Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8330cc7-39d8-3f04-a3ad-5855665a6117.roa
File:                     f8330cc7-39d8-3f04-a3ad-5855665a6117.roa (raw, json)
Hash identifier:          Sm5jqzp0s9kcjYNUIIOR/A8ahRQaKVYkgEVaj78u+8w=
Subject key identifier:   64:46:3B:D4:C8:A6:EF:96:8E:1C:D7:EB:B4:A9:66:4D:B1:29:E9:7E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD0D63EE588533427D771CCC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8330cc7-39d8-3f04-a3ad-5855665a6117.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:3e:e5:88:53:34:27:d7:71:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=bb315024-0558-4197-bde5-7112ddb6cc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:d0:f7:48:60:c5:7c:35:6a:ce:a7:48:e4:
                    fc:ee:01:1a:fd:8f:c7:91:ec:fc:3c:f2:33:83:0d:
                    f2:56:2e:26:e8:e7:eb:a8:9c:09:07:9d:3b:09:40:
                    ec:72:07:86:c8:c9:29:d4:f5:8e:5d:44:5d:fd:2f:
                    80:30:ee:94:67:50:6f:ce:48:81:b5:65:c5:c2:11:
                    3f:4a:22:d9:32:29:d4:77:f5:77:5e:9d:43:64:e9:
                    47:70:38:3a:8e:d5:39:82:3c:18:ae:36:ed:91:90:
                    ed:22:c2:5e:d2:7a:68:5b:b8:dc:73:7d:1a:8c:a9:
                    59:63:70:42:ef:88:e9:c4:9b:3c:7a:60:47:37:46:
                    90:1f:6d:ca:ac:e1:94:ac:b2:ca:69:42:42:a8:4b:
                    c4:81:f0:29:8a:a2:fa:ba:dd:16:8e:8e:1e:4e:f4:
                    d5:d0:9a:d7:77:15:bc:c0:0d:db:60:02:ac:4b:d1:
                    11:5e:16:c4:fe:a4:52:70:b5:3f:35:5a:2e:f2:b3:
                    73:8b:b9:9e:5a:b3:ef:91:05:9b:2b:3d:1c:d4:e9:
                    e3:5d:07:0e:b4:58:d1:f4:9a:1b:8c:38:37:0a:6a:
                    28:6e:a8:d0:95:49:66:b6:d1:e7:9d:ba:68:b5:bf:
                    ca:18:36:10:21:88:aa:b3:aa:31:b6:05:3a:dc:8a:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:46:3B:D4:C8:A6:EF:96:8E:1C:D7:EB:B4:A9:66:4D:B1:29:E9:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8330cc7-39d8-3f04-a3ad-5855665a6117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:cf:d6:96:66:34:5b:58:fa:fd:01:22:61:47:15:5d:2e:95:
         a2:fb:8d:d9:ea:60:ee:b1:a1:87:ee:6a:8f:97:46:5d:15:a2:
         da:e2:46:c6:3c:6d:65:8e:e3:70:81:dc:f8:f6:4b:2e:16:d8:
         18:34:be:aa:c6:ee:d9:dd:26:4c:be:bd:1a:bb:a1:a5:a6:0b:
         a7:55:5a:ac:df:11:ae:ae:f6:0d:15:a9:7a:31:75:ea:70:f9:
         2e:a7:ad:47:50:bd:1d:f2:57:67:f1:27:4e:cd:88:16:34:79:
         18:1a:75:43:0c:56:91:34:1e:25:00:a6:a0:60:9f:5e:a5:1b:
         75:21:94:8b:ee:ef:08:4b:ca:9c:a7:42:65:cc:69:77:39:ea:
         0b:86:31:8a:5f:13:98:26:e3:c5:39:87:6b:f8:38:4c:5d:44:
         fc:72:49:70:2a:f4:85:46:48:e8:55:ff:72:c4:58:dc:30:77:
         dc:c1:90:d7:3b:6e:3c:4f:5f:3d:30:f3:c4:8e:f9:d3:6c:7e:
         14:e3:61:da:aa:3b:f8:9d:6f:84:c9:77:45:9f:8b:7e:dd:4f:
         58:60:c7:00:97:a3:78:c3:11:b5:f9:63:6e:7c:a5:ac:36:98:
         27:a5:01:ca:51:43:70:9e:b6:da:d3:85:5b:5b:56:37:c4:f9:
         54:b6:b7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:45:18 2025 by rpki-client