9:b5:11:0c:47:
         9f:28:0f:69:a6:3c:57:71:c8:ad:e5:ec:ee:60:66:db:75:00:
         95:40:80:5b:5b:19:70:77:96:7b:15:3d:a3:13:03:54:52:d7:
         db:e5:d9:91:e2:d7:81:b7:4f:b2:19:2e:ad:c0:1f:06:bf:01:
         a8:c6:a9:2e:7c:35:0c:a9:f0:7f:21:d4:35:14:fc:e7:d9:3f:
         b9:72:6e:12:32:2a:30:40:a2:8f:6f:6d:fc:ca:8e:c9:03:e1:
         3b:30:f4:27:11:f2:ee:2b:e0:1c:8f:9d:8d:00:13:57:31:16:
         ba:66:9c:42:60:ae:63:be:56:81:3e:4d:0e:28:36:dc:7d:14:
         e7:cb:c6:5c:09:37:77:32:df:1a:d1:f6:6a:aa:4d:0a:5d:56:
         64:69:47:b0:af:28:ae:cc:69:f4:20:98:93:bc:65:16:40:cc:
         e3:1a:7b:8b:58:20:1a:89:aa:34:2c:12:ad:ae:69:a4:e3:24:
         20:49:ed:7c:2f:6c:a2:dc:a6:80:28:c0:a8:3f:c9:9d:05:66:
         97:c5:d1:3b:4b:65:63:f9:ef:f5:d8:4b:7f:96:e9:ec:ee:cd:
         83:e1:ed:37:e2:f4:14:cf:e3:bd:d1:52:59:0e:8a:e2:ce:ad:
         a2:61:e8:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqby2cv0mC3Gp+klIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk
OWZhZjZkNTYtMDZmNS00MjIxLTk2MmYtNGUwYzkyMTM0ZDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKTPRktjN0itQh9/4HGTDDsIo0ak1HcYVFZW
nghZcSVVh7ls7l2t2y51fCEBjuvdRYD6pRElbyh9Jfgom3ke4cTBxnC1Za1V379j
ysr3/mAB6bN+fMx7V7SKTHm/RpgqIJXN8yswXgzWESyvZdbT58nq3A67pYA4YCaX
y8yR0dSG4KiRI+tkdqQ0Z6t3+N0TuM/MNPIC81hRTcfewETFQy11LzENH5RFDiZX
kWt1uSh3DQIlBsj2doa2J9w98wxdQNrI3U/sjGdS9IAYQU/Oq7plRCN8AQBlun4k
EGye5l3aUR3gfkRyvE8ah31/6xQnoRRTL5E7WXkTP+unJgB0gQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC6OLnNR67zlkM+r6ZZJ7R8SrWc2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDkxZjg3MzQtZmQwYS0z
ZTU0LWIwNGMtZjdlYWM5ZTkwZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgQeA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHbYacMmIVuFHhrVOF75tREMR58oD2mmPFdxyK3l7O5gZtt1AJVA
gFtbGXB3lnsVPaMTA1RS19vl2ZHi14G3T7IZLq3AHwa/AajGqS58NQyp8H8h1DUU
/OfZP7lybhIyKjBAoo9vbfzKjskD4Tsw9CcR8u4r4ByPnY0AE1cxFrpmnEJgrmO+
VoE+TQ4oNtx9FOfLxlwJN3cy3xrR9mqqTQpdVmRpR7CvKK7MafQgmJO8ZRZAzOMa
e4tYIBqJqjQsEq2uaaTjJCBJ7XwvbKLcpoAowKg/yZ0FZpfF0TtLZWP57/XYS3+W
6ezuzYPh7Tfi9BTP473RUlkOiuLOraJh6H4=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:40 2025 by rpki-client