Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a85389ec-a0b3-3ebd-ad40-6ef2f890e671.roa
File:                     a85389ec-a0b3-3ebd-ad40-6ef2f890e671.roa (raw, json)
Hash identifier:          uMIw4gt4HZqud4MZ7l2hQF+PHIUnDvJPMCOQhxBitl0=
Subject key identifier:   D2:FF:49:4A:8E:4A:74:08:55:87:31:BE:6A:6C:8E:BA:2B:19:D3:BF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F2E51FC816541E8656706F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a85389ec-a0b3-3ebd-ad40-6ef2f890e671.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:8400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:1f:c8:16:54:1e:86:56:70:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=cfb06a7e-72ae-4283-aae6-09e5ab650e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:99:d8:7d:0f:17:ca:a1:0d:63:2e:d4:d5:
                    1b:12:70:c7:08:03:53:a2:3b:1f:73:9e:28:49:89:
                    c0:b9:5d:b4:88:44:1a:f0:93:79:bd:0b:48:62:39:
                    1b:47:c5:75:1f:be:78:8f:31:b6:78:8f:84:23:af:
                    2f:69:c6:97:4b:d9:00:11:cf:ee:56:83:60:67:48:
                    06:0a:fd:5d:a5:51:54:dd:08:9f:ab:73:ba:da:b5:
                    aa:ec:24:96:6a:de:5b:7f:1c:a6:91:e1:48:cd:53:
                    0a:f3:fb:6f:56:80:63:97:f8:c8:27:ab:1d:58:92:
                    9f:61:40:33:9e:19:3a:d7:f2:0e:5e:0c:06:6b:e9:
                    05:e2:0c:12:0a:ad:66:62:86:6d:89:1b:89:cc:8f:
                    92:9e:51:13:59:a3:eb:87:2e:72:5a:16:1e:da:f1:
                    c3:c9:0d:41:46:fc:76:58:f0:7a:8b:ee:dd:79:f0:
                    19:1d:88:05:96:3d:30:2d:4d:64:b6:04:ed:fc:2b:
                    43:a9:bb:59:b4:de:41:fb:76:a5:80:81:57:5b:2e:
                    18:99:3d:4b:6a:ae:aa:07:03:3b:e1:74:47:c6:ab:
                    0e:66:30:1f:83:0a:d8:f9:41:50:57:22:23:f0:55:
                    14:51:85:21:6a:eb:06:80:b8:7f:f6:31:e5:3f:46:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FF:49:4A:8E:4A:74:08:55:87:31:BE:6A:6C:8E:BA:2B:19:D3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a85389ec-a0b3-3ebd-ad40-6ef2f890e671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:87:9a:c5:d5:ba:0c:e5:a7:16:7c:ed:ad:12:cf:d6:0b:
         ef:15:a9:19:2d:a2:06:ef:e3:15:be:b9:f1:8a:66:09:6a:0b:
         fd:06:1e:16:28:b2:27:62:df:d4:31:85:1d:05:6d:25:bf:18:
         97:81:ad:43:2a:58:30:a3:c2:ad:3e:49:58:8b:f6:95:66:3a:
         2f:1d:af:47:e0:d1:6d:30:df:ec:62:05:c0:6a:72:eb:d8:38:
         48:8e:29:f7:a7:76:5f:51:dd:5e:aa:23:c4:74:63:ca:13:9b:
         57:3c:5c:93:2a:d0:91:36:b0:24:43:c5:62:45:96:34:63:f3:
         01:02:37:f6:ca:c0:65:31:e3:f9:26:19:75:71:89:0e:33:0d:
         e2:46:48:5d:fc:0e:ab:bc:f1:e4:4f:78:7a:53:ec:c5:d4:59:
         d2:6c:1c:3a:d3:ad:90:bb:ae:bf:ed:aa:8e:e5:52:a4:c8:75:
         0f:55:3a:63:bd:2f:c5:42:11:1a:84:fc:03:5e:3d:c3:02:f3:
         82:46:d2:b4:90:4f:fc:7e:fa:a0:9f:40:8f:6f:77:a4:e5:60:
         a6:7c:6f:e8:e8:e8:20:04:2a:3c:68:53:4a:e9:e9:76:8a:e7:
         20:7e:8d:7c:50:43:a2:a5:4c:c3:58:83:30:32:83:60:cd:3f:
         08:4f:95:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:26:44 2025 by rpki-client