Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5e2838d-3020-3d04-b013-0fc6a8b4aac9.roa
File:                     f5e2838d-3020-3d04-b013-0fc6a8b4aac9.roa (raw, json)
Hash identifier:          vInAODHiJ/ZKuxrlL602FXRSWSwr6Fjc/0IlBTMhIt0=
Subject key identifier:   3C:CF:1D:0C:9B:72:E6:58:82:DA:91:3C:2A:66:95:8A:D9:8A:42:9A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8A79759EFE41E781E646CAC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5e2838d-3020-3d04-b013-0fc6a8b4aac9.roa
Signing time:             Wed 16 Jul 2025 20:07:02 +0000
ROA not before:           Wed 16 Jul 2025 20:07:02 +0000
ROA not after:            Tue 14 Oct 2025 20:07:02 +0000
asID:                     30036
IP address blocks:        2604:2d81:2400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8a:79:75:9e:fe:41:e7:81:e6:46:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 16 20:07:02 2025 GMT
            Not After : Oct 14 20:07:02 2025 GMT
        Subject: CN=e435aa12-476d-48a5-aa28-d4bbce3a0a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:27:0a:b9:12:b4:0a:7d:95:cf:91:42:08:30:
                    8e:55:6c:ff:83:10:7b:c5:01:24:f7:2f:a2:e4:d9:
                    81:cb:f4:67:70:54:50:9b:48:ce:81:5a:72:15:1d:
                    77:a8:94:38:84:d5:62:30:78:28:3d:04:38:5a:71:
                    83:79:13:a3:3e:49:77:b3:38:6c:ab:ca:c3:04:a2:
                    0f:54:98:33:d6:22:fd:fc:d3:2e:28:cf:16:67:e8:
                    3d:0a:72:31:4c:3d:29:0c:70:13:fd:93:3b:d8:90:
                    88:28:eb:16:61:5b:b0:ec:ac:2e:cd:75:0b:28:11:
                    6f:45:93:55:e3:bb:26:41:a7:c0:87:79:7b:73:61:
                    bc:8f:65:52:19:27:94:63:6c:ec:04:78:49:73:7c:
                    d5:3a:9d:1d:38:7c:28:b6:3f:70:9b:68:9a:bf:25:
                    f0:7c:31:68:94:4c:0d:ae:8c:53:e5:ba:04:ac:26:
                    d6:41:23:fa:50:9d:63:a1:95:34:2a:00:4d:38:15:
                    e9:57:03:b3:06:03:32:27:47:3c:c8:ab:6c:c1:12:
                    b5:ab:63:d8:ad:0a:f4:46:3c:ec:68:08:7e:9e:aa:
                    c0:33:68:8a:43:10:7d:92:c5:9d:3b:88:3a:79:a8:
                    87:38:4c:1f:37:9a:c4:27:59:16:10:86:61:5f:7e:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CF:1D:0C:9B:72:E6:58:82:DA:91:3C:2A:66:95:8A:D9:8A:42:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5e2838d-3020-3d04-b013-0fc6a8b4aac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:52:92:d5:d7:ec:ad:75:56:a5:d4:12:f6:ae:33:3e:e2:55:
         c7:17:c6:30:28:2c:a4:ee:77:28:8d:8e:f4:33:71:1c:f1:31:
         42:6e:75:7f:55:cb:0d:47:1b:fd:ac:37:bc:ff:20:3b:8a:26:
         60:bf:df:3a:52:c1:f2:ec:fc:be:be:bc:c0:b1:95:09:d1:e0:
         87:de:9f:d9:73:44:ee:07:90:6b:fd:19:fd:ab:d4:24:a2:63:
         32:25:ca:7a:1e:42:f5:76:8c:27:e9:08:c5:8e:81:83:9c:53:
         2a:b7:b3:e1:ac:4c:6c:2a:d5:1f:dc:54:fc:8d:84:18:a2:97:
         05:c8:fb:16:18:a1:35:81:ad:89:cd:3e:6d:dd:45:0a:7a:fd:
         c2:0c:68:6a:e3:c5:42:1a:f6:a5:06:be:b2:32:80:1d:d1:4c:
         fb:8f:5b:ce:32:ff:6a:e4:20:a2:35:3b:9e:6f:b5:80:40:32:
         53:4e:b5:45:8d:b1:bd:4f:37:98:b8:14:31:b5:cc:18:9e:08:
         e9:36:36:86:8c:52:1e:64:0f:9e:7f:fd:ed:ec:66:ce:60:c6:
         11:32:53:d8:a8:a9:30:8c:ea:95:d0:f1:0c:71:21:ce:25:72:
         8e:f3:b5:62:08:6b:26:4d:06:6c:f1:11:d3:3c:37:75:3a:45:
         b4:a5:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:40 2025 by rpki-client