Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c10254a-fc26-39ea-a40a-9ded4c8e5f15.roa
File:                     6c10254a-fc26-39ea-a40a-9ded4c8e5f15.roa (raw, json)
Hash identifier:          oWlvrlucaIOHbn9pxld6BZ2EKLPvhBxlm4OJHDPh7vk=
Subject key identifier:   7D:98:1B:37:FE:E2:1D:DE:42:F4:25:F4:1A:31:1B:5A:AC:C8:E3:D6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD0D63EFE7A3144981DCD5FE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c10254a-fc26-39ea-a40a-9ded4c8e5f15.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:7380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:3e:fe:7a:31:44:98:1d:cd:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=aa0c6d7f-4579-4f68-b91e-9280ee86c120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:29:42:71:e1:4e:e7:7f:4f:05:c9:fb:4a:
                    bb:c2:e1:e0:78:f6:91:23:83:ab:51:0a:64:cd:a1:
                    de:bd:68:5c:26:3d:01:5d:9d:b0:32:10:a2:3a:d8:
                    b7:c0:b4:df:a5:33:8c:b6:d5:41:a3:96:3b:db:2f:
                    c9:bf:cf:ae:5d:e9:31:13:2e:7f:3f:a7:98:63:91:
                    98:7d:56:cd:e1:34:c3:30:8f:fe:98:42:2f:8c:dd:
                    06:e7:98:f0:84:d6:d9:70:79:dd:d5:d8:d4:35:af:
                    4c:6d:2b:91:8a:b9:73:bf:03:d4:99:b7:20:39:ca:
                    51:ef:d3:00:56:b0:2d:14:c3:ca:a9:a0:fa:39:0e:
                    38:b7:0e:70:28:db:0a:f8:3c:b2:0f:02:13:e3:8d:
                    75:e6:34:b3:96:6c:eb:95:de:b2:ad:08:90:a5:fb:
                    69:8a:97:a5:82:ce:a6:f8:61:2f:c6:0a:66:73:f8:
                    a3:8b:f3:a7:e6:e0:c0:25:72:cc:27:50:4b:ba:8c:
                    e0:e9:3d:58:d6:56:e5:a4:20:b4:35:99:27:ef:4a:
                    ed:16:60:0d:ec:9e:61:d7:17:ea:38:e9:86:8e:0d:
                    c1:12:58:4f:fd:35:cf:e6:98:42:92:53:5a:69:c5:
                    46:9f:f7:27:7c:87:aa:18:47:b1:55:fd:6b:62:b4:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:98:1B:37:FE:E2:1D:DE:42:F4:25:F4:1A:31:1B:5A:AC:C8:E3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c10254a-fc26-39ea-a40a-9ded4c8e5f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:66:78:71:cb:bb:19:66:10:e8:f7:2f:37:6f:36:10:55:43:
         01:37:b3:cf:1a:c0:d3:66:56:b7:d1:ce:a5:8a:ff:cd:85:fe:
         c2:67:be:75:cb:6b:79:16:b2:14:1e:8c:17:e3:a6:3e:32:6b:
         82:1d:3f:af:6b:a3:4c:5a:f4:d8:b1:32:05:71:b3:28:27:d4:
         c0:bf:e0:9b:a1:00:72:00:d3:83:fb:0f:e1:22:06:b9:df:bc:
         79:dc:a4:1e:ab:ad:19:a9:0a:0b:c0:b3:29:be:a3:d4:41:e8:
         c6:d6:5d:3a:9c:86:cc:74:39:8c:6b:6d:e6:b0:3a:f5:58:a4:
         31:52:32:2d:88:9f:aa:a6:f4:cd:6d:ee:15:cc:64:84:05:d2:
         e7:c1:4d:57:09:fa:95:6d:06:e9:ea:64:3a:bb:db:c2:d2:5c:
         fe:f7:ff:c7:ab:04:ee:7a:57:e1:16:e1:65:a9:13:58:ff:c9:
         17:38:af:75:32:de:60:92:85:90:a9:d5:a6:d1:ca:cc:b8:77:
         73:a2:26:fa:ff:45:8d:23:4e:85:0a:4c:35:19:98:90:e4:72:
         6c:bb:0d:92:4d:c8:08:05:7d:30:94:80:2b:15:31:66:b2:16:
         1c:a3:db:ff:7c:be:27:1f:1f:0a:79:8a:43:2f:04:b7:8b:23:
         f2:36:6e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:23 2025 by rpki-client