Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cd20d3e-49ee-3db3-9c49-7b5a001acf26.roa
File:                     6cd20d3e-49ee-3db3-9c49-7b5a001acf26.roa (raw, json)
Hash identifier:          TrULC6a4bpP6+BWNR1drVWZAxaSMvVYVa8hCOmVaLKQ=
Subject key identifier:   52:E4:A7:09:00:6F:67:76:B4:6B:27:5F:76:49:8C:1A:7B:D2:09:2A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD0D63E86AE715D0B02782280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cd20d3e-49ee-3db3-9c49-7b5a001acf26.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:3680::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:3e:86:ae:71:5d:0b:02:78:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=ab9e886c-1dfa-4b13-963d-2962dd6af9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:a4:41:d8:fc:8d:08:9f:2c:ce:9d:5f:16:
                    40:66:f0:46:a2:b2:ff:0e:bf:66:fa:bf:19:57:fb:
                    9f:47:34:68:23:d2:98:2b:be:dd:7e:bd:fb:08:92:
                    68:49:b1:bd:08:f6:18:8d:38:1c:70:eb:04:dc:33:
                    1d:96:33:87:6c:15:b3:30:8f:57:70:f2:03:a8:2c:
                    7b:74:cf:56:90:e6:ea:21:02:f9:41:dd:bb:a3:04:
                    70:2e:6f:2f:d5:5a:2a:68:22:c7:14:f8:6a:fa:24:
                    2f:93:a5:62:6b:3c:5c:7c:86:ae:be:dc:d7:cd:18:
                    33:07:af:6d:a1:dc:39:72:10:e3:e3:43:a9:f2:f2:
                    7b:e8:a6:a5:e5:8d:d0:e5:8c:b7:71:ca:a6:ae:cd:
                    b0:73:31:33:49:af:9a:48:5e:47:03:86:09:21:7d:
                    34:ac:2f:7b:f3:8f:27:d9:5d:f0:3a:db:27:e9:a5:
                    3b:f2:e8:d0:34:bf:85:c4:c5:eb:fc:5b:90:b2:15:
                    cf:ff:54:81:0b:25:ea:7d:fc:d7:8f:ba:92:e4:80:
                    7d:98:ea:39:a6:48:8d:80:aa:05:02:b5:f5:60:25:
                    92:95:50:ce:46:6c:01:60:79:e7:79:f7:a1:9e:a7:
                    57:f9:49:75:a7:c7:9a:4b:71:57:10:a2:df:44:c8:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E4:A7:09:00:6F:67:76:B4:6B:27:5F:76:49:8C:1A:7B:D2:09:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6cd20d3e-49ee-3db3-9c49-7b5a001acf26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3680::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:47:9e:8f:9e:c9:84:4f:12:8e:e0:4d:e5:3b:22:15:57:2f:
         20:5c:d1:bd:97:0c:8b:3b:e9:d0:b5:10:61:58:b8:16:15:83:
         16:fe:e6:89:93:93:ae:da:35:5b:e6:30:29:1a:04:9c:e1:c6:
         53:f7:d4:9d:d5:bd:f4:03:4b:27:a2:a0:40:bc:1b:df:6f:01:
         88:37:4a:0a:9a:11:d9:8c:52:38:d8:e3:e3:eb:a5:f1:54:29:
         0e:f8:0f:bd:f0:e5:3c:ca:c3:cf:0a:c9:5d:e6:36:d3:cc:cc:
         9e:11:a9:db:50:ee:5a:d1:73:7f:a7:89:c0:e9:8c:ca:49:ad:
         df:71:b4:2c:80:47:67:85:a3:ba:d7:fc:7b:f9:fe:e5:26:3a:
         79:3b:ac:24:77:97:46:5f:bf:45:cd:d0:c9:ce:6a:bd:5e:25:
         fd:f7:da:98:d6:65:2c:af:62:78:05:b1:8b:1d:ea:09:c7:25:
         ee:ea:68:d3:7b:ae:ee:01:65:ee:df:b4:aa:ef:60:11:8b:ac:
         09:0e:0e:8d:df:98:f0:0d:42:64:e3:f1:54:ab:1d:73:c5:f4:
         11:2f:ea:01:9e:50:99:1f:66:c7:ad:40:bc:55:68:05:96:04:
         92:ac:1a:f6:32:d3:a3:0f:80:49:0e:72:5e:6d:75:46:76:65:
         bc:6c:c7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:45:22 2025 by rpki-client