Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb0a6e34-fbcb-36a4-8c7b-5ebef77132d4.roa
File:                     cb0a6e34-fbcb-36a4-8c7b-5ebef77132d4.roa (raw, json)
Hash identifier:          knjWMtUcxCRG0vf26vGMaUpePzFuJ0T8qSYHB7z4Dy8=
Subject key identifier:   EA:37:44:5E:AF:5D:D8:88:0C:D3:39:54:A6:8E:6E:C3:9A:63:6D:35
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD3A0FB03640E22C0B398D900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb0a6e34-fbcb-36a4-8c7b-5ebef77132d4.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:6400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:fb:03:64:0e:22:c0:b3:98:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=c93d2d79-82c2-4460-9d2d-38bd531e05b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:73:7d:7c:ac:3f:8b:d6:06:bb:ce:ab:65:8f:
                    4f:b1:95:ed:a1:67:e7:33:27:6b:34:dc:3e:b5:1f:
                    dd:ac:44:5f:65:f4:54:bd:07:f4:4b:c6:32:06:2b:
                    85:31:6d:8d:53:82:d0:70:44:0e:cb:53:ad:e6:69:
                    c6:dd:ad:a1:c1:ab:63:58:a0:39:c6:2f:5d:14:c8:
                    ec:66:b7:66:1d:8b:fd:d1:8d:dc:a6:06:2f:e6:4d:
                    46:39:19:ad:6f:0e:c3:20:95:30:1e:31:13:da:91:
                    31:64:1a:61:ba:4c:e2:ef:46:ac:c7:46:76:e3:a4:
                    af:8d:88:7c:f1:f2:bd:68:30:44:21:c5:ef:3d:6a:
                    b5:d4:0c:f0:84:e4:2f:0f:7a:af:74:2c:f4:51:4a:
                    3a:90:92:72:e4:24:ad:c4:ed:d4:f6:d7:79:e1:3e:
                    06:f9:38:75:0b:0a:53:32:83:64:21:90:52:88:1a:
                    cf:2a:41:bb:45:51:35:3b:3b:01:b2:b6:d4:af:4e:
                    f9:fa:ff:06:d2:1c:60:26:a9:7e:7f:65:5f:31:d4:
                    a0:9c:63:62:c8:4a:ee:e0:d9:d8:c7:7b:e6:19:eb:
                    a7:2c:66:8d:34:30:16:da:bc:81:2b:22:31:67:be:
                    74:3a:39:a5:1b:ba:c6:90:b9:59:22:ad:d3:2d:48:
                    f0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:37:44:5E:AF:5D:D8:88:0C:D3:39:54:A6:8E:6E:C3:9A:63:6D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cb0a6e34-fbcb-36a4-8c7b-5ebef77132d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:10:a4:2f:2d:2f:b4:69:e0:20:20:bf:a2:fe:d9:68:e2:
         9f:06:a0:3a:c4:07:51:aa:e3:66:a5:cf:26:7e:bc:0e:44:e0:
         f8:ea:7e:8a:a7:65:2d:df:7e:51:0a:cb:c9:c3:b5:00:d4:11:
         05:a4:a8:0e:25:ec:35:83:d3:af:82:5d:9f:9d:7f:2e:f0:9e:
         26:bb:00:1b:99:80:1c:ab:70:67:19:50:d7:52:28:41:a4:c0:
         35:4c:77:09:70:1f:b6:b2:50:2d:09:88:0b:42:36:5b:e6:01:
         89:a3:be:27:35:43:00:b0:0d:73:07:6b:06:00:61:d2:5e:85:
         35:ea:07:a1:04:5e:79:92:73:f8:28:4c:ad:1b:10:56:17:9f:
         24:16:46:5d:24:f0:a1:17:50:fa:10:e6:c4:4f:53:c9:db:7f:
         65:eb:38:84:5f:86:1a:ab:44:a4:f8:97:fe:96:b8:d1:11:bf:
         32:e8:d2:f2:89:26:1b:c8:ad:60:69:12:f0:32:33:6a:2b:da:
         ee:50:69:52:9d:bc:ce:88:bb:c6:13:4f:20:07:a6:21:70:6e:
         b9:a9:fe:2d:ea:db:fd:a8:63:f9:ef:5b:c2:85:bf:48:59:43:
         86:4e:b1:fe:71:73:7e:eb:49:04:28:aa:c6:53:15:36:99:67:
         f2:93:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:45:10 2025 by rpki-client