Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbb9c8c-3a14-3297-adce-9528c9513c44.roa
File:                     ddbb9c8c-3a14-3297-adce-9528c9513c44.roa (raw, json)
Hash identifier:          Lc1l1GXTDJaiSx+dUynu8ofkli4cIqTRZH6s6fTh/Mg=
Subject key identifier:   82:97:05:62:F8:1F:87:03:95:A2:18:52:BE:9A:77:AE:4E:35:26:16
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A2C2009C4C6522D7BE9DB1540
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbb9c8c-3a14-3297-adce-9528c9513c44.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     30036
IP address blocks:        2604:2d80:7c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:09:c4:c6:52:2d:7b:e9:db:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=c2db3c27-195b-491a-8eae-da1bce087763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:c3:ed:d8:b8:d6:6d:27:30:b6:b6:6d:d8:
                    84:91:65:97:32:30:e6:3d:05:c1:8f:56:3d:7f:16:
                    01:ea:88:e4:ac:04:7b:90:db:e7:e1:09:02:81:51:
                    e9:26:40:0c:70:d5:da:23:f0:87:a7:75:98:3c:99:
                    7a:1e:dd:57:c2:e5:9c:0e:f7:72:03:49:97:9c:84:
                    1b:fc:53:bb:2e:a2:7f:5c:1d:09:6a:dc:8b:10:3e:
                    4b:f3:af:91:4e:3e:2b:36:14:a9:1f:17:a8:2d:b4:
                    c8:e0:71:47:7d:44:f0:7e:3f:08:cf:26:89:a6:3d:
                    5c:d8:fa:e9:9d:bf:6b:dc:60:4d:80:06:15:c5:2b:
                    38:9c:71:3e:4e:c0:9b:09:d9:c4:15:b8:4b:c0:2d:
                    69:99:88:7a:16:3f:de:56:c5:41:57:09:d2:61:95:
                    a5:ae:12:74:e9:09:be:a6:fd:70:c0:f1:7d:3b:0a:
                    f8:36:16:6c:f0:2f:62:aa:72:76:99:e9:05:87:3d:
                    5a:8a:9e:26:87:10:e2:6a:fb:ee:c7:ac:e3:2a:74:
                    cc:75:4b:96:53:d5:da:36:8d:48:12:15:1c:fb:3c:
                    c3:07:53:85:15:a5:82:8e:be:77:e2:e9:68:91:ae:
                    6e:2f:de:f6:5f:36:bf:60:61:1e:9d:8b:a0:44:a4:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:97:05:62:F8:1F:87:03:95:A2:18:52:BE:9A:77:AE:4E:35:26:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ddbb9c8c-3a14-3297-adce-9528c9513c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:62:77:2c:5a:4b:a2:4e:ab:70:be:d9:c5:ca:00:94:d8:
         66:69:a2:c2:54:19:ca:26:b6:f9:83:7d:89:46:35:06:86:35:
         dc:57:2b:1c:de:9a:56:ed:86:12:5c:19:1b:05:ee:db:b4:5e:
         d9:5b:33:61:2c:d2:25:87:5f:6a:26:d1:66:5f:5f:8d:ba:b8:
         29:2b:7e:6e:5c:46:c1:c1:6c:1c:64:34:3b:4a:0f:2c:2b:81:
         6b:92:a5:55:dc:83:06:8b:d5:98:53:03:4b:00:1d:a2:c1:b0:
         5d:30:54:fc:7b:2c:5c:da:85:c9:cd:e8:ab:d8:b4:13:54:ad:
         76:6d:52:1a:fc:6d:30:84:5a:16:fb:07:6f:ad:19:cd:a3:8d:
         d5:f0:fd:71:5a:5b:de:83:8d:5b:96:18:60:f2:c8:c5:ea:b7:
         24:f4:cc:34:cf:7e:4f:a1:5e:ca:7e:8c:00:b9:dc:59:c6:a0:
         ad:92:53:31:fa:2b:4f:72:78:cd:21:33:8d:1e:4b:a8:58:5d:
         8d:62:13:2b:f0:83:6b:df:47:5c:4a:5e:47:f7:30:41:06:7a:
         40:b2:df:a2:a3:9c:31:d8:16:27:47:55:19:32:f2:d6:e9:f2:
         be:b8:2d:30:5d:6c:36:8d:3e:2d:0c:fb:d3:a9:88:0f:2f:93:
         18:9a:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:23:20 2025 by rpki-client