Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e212a8ef-92a6-3b2a-a4ef-9f02d64c5206.roa
File:                     e212a8ef-92a6-3b2a-a4ef-9f02d64c5206.roa (raw, json)
Hash identifier:          4FnbVxNVaG0zaW1v3v/q2cfoLT0UqroOnIDKTvzt5OI=
Subject key identifier:   AC:6C:12:88:E5:F1:43:90:61:DC:D1:82:FD:75:E0:C3:CC:DE:FA:31
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A86DBFFF1845B5ABE75C01EC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e212a8ef-92a6-3b2a-a4ef-9f02d64c5206.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:9b80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:ff:f1:84:5b:5a:be:75:c0:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=4da5760e-f4c6-4bc2-a9e8-13b2526cf034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:92:d6:83:5c:df:1f:2b:3e:16:79:8b:bd:d0:
                    1e:3a:fa:e2:50:78:55:89:4d:26:f1:bc:ed:ea:d1:
                    ed:78:9b:bd:1b:4c:be:77:d1:f9:70:70:05:19:40:
                    dc:93:92:0e:dd:8f:90:b9:eb:65:2c:d6:f0:76:41:
                    fb:fa:ca:b9:a7:a0:eb:83:23:45:60:90:0d:a6:36:
                    94:33:50:56:08:3b:2f:7d:06:48:87:7c:ec:ff:94:
                    81:6c:02:41:fb:45:30:6d:20:93:ff:7f:e6:4c:21:
                    6f:9e:19:c7:3a:ea:ad:0c:fd:a9:db:c3:e2:4d:40:
                    4b:1d:62:33:55:07:43:91:68:51:8c:f6:a1:2e:87:
                    8d:00:f1:c7:09:5b:57:35:3a:7f:e4:cb:73:f9:ac:
                    ce:cc:03:50:9d:15:09:74:8e:67:46:32:00:89:9b:
                    cb:61:db:e1:f6:32:ac:55:8e:b2:49:6b:5b:bf:ad:
                    b9:a8:6c:da:84:65:df:bc:ca:61:04:1c:d0:35:82:
                    74:90:f3:83:1e:67:4d:96:ec:2b:fe:b0:cc:17:68:
                    37:54:b1:d9:09:66:48:3b:b5:f0:a4:c8:df:1b:3e:
                    8e:72:24:2d:b3:60:e4:d8:6b:d6:72:81:5f:89:a7:
                    52:63:6a:3d:e0:8f:b3:f5:68:9c:d8:ed:14:ee:89:
                    a6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6C:12:88:E5:F1:43:90:61:DC:D1:82:FD:75:E0:C3:CC:DE:FA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e212a8ef-92a6-3b2a-a4ef-9f02d64c5206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9b80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:16:0e:27:75:8e:1d:d5:39:f2:9b:8c:e1:40:48:a0:c3:ef:
         6c:c1:4d:40:db:8c:ba:ec:b4:b6:20:8f:fe:d0:52:b5:13:23:
         3c:97:37:5a:19:8a:41:dd:39:9c:af:64:e0:06:b2:de:1e:09:
         ce:3b:d3:9d:1b:b5:c0:72:fb:af:56:5d:98:46:4f:d7:24:50:
         1e:b4:43:02:52:db:41:c7:b1:2f:32:d1:27:b7:bc:58:92:26:
         20:bf:d7:da:12:4b:dc:e8:c3:27:48:ca:63:e2:e2:13:f5:c5:
         b9:86:b5:76:12:1b:72:df:27:50:44:50:68:3d:98:47:6f:89:
         48:6c:6f:cc:57:6f:0c:3b:a8:68:bf:f7:a1:88:aa:ad:bb:b3:
         ec:8c:85:7e:ea:54:71:2f:2c:24:f2:a9:9d:c7:eb:92:77:df:
         a3:ce:57:9b:a8:74:8a:06:a4:54:bb:cd:52:f7:12:ed:e7:66:
         db:81:c1:50:73:ab:c0:8f:8c:01:8c:7d:d5:cf:05:b4:45:5f:
         e0:cb:b0:7e:00:95:92:14:da:88:f5:3f:fb:7e:43:ce:7d:52:
         ee:04:0f:5d:8d:48:49:3d:f5:2d:c9:5d:17:15:81:04:a3:96:
         80:52:93:03:e0:75:32:c1:90:38:86:2d:9f:c3:94:7a:cf:8d:
         54:66:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:39 2025 by rpki-client