Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0731e29b-7de6-31e6-8424-34658d36c94c.roa
File:                     0731e29b-7de6-31e6-8424-34658d36c94c.roa (raw, json)
Hash identifier:          3TmqAhDm+sL1CU8NEl1fJ1loHz0Re4TJjtd5QF4Vg34=
Subject key identifier:   0E:98:E8:90:AD:60:D5:0D:9A:0B:68:58:04:79:95:22:16:3C:D8:40
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AC7FA0D83B01539A269DD45C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0731e29b-7de6-31e6-8424-34658d36c94c.roa
Signing time:             Thu 07 Aug 2025 20:50:27 +0000
ROA not before:           Thu 07 Aug 2025 20:50:27 +0000
ROA not after:            Wed 05 Nov 2025 21:50:27 +0000
asID:                     19905
IP address blocks:        2604:2d81:1600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:fa:0d:83:b0:15:39:a2:69:dd:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug  7 20:50:27 2025 GMT
            Not After : Nov  5 21:50:27 2025 GMT
        Subject: CN=74328603-410b-4c57-a0c4-e78bb02adc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:61:be:ff:b3:92:35:5d:ce:6a:84:89:10:
                    64:6e:64:9d:ea:10:dc:bc:b2:01:e0:d8:e9:22:28:
                    24:11:d4:b8:cf:0b:03:d2:2a:d5:97:b7:1e:0a:93:
                    d4:a0:a6:91:63:07:b2:fd:72:64:77:d2:27:fe:75:
                    40:d3:4b:55:f0:db:c9:72:01:3f:a0:2d:10:89:7a:
                    78:1b:5a:20:f6:5b:dc:b5:c7:d4:ce:b7:82:15:9c:
                    fd:3f:c2:a3:f9:f3:d4:e1:70:45:bc:78:4c:ca:fd:
                    33:7b:94:be:25:48:3b:31:a0:d9:e9:64:10:00:43:
                    d4:00:49:49:63:67:85:b3:6e:ea:6e:c6:c8:65:0e:
                    43:d3:f6:86:12:c4:f8:63:a6:a4:38:1a:d6:6d:e7:
                    00:9e:45:11:1f:81:cd:ca:63:af:45:e0:57:46:df:
                    92:74:20:6d:f2:49:65:21:65:8e:47:82:da:58:35:
                    03:55:89:6a:ac:70:19:f4:26:95:cc:0b:9f:1d:38:
                    5f:cf:54:5e:dd:ff:5e:69:38:e2:22:ba:a1:f4:22:
                    7d:a0:91:a4:f0:db:37:72:d9:75:7a:ac:83:45:f1:
                    22:08:9a:5c:e3:16:31:51:d0:dc:57:72:fe:3e:82:
                    b0:40:5e:c1:e8:20:7e:3c:ea:62:3b:97:73:59:3f:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:98:E8:90:AD:60:D5:0D:9A:0B:68:58:04:79:95:22:16:3C:D8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0731e29b-7de6-31e6-8424-34658d36c94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1600::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:60:e8:95:a2:c4:f6:66:82:2d:37:4d:04:54:59:2f:7b:c3:
         7f:4b:d4:c6:52:ca:0c:ab:e8:67:8b:0f:42:b4:c4:cc:8a:a1:
         66:b6:2b:a7:24:56:84:88:03:4e:43:68:bc:af:ec:20:2b:c9:
         2b:53:e0:83:6c:ba:ef:3c:dd:c8:eb:5e:f4:3f:4b:da:74:80:
         77:1c:26:e9:f0:a1:0d:37:76:96:db:95:39:b5:55:6c:35:6f:
         d8:5c:7a:be:4c:34:f0:c1:64:12:40:7f:7b:0b:f5:c0:8a:ad:
         17:57:ef:c5:db:da:a5:28:4b:6f:58:c7:6c:cf:90:cc:16:a2:
         c8:5d:86:1e:fd:aa:40:78:46:ce:e6:70:5e:8b:22:0a:42:5d:
         07:8c:8b:4d:44:32:09:62:0a:c3:c5:69:8b:c3:e2:31:84:e8:
         23:d0:dd:ea:41:64:59:6c:a8:d2:d6:2e:f2:5f:4a:53:af:2b:
         4e:e4:0a:83:a6:73:d4:ba:55:e9:f9:48:f6:78:12:8f:5c:55:
         b1:ce:b4:3f:f6:56:80:e8:2d:cc:14:32:a3:85:3f:24:f3:12:
         08:16:09:04:6c:c6:76:b0:62:b0:2c:cd:73:db:25:a7:87:08:
         d4:d8:ff:7e:ad:48:0b:7d:0a:c8:96:b5:8a:33:f1:dc:ee:cb:
         71:93:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:34 2025 by rpki-client