Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f870092-b54d-3fc1-8bde-fecc5a86cda3.roa
File:                     4f870092-b54d-3fc1-8bde-fecc5a86cda3.roa (raw, json)
Hash identifier:          wKNH80B85DuxHsgNkui9oD6pGM2AmHL2WV6q10DvhK8=
Subject key identifier:   73:E1:8C:B3:22:C7:33:8F:F6:16:D4:42:61:CE:F7:F3:44:1E:1F:48
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD0D6665A8C518B5423F5E500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f870092-b54d-3fc1-8bde-fecc5a86cda3.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:1a00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:66:5a:8c:51:8b:54:23:f5:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=784306f4-eefc-4034-b46b-df2ca29b732a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:bc:a5:4f:1a:15:59:a2:9b:13:ce:6b:ba:
                    93:d2:97:44:fe:b1:b5:38:86:e1:41:78:46:2e:a1:
                    73:b9:18:8c:af:bc:c3:16:cb:10:bd:b8:af:68:25:
                    b2:ab:46:2f:73:da:de:c2:3f:78:de:f4:77:d4:86:
                    ce:dc:89:83:aa:31:d0:a1:78:9b:4e:66:65:c7:55:
                    d5:24:93:a3:ff:95:fa:df:80:34:4c:5e:32:6a:1e:
                    24:8e:49:c9:72:b0:0d:70:08:72:02:33:5e:77:52:
                    dc:44:66:03:7f:3f:81:d8:50:6d:b0:2e:32:ad:af:
                    18:c8:c2:9e:f1:5b:dd:f6:6a:26:f7:bb:0e:9d:f0:
                    2a:8e:9b:a2:00:7d:2e:c2:9b:b6:e9:5a:22:d6:0a:
                    f2:ee:5f:3d:0c:8d:12:f3:ee:7f:39:1c:1a:9f:b5:
                    d4:8f:a8:80:3c:e9:f0:f8:9b:9c:12:c2:aa:0a:a8:
                    5c:23:5c:47:73:09:0e:fd:74:12:77:fe:d7:a9:39:
                    a7:b3:42:44:3f:5c:f8:df:ec:2f:91:78:5c:5d:67:
                    d2:dc:f7:41:0f:ce:b9:8a:f0:ee:c8:b8:07:6f:bf:
                    12:4a:ab:85:77:66:69:aa:47:9f:b9:33:86:ab:4e:
                    cb:34:71:f8:fc:25:96:cd:fa:35:6a:84:d4:63:dc:
                    6e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E1:8C:B3:22:C7:33:8F:F6:16:D4:42:61:CE:F7:F3:44:1E:1F:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f870092-b54d-3fc1-8bde-fecc5a86cda3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1a00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:9e:f1:1f:39:cf:9d:90:43:76:ba:ad:dc:68:b9:39:62:ac:
         ee:13:9c:34:0f:28:6c:31:34:1d:29:a6:4e:91:55:e9:84:36:
         4b:ac:eb:2a:90:1c:a1:d4:e9:57:06:58:01:fa:eb:9e:29:e8:
         60:5e:47:4e:8c:cd:4c:da:34:5d:ba:27:ff:ef:ed:68:43:d5:
         ee:a0:4d:d4:62:9c:1d:a3:9b:8f:b5:cd:21:63:72:56:2a:2d:
         3b:59:27:af:3b:07:ad:6e:d6:84:7f:b5:6d:5f:9d:8d:62:87:
         b2:08:30:b2:fe:d0:df:48:2e:df:06:77:1a:82:d6:ee:f7:bb:
         35:ef:48:70:e3:98:39:e8:d3:97:21:2c:d8:33:e8:5a:08:45:
         de:e6:79:7a:49:52:f1:1a:77:b2:34:46:33:66:5b:0a:f3:1f:
         dc:03:0e:a3:ed:34:30:f9:e6:58:91:55:ee:f4:ca:d9:75:c0:
         6d:25:95:cb:f0:ae:a8:d6:da:97:92:a4:09:57:fd:8a:ab:4a:
         1f:90:4a:f3:a6:45:86:be:86:e0:51:e4:08:55:a9:29:4d:1f:
         28:35:43:f4:52:6e:a5:25:7d:59:e7:72:49:4c:a1:85:25:2e:
         b9:f0:32:0f:be:44:9c:4f:c7:35:70:0d:67:5f:6a:ad:32:a4:
         c9:0f:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:47:29 2025 by rpki-client