Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbaed3af-fe54-3716-ae66-d49a3b967675.roa
File:                     fbaed3af-fe54-3716-ae66-d49a3b967675.roa (raw, json)
Hash identifier:          ZNsBnq4ojdnd3Uo85ui/kM04iQi6cgvm98g/NqTYxmA=
Subject key identifier:   F4:25:1D:B0:DF:41:38:32:3A:1F:27:8E:97:71:82:93:CF:5D:ED:D7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AD0D665435AFE178D772E2F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbaed3af-fe54-3716-ae66-d49a3b967675.roa
Signing time:             Mon 11 Aug 2025 01:00:32 +0000
ROA not before:           Mon 11 Aug 2025 01:00:32 +0000
ROA not after:            Sun 09 Nov 2025 02:00:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:2700::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d0:d6:65:43:5a:fe:17:8d:77:2e:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 11 01:00:32 2025 GMT
            Not After : Nov  9 02:00:32 2025 GMT
        Subject: CN=8b7b2bca-a2dd-4ebe-a3c3-581419df2ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:04:ff:aa:dd:df:ac:8e:e0:7d:68:86:39:
                    6e:ca:35:08:2d:0f:8f:83:7d:44:20:51:d6:d1:ce:
                    35:97:85:17:c2:36:6e:14:f5:f6:93:c7:24:a3:ce:
                    1b:89:9a:7d:4d:11:e4:d4:77:ef:58:cb:0d:50:52:
                    dd:ad:4c:24:8d:41:73:5f:33:d7:01:d8:d8:ad:ba:
                    fb:56:55:98:8f:0d:bd:81:1c:0e:6f:19:1e:3d:8a:
                    9e:a1:9f:f6:6e:a9:87:9b:a2:48:e2:b6:42:31:2b:
                    9a:f8:18:9f:22:cc:6b:a9:60:3f:f8:8c:21:63:c2:
                    d8:9f:92:1a:1d:46:82:7f:f4:66:01:f8:ca:87:25:
                    1a:45:30:47:6a:af:66:04:25:b2:13:2e:24:7f:8a:
                    52:3a:d4:38:e5:9b:dc:74:fd:9d:fc:71:93:95:7b:
                    66:19:fa:65:a3:e1:f8:d5:39:f6:8a:b0:28:7d:07:
                    30:b4:b2:e5:2e:22:35:0c:6c:f5:80:e6:81:db:1c:
                    3c:54:70:fc:a2:1a:a1:ba:76:d0:9e:2b:c0:29:7d:
                    2e:78:e9:6d:c0:2a:02:b3:88:34:e5:5a:d6:76:ec:
                    d3:d8:96:1d:8d:64:b5:1a:6d:14:91:af:d7:83:6a:
                    ff:f9:d2:c5:07:88:40:b9:55:85:8a:b1:19:17:74:
                    43:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:25:1D:B0:DF:41:38:32:3A:1F:27:8E:97:71:82:93:CF:5D:ED:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fbaed3af-fe54-3716-ae66-d49a3b967675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2700::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9b:41:07:f3:56:5f:bd:96:93:62:ab:9e:fe:26:14:c7:82:
         ac:c5:c7:3b:46:49:a7:a4:90:22:9a:ae:e4:44:23:0d:0c:69:
         66:3e:c4:23:bc:00:71:99:b5:25:34:43:08:85:82:89:d0:fd:
         c3:23:4e:13:59:c6:bc:a9:12:de:87:ce:42:07:98:b8:e5:aa:
         dc:7d:b7:28:86:c7:bd:8d:0a:bb:d3:4a:0c:dd:30:26:a1:db:
         31:d7:7f:e6:4a:43:c5:33:d7:08:b6:2a:7d:2b:f4:a7:7c:e0:
         c1:94:88:f8:19:55:0e:07:a5:f4:b1:c1:88:b3:eb:92:08:fb:
         bb:34:ec:82:96:7b:ff:9f:15:4d:e3:c6:40:a3:8d:03:dc:6c:
         7d:25:85:b8:ed:fe:48:09:07:b4:8d:eb:db:6a:09:6b:ab:15:
         17:8a:66:3d:af:7c:05:3f:46:e3:f9:19:26:28:0d:15:6d:c9:
         e0:17:52:a3:c8:57:0c:23:7e:01:a1:7e:cc:38:ce:27:4c:dd:
         b8:b3:e6:17:20:c9:63:ac:97:26:35:ed:a5:ae:72:14:1d:19:
         1b:6a:55:b4:61:23:fa:37:ec:46:ed:ad:f5:eb:88:96:78:55:
         db:18:81:ac:b4:77:f7:71:ef:fc:d8:58:76:61:d8:6f:cc:42:
         5d:81:30:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:10:30 2025 by rpki-client