Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b372c618-29ac-3017-85bd-3af6088fc97b.roa
File:                     b372c618-29ac-3017-85bd-3af6088fc97b.roa (raw, json)
Hash identifier:          wTs7m7v7p0S+cHqby8pQMTx2Qfc6FJL26gaIEoK6px4=
Subject key identifier:   A4:BF:FC:94:D0:EF:58:66:3B:0C:9A:3F:6B:1C:31:49:E9:AA:88:8D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD3A0EBDDB96F9B8AA6EF8580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b372c618-29ac-3017-85bd-3af6088fc97b.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:8800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:eb:dd:b9:6f:9b:8a:a6:ef:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=e12c5813-e92e-43db-89e3-9df45daf8ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:2b:db:b5:a2:3d:c3:cf:d1:29:6b:58:41:
                    a5:58:2a:bb:4e:70:b5:4a:f6:af:64:55:c1:77:5c:
                    4b:8f:41:7b:49:69:6d:44:f7:52:53:87:e2:d1:3e:
                    fb:98:03:9c:ac:30:0d:a4:95:f5:28:04:55:f6:8d:
                    68:e7:9b:b9:ac:cf:8b:67:37:4f:41:09:37:47:e3:
                    d9:95:08:3c:68:73:a2:77:a8:3f:89:39:b4:b7:ec:
                    a8:28:70:be:16:49:d4:b0:50:bf:7e:e4:f4:f2:16:
                    e8:92:d5:a1:8d:a1:2d:54:8d:7c:a7:c5:ff:21:d0:
                    d6:97:71:79:81:ad:3e:f2:d0:29:87:1f:de:f6:65:
                    38:21:b4:1b:d4:bf:9e:b1:e6:8d:18:ad:ca:94:23:
                    8e:84:da:d0:fa:52:20:28:be:5c:1a:5f:fc:8f:e1:
                    73:50:f6:a0:9b:b1:8c:08:46:50:a3:84:72:0c:8a:
                    81:7c:60:29:cd:ad:7e:39:15:f2:9b:b8:2a:64:37:
                    08:6f:db:ca:9b:c4:43:27:02:59:04:74:69:76:9d:
                    91:76:23:e9:6b:12:9f:34:3e:fb:b2:aa:ba:c4:ba:
                    76:09:ca:ec:6d:81:47:9c:df:4c:fd:52:7b:81:4a:
                    4b:05:5e:fa:5d:31:a3:14:f6:87:ed:d8:2d:b2:10:
                    f5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BF:FC:94:D0:EF:58:66:3B:0C:9A:3F:6B:1C:31:49:E9:AA:88:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b372c618-29ac-3017-85bd-3af6088fc97b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:45:2b:a0:50:bf:f1:91:ca:57:c5:3e:e2:4b:6f:db:29:e6:
         13:71:3b:be:f8:74:45:73:00:d2:bf:ab:cc:22:64:60:d3:0f:
         22:f2:b7:11:f8:1c:9b:d6:35:9e:04:ef:07:39:ae:34:ef:bd:
         51:41:a6:e8:35:87:7d:60:b4:b8:38:3d:bf:b4:e2:c6:b1:8b:
         e5:63:c5:10:1f:06:28:30:39:50:5a:3b:e3:a7:62:59:d4:6c:
         60:24:b1:f2:71:f5:95:30:7b:17:53:94:1b:45:8d:bd:53:9e:
         b5:5b:57:a8:56:49:c7:ee:ef:7a:c0:c5:ae:29:ab:f6:87:e5:
         e0:f3:a4:82:b5:7d:d3:e8:c7:fb:5a:3b:ca:59:32:00:89:c9:
         40:92:2f:4c:e4:53:bf:2d:e3:16:6c:bb:f2:5c:e6:90:dd:07:
         77:49:ea:eb:67:45:df:79:31:89:1c:2c:6b:79:f5:a8:ef:06:
         f8:d8:83:0f:f9:38:11:77:00:83:cf:cd:08:c3:8c:62:d4:0e:
         fc:8d:c1:3f:5c:ba:e2:66:66:03:87:fb:b4:f6:fc:1c:7c:e0:
         6c:1d:e9:1f:cc:64:5e:1f:31:97:6d:a7:d0:e6:9f:f0:01:60:
         06:e1:8d:d4:bc:45:4b:55:dd:e5:6a:cc:ee:67:5f:1f:f0:67:
         1b:1b:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:47 2025 by rpki-client