Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6024b49-5a47-3257-9f6e-757a6ef0d5ba.roa
File:                     e6024b49-5a47-3257-9f6e-757a6ef0d5ba.roa (raw, json)
Hash identifier:          ESNZI8R46s8AnrVzmQCcEmE4kBHsxL10U09IIOC8EO4=
Subject key identifier:   62:70:AF:4D:AA:FB:6D:B1:D6:39:12:61:19:1B:19:1D:05:43:F8:40
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A84124C1A81BAB50963A6B680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6024b49-5a47-3257-9f6e-757a6ef0d5ba.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:2c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4c:1a:81:ba:b5:09:63:a6:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ded18358-9ce5-43b5-bbbb-955c64f5cdc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:2d:9e:e5:7d:be:17:02:aa:96:2b:5a:c5:
                    4f:2f:f6:3b:1e:89:c3:96:99:f3:91:e1:a9:09:73:
                    8a:67:b8:c8:69:dc:d7:ea:a9:63:13:43:c1:82:c0:
                    ca:da:e8:ce:6a:98:13:b5:2a:f1:12:e0:fd:79:19:
                    a8:43:51:60:44:dd:e1:eb:e1:be:0f:f8:48:70:c4:
                    bb:0d:4e:03:7a:ed:5f:a0:60:73:6b:16:d9:8a:f3:
                    a3:41:39:c8:9d:d3:12:28:36:91:d9:0f:67:5b:58:
                    93:59:c2:2e:77:74:f4:53:b3:61:98:ba:7c:e7:75:
                    b3:c0:1e:47:58:f9:20:2b:78:07:a2:2d:83:dd:b2:
                    fb:13:be:6a:69:a7:88:5c:b3:b2:64:03:11:a7:4a:
                    82:d9:e1:ea:b5:78:25:01:46:6c:33:81:1f:bf:63:
                    85:7b:e2:9f:eb:aa:f5:93:99:22:ec:89:0c:20:7a:
                    d6:4a:98:47:ca:b9:7a:54:1e:e2:78:8a:5a:ef:dd:
                    3d:ab:65:26:ee:be:17:e9:e4:3a:35:58:ba:3d:3c:
                    c7:10:07:61:e9:5e:7c:e2:cb:1e:a5:81:8e:d9:b7:
                    53:cc:88:70:2e:8a:41:38:96:1d:b2:17:90:6f:d9:
                    9b:ae:bd:2d:a4:1f:12:d5:9a:ad:24:67:30:8c:f9:
                    11:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:70:AF:4D:AA:FB:6D:B1:D6:39:12:61:19:1B:19:1D:05:43:F8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6024b49-5a47-3257-9f6e-757a6ef0d5ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2c00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d2:56:29:c6:25:25:84:78:e1:58:50:5a:34:aa:eb:e4:66:
         56:50:e1:44:da:3c:d7:cc:88:59:a3:3f:5c:f3:25:57:60:69:
         8f:b9:e1:c7:aa:2e:bd:6c:a2:0f:ce:59:c0:e7:de:ac:c2:e4:
         9c:bb:f7:bd:3d:08:eb:d6:6f:9c:ee:44:cc:07:2f:2e:d8:25:
         52:9f:b0:6f:02:25:c1:23:c4:48:e1:4d:8e:b1:ed:84:9a:20:
         17:b9:bd:f1:41:c1:22:03:17:33:36:30:05:9e:14:57:21:89:
         67:d3:75:f8:dc:1d:28:2c:60:57:eb:16:e7:08:c7:d4:04:a3:
         8a:1c:0f:d9:6e:03:71:ba:bf:f3:66:bc:48:c0:1e:9b:84:52:
         20:7a:b5:b8:9a:f5:5e:e8:4b:ae:83:3a:69:60:47:81:05:11:
         ca:fd:d2:74:a2:58:66:ad:e1:67:fe:9b:b6:3f:11:21:32:d4:
         9e:35:df:17:f2:e7:a4:9c:26:ca:17:52:68:ca:83:9c:fc:97:
         e8:fb:af:c0:6d:80:d6:fe:4d:2e:90:e6:45:f5:95:8a:45:11:
         11:67:f1:f3:7e:79:25:32:72:4f:9d:66:fb:9a:f3:cb:17:12:
         ce:a8:4f:81:c8:94:4d:ac:72:d5:15:82:81:08:ab:82:aa:45:
         e2:37:9c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:03 2025 by rpki-client