Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc06a586-917b-36ef-8bc4-3956d633f4ca.roa
File:                     dc06a586-917b-36ef-8bc4-3956d633f4ca.roa (raw, json)
Hash identifier:          iI9fD4S1AABZFlTFxT6CU/3P//Cb9aGxgUpFsyJ1Ozw=
Subject key identifier:   77:12:F6:F7:EB:3A:B6:97:6E:7A:E5:98:5D:E3:1B:1B:6F:5D:C7:C9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8410DA237BAFED499E10E500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc06a586-917b-36ef-8bc4-3956d633f4ca.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:1200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:da:23:7b:af:ed:49:9e:10:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e02a706e-33f7-4dd2-b9f3-454c7c001ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:d9:81:74:9a:6e:f1:3a:90:ed:18:02:92:
                    2f:94:38:4d:2e:a2:03:e7:ec:b1:6e:bb:7a:fe:0b:
                    87:2f:22:65:41:81:19:b5:a8:ca:74:05:50:27:aa:
                    42:d1:68:59:33:d2:bd:47:27:e7:41:89:48:ae:f6:
                    6b:d3:70:c0:11:6b:b7:55:e6:39:59:64:48:bc:57:
                    32:26:b0:01:9f:bc:9f:51:5b:3c:f6:eb:d9:b6:0f:
                    73:f9:9d:ef:8c:41:79:0c:c2:41:43:78:dd:fa:f1:
                    4d:67:1f:f4:bb:a5:68:53:c0:19:9d:b6:38:39:46:
                    83:97:d7:89:47:32:cf:b6:87:b8:c6:67:f1:c0:0e:
                    45:7d:09:3e:1d:14:9f:fd:36:64:11:f2:ce:69:02:
                    32:98:a6:b5:df:82:8c:6f:34:eb:36:80:c9:ac:36:
                    e6:28:e7:93:29:10:ef:fe:44:93:f6:ae:3b:79:7e:
                    ac:cf:b9:79:d5:37:28:3f:da:99:d8:e0:cf:69:c8:
                    82:a6:5f:cd:60:35:8b:bc:85:90:18:6f:60:8b:63:
                    6b:26:5a:34:d8:96:63:0f:99:3c:86:44:08:83:7e:
                    35:dc:95:d4:a2:38:58:d1:b1:08:8e:a6:e1:63:b1:
                    0d:aa:74:38:16:99:d5:34:e8:07:ab:03:52:cc:d6:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:12:F6:F7:EB:3A:B6:97:6E:7A:E5:98:5D:E3:1B:1B:6F:5D:C7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc06a586-917b-36ef-8bc4-3956d633f4ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:35:10:42:10:49:4d:fc:33:78:b3:48:02:8b:9c:98:e1:
         4f:77:3b:4f:58:c8:37:20:e0:03:e7:f7:ab:3b:4b:f7:0c:6a:
         47:11:73:3b:48:b0:cf:f4:d3:5f:1b:ff:9d:b4:0a:73:33:ac:
         57:4f:0b:2e:83:32:e8:b8:e4:ca:07:f5:68:ff:7d:97:7b:54:
         f6:15:a9:8c:34:2d:01:06:dd:19:48:9e:63:b1:e4:6e:80:df:
         ca:4f:c0:65:7d:8a:80:05:84:8e:c7:63:34:2e:15:2f:c0:23:
         e7:53:b7:72:92:08:2d:b4:95:f5:7c:ae:71:bc:a6:49:04:5c:
         a7:c4:e8:ae:95:ea:a7:70:35:76:53:4f:5a:42:9c:84:33:4e:
         c8:61:ff:c2:07:eb:3d:58:16:50:ed:a6:62:3c:de:f9:32:78:
         82:ad:f1:cc:78:75:e8:43:97:11:e9:85:a9:51:81:d2:bd:5f:
         9f:2c:fe:8c:cd:2d:b5:66:55:ff:25:4a:cf:a2:1b:2b:72:34:
         79:bc:1f:c1:cc:1f:cd:75:f7:6a:ac:00:20:27:f3:2f:9c:9d:
         84:06:d4:b3:4b:ea:26:23:04:69:c9:02:ba:82:d0:40:a3:9a:
         76:94:49:2d:b1:56:b4:7f:9b:7e:5a:a9:ef:b6:d7:21:fd:87:
         08:a0:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:03 2025 by rpki-client