Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa
File:                     cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa (raw, json)
Hash identifier:          Wnulz4K0utkzegsObI2hPTB47OqilK3bZ6HJo30OrzE=
Subject key identifier:   6B:D9:F9:6E:28:33:AF:9C:58:A8:9D:24:AA:26:70:FA:11:BA:0E:35
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AEF8BCCC5548E22CA7476C758
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     30036
IP address blocks:        2604:2d81:2000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:cc:c5:54:8e:22:ca:74:76:c7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=ba3b040f-ef5b-486e-91b6-e009534c3bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f7:98:10:5d:ad:7f:0a:b2:c3:09:65:df:3d:
                    7e:d6:de:ed:ed:4f:50:f2:9b:93:92:65:88:db:a2:
                    6d:44:99:ea:f1:06:eb:e5:54:ce:5a:98:7c:fe:04:
                    67:65:69:8c:f3:55:a3:34:05:4e:ad:ea:7c:ff:ff:
                    86:16:e8:09:64:e7:9e:80:4b:46:c7:3d:79:a0:1b:
                    83:01:0d:df:ea:90:3b:1e:6d:7a:4c:bc:ac:4a:17:
                    a5:77:47:b0:93:7f:95:d2:50:50:d4:2e:e1:df:6f:
                    e8:60:21:12:a0:d2:f1:9a:09:ed:6f:7f:bd:5c:4b:
                    39:86:b2:d5:71:1f:c6:bf:ac:58:d4:8b:5f:e7:f9:
                    cd:f1:19:5e:90:8b:75:99:e8:fb:de:a4:a4:dd:4d:
                    61:2f:60:7f:68:5b:17:9b:7a:ed:cb:4d:27:b0:d0:
                    74:28:68:81:b0:04:70:06:1d:ea:81:45:66:39:72:
                    70:e1:a5:f9:cd:4d:4e:41:0c:dc:eb:0e:42:a1:f0:
                    92:88:a7:ca:67:9d:8c:5a:4b:5f:77:02:eb:e9:41:
                    5f:11:67:79:79:55:c3:a5:23:c5:ac:c7:a8:85:f7:
                    dc:e2:24:69:4a:24:07:80:4e:c7:62:13:ef:c9:42:
                    bf:07:36:9b:30:fc:28:6b:a3:58:72:86:9d:a4:77:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D9:F9:6E:28:33:AF:9C:58:A8:9D:24:AA:26:70:FA:11:BA:0E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cce1acec-9eee-3b7d-9ed4-e5a9073b7112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2000::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:96:7c:a9:ab:95:39:72:14:36:bb:d0:a3:f7:11:c6:08:30:
         27:90:64:cb:35:77:76:5c:aa:eb:71:84:e8:23:b6:45:f0:5e:
         77:56:37:73:95:ae:6a:56:4b:d0:d6:12:3a:a4:03:06:27:c6:
         ae:d5:39:64:b9:51:85:f4:2e:9c:d7:cd:e0:9b:6f:dc:7b:1d:
         ce:2f:c4:31:4e:06:22:79:e3:33:4f:36:a7:95:95:e9:e1:65:
         c3:00:30:3f:7e:22:ec:e9:60:8a:6c:4f:d0:d1:11:89:0e:19:
         28:b6:11:da:51:3c:4c:8e:9e:1d:60:89:88:d9:7b:9a:7c:9a:
         38:12:37:11:66:94:b9:d6:ef:e2:24:da:c3:a4:21:a1:58:98:
         99:d5:1d:b1:93:10:08:af:68:6f:b8:4f:ea:c8:15:6e:6e:0c:
         60:d1:57:5a:86:8b:d4:f8:ef:aa:11:a5:a3:6f:cc:29:40:a7:
         4b:5d:c7:cb:81:ec:d4:b3:87:b3:25:61:14:cc:99:21:51:b5:
         3c:64:e5:a7:e9:fc:db:3b:1e:4c:e7:3e:04:e4:2d:c2:ac:aa:
         55:ad:e1:35:03:25:19:a9:8d:8e:3a:f7:19:55:06:30:0d:5a:
         04:78:df:5e:bb:0b:ae:95:95:bc:17:35:a2:42:10:2c:43:dc:
         50:06:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:54:12 2025 by rpki-client