Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb1e7047-b06a-378b-86fe-36d445a41e25.roa
File:                     fb1e7047-b06a-378b-86fe-36d445a41e25.roa (raw, json)
Hash identifier:          IuPmK5BWdYQtrj/IEkXQWO9mYR2+OFrPQR6yoRpnTH0=
Subject key identifier:   76:3B:B2:EE:A5:C4:05:B9:12:CC:CD:F5:0C:98:BB:A3:93:A8:05:34
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD0D6698E2C2A63555929EB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb1e7047-b06a-378b-86fe-36d445a41e25.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d81:1e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:69:8e:2c:2a:63:55:59:29:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=f54fad99-259e-435e-ba5c-41b07982e717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:4f:92:be:a6:4a:6a:91:aa:a3:5a:7e:66:
                    de:58:04:f0:7b:88:2e:18:a8:06:f4:45:dc:61:3d:
                    43:cd:01:c3:61:bf:ad:22:3f:bb:4d:35:3d:cf:5c:
                    db:cd:56:ee:e3:59:a1:d5:4f:49:3e:9c:58:be:52:
                    2f:6d:a8:99:84:3a:79:ed:a7:bd:fc:a8:3f:4b:62:
                    e4:f3:9a:bc:95:cc:0b:ef:6c:ee:0a:6a:61:c3:dd:
                    28:2c:5f:85:80:f9:e6:22:24:7b:25:9a:57:07:dc:
                    8d:ad:f7:0d:ab:8d:bb:af:db:2e:79:85:d4:d3:67:
                    72:79:43:e4:b1:f1:e9:4d:b6:9b:d5:93:df:4c:76:
                    10:47:6c:5a:e6:b7:ef:88:46:c3:f5:34:a1:c1:2a:
                    d1:50:5b:89:88:ef:76:4d:be:80:1d:49:4f:d5:33:
                    98:b3:cc:8b:42:9a:13:6b:e6:f7:80:77:68:21:a3:
                    40:6f:79:34:ab:3f:2c:81:27:7c:23:1c:be:c2:a3:
                    0e:0a:8e:84:ef:b5:78:01:36:9d:b0:37:b0:1f:3a:
                    9d:51:ed:f9:ad:f6:83:16:ac:4d:50:cf:ce:fe:00:
                    d4:92:e7:a2:5f:c1:e7:d3:60:8f:12:9d:b8:d5:4f:
                    31:3e:ba:6d:bb:6e:68:88:6f:ff:36:34:d5:31:f1:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3B:B2:EE:A5:C4:05:B9:12:CC:CD:F5:0C:98:BB:A3:93:A8:05:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb1e7047-b06a-378b-86fe-36d445a41e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:07:ae:d2:a3:f5:b1:98:0c:1f:a5:c0:02:78:9f:1a:41:
         67:52:30:9c:dc:53:ea:4a:59:e3:87:5f:fd:38:84:60:6b:8c:
         95:ab:bb:39:63:eb:e5:6f:ff:e4:b4:96:eb:41:7c:85:23:7f:
         28:e2:15:8b:7b:7a:ad:ea:68:d8:af:6f:e3:77:3d:db:5e:1b:
         79:bc:a8:18:be:10:bc:b2:e0:53:c8:f4:a1:3f:8f:1c:18:5d:
         a4:71:de:d8:f0:ba:4e:95:ce:2f:32:3f:90:84:b7:75:ba:83:
         12:93:2d:55:13:4c:f7:9b:3d:7e:64:55:6b:2d:ee:ed:bf:39:
         7d:55:7b:f2:ee:2b:da:77:cd:36:32:7d:5c:d9:d0:27:08:4d:
         59:88:d6:e2:b9:b1:9f:f0:b0:87:b8:53:6c:47:90:2f:0b:da:
         64:39:2d:c9:54:35:75:ca:61:ee:65:a6:8c:77:dc:d5:56:c2:
         fc:87:49:ca:b1:d2:27:e2:c8:06:b6:77:59:1f:56:94:07:c9:
         7d:62:0d:db:82:58:bf:18:c3:0f:c3:10:69:06:63:67:9d:18:
         0e:97:fb:cd:b7:54:96:98:e9:0a:96:64:30:f1:33:61:4c:1b:
         98:ac:93:6b:44:13:19:c2:af:4f:d8:79:25:df:7d:7d:b9:a5:
         d1:56:e3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:55:09 2025 by rpki-client