Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/370c0de8-7139-3e21-b760-88b7edb52698.roa
File:                     370c0de8-7139-3e21-b760-88b7edb52698.roa (raw, json)
Hash identifier:          xYd0rGVyjruc0Qi5JISGkJ5nIUZ1g5exbuElrHMwrP4=
Subject key identifier:   78:84:DC:74:06:4D:CE:4B:34:32:0C:DD:3F:AC:EC:3E:AD:77:ED:20
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F2E52044377043950FAB1C00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/370c0de8-7139-3e21-b760-88b7edb52698.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:20:44:37:70:43:95:0f:ab:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=6fe65b21-6b7c-406e-a7f8-4b20a141c684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:ea:59:40:a3:53:d2:9e:0a:44:69:98:af:
                    7d:1a:7c:98:20:7e:a5:a3:78:ca:59:cc:37:4c:81:
                    44:71:7d:53:bb:da:32:22:2d:a3:f9:0e:b0:07:7b:
                    9c:1d:61:32:54:ac:06:2b:67:68:15:06:48:77:f0:
                    bb:59:74:d7:20:14:fe:3f:06:47:b3:48:1a:5e:4f:
                    20:11:be:b5:a5:7d:ba:19:5e:33:ec:5d:ac:89:c8:
                    11:68:b8:25:d6:14:80:0d:86:3f:94:da:af:50:65:
                    ea:a5:c8:93:4d:7a:94:4c:94:32:81:60:3f:1a:a2:
                    a1:39:73:59:a5:d6:eb:7b:3a:8a:67:1e:09:52:f5:
                    9f:7f:92:9e:96:64:89:5f:5b:d2:85:12:e8:72:e3:
                    52:ab:15:37:49:53:e5:4a:8a:27:37:45:e9:1e:2b:
                    0e:26:e9:32:c1:05:10:07:94:b6:00:56:5f:a6:08:
                    d0:f8:72:aa:c5:1f:4f:6c:37:5c:ca:3e:ff:0f:fa:
                    89:1a:ec:9d:eb:fc:6e:8f:48:16:84:1a:be:21:84:
                    d0:8e:d8:05:1a:f5:f9:5b:45:be:b0:c3:54:6c:b8:
                    93:bd:06:d5:61:bf:2c:58:26:72:c2:d9:fe:e7:59:
                    de:85:f9:40:5f:d1:f9:05:fb:8a:da:29:b0:e8:c0:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:84:DC:74:06:4D:CE:4B:34:32:0C:DD:3F:AC:EC:3E:AD:77:ED:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/370c0de8-7139-3e21-b760-88b7edb52698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:36:39:43:bc:35:a1:69:a9:48:64:c2:16:7d:ce:1f:76:19:
         74:59:48:f3:c7:5a:46:cf:e6:85:19:a8:6d:30:1e:3c:6b:b3:
         72:f6:0e:55:23:4e:2b:f4:6a:f6:1d:f9:7a:65:4e:f7:82:88:
         0c:aa:2e:99:b7:8d:63:46:5a:0e:70:69:53:d6:42:c9:fd:78:
         bc:d3:c6:53:b1:0d:fd:3d:6f:63:fa:5d:09:24:50:62:3f:b4:
         0f:73:5f:71:e0:f5:b0:ed:15:46:f0:fc:15:ae:20:3f:ed:39:
         01:17:cd:a5:d2:1e:93:4b:82:2b:53:ea:3f:a9:7d:b2:33:9a:
         96:a7:56:1f:7a:38:31:b4:dc:c8:bd:e1:dd:cf:30:13:94:35:
         ac:db:4b:b2:78:a3:0a:47:e8:97:53:a2:6a:f5:3f:54:c6:ce:
         ab:4c:06:02:7f:6d:74:ed:30:50:2a:d5:32:2c:b3:86:ea:04:
         67:55:b4:67:e1:a2:49:64:be:3b:65:af:07:30:c3:23:1a:88:
         ea:94:a9:3c:11:ef:6a:0c:4c:26:5e:67:6a:3c:db:8e:85:f4:
         21:60:46:09:2b:2f:1e:72:55:b5:03:82:28:fd:0e:e9:c1:ca:
         0e:fa:70:f2:b2:ee:de:1e:97:f1:b4:01:90:e3:be:5d:68:1e:
         0e:73:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:19:56 2025 by rpki-client