Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8332d78-b2ea-3d93-a170-5ecff4aa3d66.roa
File:                     f8332d78-b2ea-3d93-a170-5ecff4aa3d66.roa (raw, json)
Hash identifier:          h+hqvdnNonB90jfQTs3l4viEiY+qvfiJF3Tdu2cq51I=
Subject key identifier:   2A:0E:B1:F0:07:EC:FE:04:B1:31:6B:D3:77:D3:FA:9D:B3:2A:58:C0
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81466656613C3A3FD1D256E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8332d78-b2ea-3d93-a170-5ecff4aa3d66.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:e400::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:66:56:61:3c:3a:3f:d1:d2:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=b012cf61-7ec4-4be6-8d37-aae8239aa14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:6a:0b:02:29:25:de:b2:8b:a8:e3:39:de:
                    d1:22:00:bd:90:e7:d7:a0:b9:8c:e3:fa:9b:db:5e:
                    2b:f9:74:4b:fe:08:ef:08:2d:73:09:4c:f5:e5:9d:
                    2b:f8:79:69:d4:09:33:da:0f:00:33:77:89:a4:7f:
                    f5:2a:e7:5c:31:74:50:a6:1b:d2:f1:99:3f:8f:bd:
                    ee:75:7c:5e:25:29:47:7f:90:6d:54:ba:d4:f6:97:
                    04:e2:04:05:1c:70:41:02:66:04:72:58:41:72:a7:
                    03:6b:4e:02:c0:a4:8f:6b:88:b4:f5:6f:8a:b9:91:
                    b6:84:fd:0a:ae:8e:38:9a:3a:5a:d3:ab:ea:da:6a:
                    83:8c:55:5d:6a:16:a6:3f:af:3a:9e:07:a6:f5:c3:
                    6b:e9:3b:87:84:0b:8a:e0:6c:06:06:25:a5:68:27:
                    87:73:60:9c:b0:9f:5a:58:d6:01:a9:e8:b9:03:94:
                    ae:0d:49:70:e0:82:de:c3:5e:03:ff:14:28:34:f1:
                    03:2b:9b:52:0f:d2:67:cc:c3:86:39:53:7c:b2:af:
                    f4:d9:c6:0c:57:60:a8:e4:d4:60:5b:eb:65:cd:d3:
                    7c:ff:c2:66:82:c2:dc:34:09:53:2c:ce:b4:44:26:
                    da:5e:18:09:19:43:c1:6f:d8:dc:99:e2:c7:98:15:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0E:B1:F0:07:EC:FE:04:B1:31:6B:D3:77:D3:FA:9D:B3:2A:58:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8332d78-b2ea-3d93-a170-5ecff4aa3d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e400::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:00:ac:5a:62:9d:2d:24:ca:54:14:55:b7:30:f6:c7:55:a8:
         78:75:c6:a8:a5:79:a8:5a:40:11:fe:7c:5b:6a:84:4e:d6:84:
         02:66:29:2e:5e:de:f7:81:10:62:6b:c8:54:84:1f:c9:6d:5b:
         f0:b5:e4:5a:16:94:18:ef:8c:1d:a3:4c:34:db:61:2f:65:a2:
         9b:06:da:82:c2:bc:a4:3a:60:81:74:eb:11:4d:27:e6:ce:82:
         2f:8e:20:fb:a9:e1:ce:5c:03:00:34:38:d1:d1:ca:2a:f6:f7:
         0b:0a:8c:2e:57:60:e6:d1:d0:6b:91:23:0e:98:19:20:65:8d:
         88:46:26:62:ec:8d:75:ce:51:6e:b3:4a:7e:fd:8a:d0:9a:37:
         38:e4:8d:c2:dd:92:ac:18:03:2a:f2:3d:02:25:d8:4c:0f:29:
         0c:c6:f9:84:cf:2a:c7:70:55:12:31:91:d2:93:1b:ba:a2:93:
         86:44:98:40:f3:20:ea:dd:39:f0:d6:ad:5f:33:ed:f7:51:7b:
         4b:f2:9d:64:6f:17:de:f7:e1:f9:13:06:24:95:90:5a:b1:c6:
         72:57:4e:65:3b:26:57:9d:86:bd:c0:b3:68:e1:76:b4:7b:64:
         70:d6:fa:bb:20:65:09:f3:3a:0b:e3:df:aa:d1:7c:4c:43:d5:
         b8:78:cd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:43 2025 by rpki-client