Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2a5f6ec-bd31-3597-b097-6ea9037cf9df.roa
File:                     e2a5f6ec-bd31-3597-b097-6ea9037cf9df.roa (raw, json)
Hash identifier:          Z3gmmOPsE+UwVFl2d5nZtWYDWCmNJhBQE49miFb4bGk=
Subject key identifier:   D2:4C:2F:D5:61:BE:73:8C:F2:AB:8D:42:17:91:75:6C:AD:1D:B6:79
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8412589B12DA6EF8A5BCC480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2a5f6ec-bd31-3597-b097-6ea9037cf9df.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:1400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:58:9b:12:da:6e:f8:a5:bc:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e7c82010-5300-4900-8ea1-5963c7855c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:a6:71:d3:fd:63:9b:c5:da:99:9d:c8:82:
                    cb:29:91:c7:eb:a2:7d:c5:d3:32:21:e9:8e:5d:75:
                    44:a4:b6:de:92:4f:0a:8c:8b:94:c3:4f:dc:69:c1:
                    bd:c6:d4:33:da:dc:98:de:39:fe:9d:ba:7f:ae:d5:
                    f7:de:dc:5d:5c:cb:a7:b3:31:13:5f:c8:49:3f:70:
                    fb:cd:34:fb:b3:eb:0b:0b:db:0e:de:9c:ea:e0:ad:
                    a4:00:2e:ba:a7:ef:34:be:a9:6d:33:1c:1f:77:6a:
                    27:86:b2:b1:34:b1:0f:32:da:0e:1c:f3:de:83:84:
                    f2:94:32:e8:d1:6d:06:9a:bf:3c:40:d3:28:93:87:
                    0d:cf:c4:bd:ba:7a:95:87:33:ab:09:74:01:07:34:
                    25:67:c1:8c:2b:4c:c6:aa:6f:8e:8b:c6:8b:c0:d3:
                    be:18:53:af:77:ee:02:24:11:16:17:44:bb:fa:3b:
                    26:0a:7b:77:2b:c0:88:fc:b4:e0:fc:8f:03:cd:18:
                    ec:a9:85:ea:71:ab:07:5a:6f:43:2c:af:c4:da:cd:
                    85:b6:91:87:3e:1a:27:ff:c4:81:1d:5b:43:a9:eb:
                    9f:61:49:5c:b4:94:c7:d1:4c:b4:44:3b:00:9d:6c:
                    74:df:4a:12:b8:11:3c:5e:f8:4d:6b:cd:16:51:cf:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4C:2F:D5:61:BE:73:8C:F2:AB:8D:42:17:91:75:6C:AD:1D:B6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2a5f6ec-bd31-3597-b097-6ea9037cf9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b3:ea:f1:14:f1:fe:72:c1:45:81:bb:c0:6b:ed:b2:ef:43:
         a8:97:70:0c:bb:b1:ad:6e:03:e2:17:da:c5:57:05:10:59:58:
         4d:ce:c0:b6:2d:ef:ff:f6:05:02:86:9e:17:e5:18:47:f5:6c:
         1c:9f:67:ee:a3:93:9b:fb:4e:59:0b:db:b7:b7:0d:8a:d3:e1:
         34:e3:a6:46:04:e8:cf:6d:88:0f:70:a2:cf:78:8f:bd:f8:78:
         fa:49:e2:bf:37:4d:26:c2:32:53:78:d0:e2:5f:ba:49:9e:b6:
         2c:ef:32:b1:4c:2e:ff:0e:2a:1b:7f:53:53:ba:50:e7:bf:c4:
         04:2c:e8:76:91:00:56:24:37:8c:9b:6b:9d:98:5e:5e:09:17:
         88:e4:7c:59:72:f0:03:42:63:7d:10:d8:38:ac:4c:63:5a:da:
         84:8b:7d:70:df:0e:01:73:a8:f4:aa:e2:78:dd:01:9e:75:d9:
         d4:0e:8b:7c:33:d9:0d:4a:8f:31:13:9f:0a:18:15:53:d5:13:
         45:da:46:45:15:63:38:d6:2d:00:98:d7:3b:a3:1a:d3:f5:07:
         7c:a0:dc:7e:5e:51:3c:05:32:73:90:a0:60:cc:6d:e0:71:f5:
         55:39:58:92:3c:f2:ee:a0:78:a9:c1:f8:8a:ca:ab:c0:73:10:
         b2:59:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:49 2025 by rpki-client