Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b372c618-29ac-3017-85bd-3af6088fc97b.roa
File:                     b372c618-29ac-3017-85bd-3af6088fc97b.roa (raw, json)
Hash identifier:          j7kcusgaKfftbG3F0AC+klcPOHVJ0SE9YsHr7f+iqlQ=
Subject key identifier:   E0:68:1C:48:3A:1B:F0:B4:6C:BA:44:EB:1F:5E:1E:A9:D1:78:CC:AE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F2E521AB1577FC3E180F4C80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b372c618-29ac-3017-85bd-3af6088fc97b.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     30036
IP address blocks:        2604:2d80:8800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:21:ab:15:77:fc:3e:18:0f:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=535971fa-4249-4b36-9f96-f51b486a440c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:6b:3f:39:5e:51:76:70:da:13:8a:a2:bc:
                    e7:44:ed:23:30:27:d3:b6:34:b3:7e:54:47:65:10:
                    b1:65:c4:83:f3:dd:fe:ba:0a:6c:3e:30:68:ec:66:
                    71:30:6f:6c:c3:b0:3c:fc:ed:9f:cb:7f:4c:e6:01:
                    76:43:97:94:99:23:a0:97:27:3d:4b:ce:ad:46:bb:
                    b2:20:70:df:67:b6:1e:f5:ce:9d:dc:74:24:c2:7e:
                    4c:d5:e6:27:76:ad:40:69:97:b6:e4:01:a7:5d:97:
                    4c:a3:22:1d:3a:10:31:a5:b6:e9:4a:f6:32:e9:7b:
                    e8:35:a5:76:85:b0:4c:fc:c3:d8:1a:61:5f:4e:6c:
                    e6:56:ef:4d:4d:1c:8e:66:e8:64:9e:4e:67:86:2b:
                    30:09:f6:50:42:8b:a9:5a:ac:eb:f8:58:61:f3:7f:
                    37:33:ee:2c:d6:bb:fd:39:8a:95:aa:af:6c:b3:fd:
                    b3:4c:54:bb:6f:ef:87:9b:0d:0e:86:f0:52:00:fd:
                    c2:fa:7a:50:51:4e:97:cb:84:92:d1:ee:10:96:9d:
                    7f:20:8c:67:56:75:4d:43:f5:a5:ca:c8:c1:64:18:
                    f0:fa:06:3a:64:a1:1a:33:67:3c:6a:a7:e3:38:ca:
                    73:ab:1e:60:be:d0:fe:64:04:01:ce:d3:9d:18:46:
                    e6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:68:1C:48:3A:1B:F0:B4:6C:BA:44:EB:1F:5E:1E:A9:D1:78:CC:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b372c618-29ac-3017-85bd-3af6088fc97b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:87:32:78:dc:f6:76:31:92:d0:1b:b2:9b:3f:a5:45:9a:
         f6:f4:ba:08:85:78:62:6a:30:f5:6d:34:06:e2:87:74:e4:58:
         bc:1d:91:b2:41:d0:fc:a6:8b:b4:68:45:d7:a1:9a:6b:3c:bd:
         b0:4c:8b:71:61:2c:ed:45:c0:f9:2e:a0:97:09:3f:d3:9d:8b:
         35:59:56:01:2d:a6:33:e0:f9:85:e1:3e:17:ac:03:5c:fc:7a:
         7a:16:62:c6:e4:af:5f:5e:e2:83:d3:35:75:a3:84:fb:fa:8c:
         83:fa:65:a3:33:ae:0d:8a:fe:23:1c:05:a2:8d:a1:1e:e3:46:
         ad:6d:62:7f:2e:ae:dd:e0:29:6d:12:de:dd:5f:c4:3e:2d:2c:
         61:4c:f2:4a:3a:3d:c8:f4:72:c7:68:84:d2:8f:33:4e:3a:27:
         28:1d:ed:69:cd:b9:7c:4d:8f:a4:d6:5b:8b:91:0c:1b:d1:ba:
         a0:c7:22:a1:a7:e7:3a:70:f2:b2:04:95:7f:9d:cb:46:22:78:
         48:af:8d:5e:a6:7a:cc:ad:ff:3d:ad:bf:d4:7c:97:90:5c:29:
         f3:f7:ac:87:6c:a1:a8:9a:a4:04:85:b2:c9:62:0c:de:6d:71:
         a1:1e:8e:eb:34:0b:0f:c7:c2:76:13:88:df:3b:76:b0:61:6a:
         4d:12:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:13:18 2025 by rpki-client