Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/741c9c67-7968-35b4-bcb5-54d16c2de338.roa
File:                     741c9c67-7968-35b4-bcb5-54d16c2de338.roa (raw, json)
Hash identifier:          pNy8iEyJuyY989bHFGVLBeta6r+4YWNNrL9F9GcuCnE=
Subject key identifier:   6C:49:C5:45:7B:3A:D1:C3:1B:81:AF:1F:88:C9:4E:16:29:A0:AB:89
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F01A7DCBCD052B8E9816A7C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/741c9c67-7968-35b4-bcb5-54d16c2de338.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        2604:2d80:6880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:7d:cb:cd:05:2b:8e:98:16:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=eb299518-6eca-43f8-b520-f79744829951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:92:2a:55:b9:b7:73:0a:40:52:e8:ff:07:
                    c4:e5:ba:ee:15:52:a3:41:ae:d1:2c:9d:86:ef:db:
                    43:a9:0d:08:f0:47:9e:07:a3:76:26:ff:30:91:66:
                    b1:d5:1a:cd:27:11:ad:55:52:af:b1:1b:f1:d4:b3:
                    67:13:5e:87:04:18:7b:96:c8:40:53:39:5e:c4:48:
                    6a:c1:64:32:79:4e:23:9a:3d:f5:88:01:45:27:ee:
                    16:71:81:5a:f9:0d:4d:83:15:c7:bc:d9:47:12:e6:
                    2f:d4:91:f8:07:f5:6d:83:25:33:58:27:68:08:16:
                    60:10:97:32:4e:c8:be:27:56:33:32:a5:fe:6a:5e:
                    0e:1f:47:dd:ad:ad:31:c2:02:2f:80:a9:ac:82:ad:
                    b3:23:53:89:6c:88:57:6e:d7:ee:5f:45:30:d8:7c:
                    30:85:1b:5f:3f:23:34:bd:6d:a5:4a:a1:2b:c8:f8:
                    c5:7b:d5:a9:62:0b:34:4b:2a:7f:25:b6:e0:48:1e:
                    da:cb:21:ec:16:6c:64:e0:96:87:d8:b5:b3:6d:a1:
                    e9:72:a0:a4:50:2a:d1:bc:63:79:3f:60:6c:ce:53:
                    cd:b6:54:91:76:38:68:74:7a:8f:0b:f0:be:b5:39:
                    ba:e1:b1:50:7b:74:0c:80:5f:48:85:2f:a0:bf:30:
                    1c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:49:C5:45:7B:3A:D1:C3:1B:81:AF:1F:88:C9:4E:16:29:A0:AB:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/741c9c67-7968-35b4-bcb5-54d16c2de338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ce:88:5a:76:da:52:39:82:54:9b:57:0f:94:d7:53:ce:7a:
         34:c5:7d:23:0c:2e:4a:4a:1c:be:02:df:69:39:a3:90:46:5a:
         1c:fe:3a:99:2a:d8:35:60:ef:da:1c:78:e0:07:d0:a2:25:39:
         7b:f2:05:dc:dd:98:65:49:9d:00:a1:e9:d5:bf:35:aa:69:53:
         15:d1:6a:df:8b:09:4d:7f:6a:63:c4:2f:01:84:e8:42:10:8b:
         be:49:fa:6e:85:a2:b0:44:bb:4c:1b:20:f3:f3:5d:ab:dc:3a:
         e4:fc:27:ed:c0:69:af:fe:31:50:40:47:84:27:51:7f:16:86:
         02:7f:ad:9f:8d:dd:ad:ac:49:ec:78:1f:d1:35:53:fa:87:f4:
         2e:0a:bc:6c:24:03:55:d8:c9:f0:33:1b:cb:ef:29:69:23:1b:
         ea:ed:6b:ca:c0:e2:93:ce:65:93:79:9d:51:a9:97:f0:a7:36:
         df:09:23:d4:10:b2:44:f9:48:f4:4d:7e:56:1e:51:6b:fc:93:
         63:80:89:54:2d:4c:be:7a:92:57:33:15:0d:14:b6:de:46:da:
         1c:31:aa:05:8d:44:61:88:0b:19:0c:36:f8:80:58:cd:52:ef:
         2b:2a:0d:0d:b4:56:c8:17:59:3d:8f:02:b5:44:19:29:78:93:
         71:db:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:46:37 2025 by rpki-client