Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03384d78-f7ad-347a-8430-c9c4793c7847.roa
File:                     03384d78-f7ad-347a-8430-c9c4793c7847.roa (raw, json)
Hash identifier:          rCFteI6q/gyUs33+FgEfPps1kDH4BwnJCKsMbyuqclQ=
Subject key identifier:   08:72:66:4B:12:D7:84:0D:E1:FF:64:2E:1D:82:97:E7:E5:B1:37:BA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B5EAD8E608A0878F26680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03384d78-f7ad-347a-8430-c9c4793c7847.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d81:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5e:ad:8e:60:8a:08:78:f2:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=0fb0e6de-0ccc-407c-94ec-f5f6905e0a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:7e:2c:1b:11:60:45:10:69:96:66:ac:03:
                    83:25:37:90:6e:04:73:7b:a1:a3:64:be:b9:bb:8b:
                    d9:f3:f9:78:cf:2b:f7:bf:a2:1d:61:b6:a3:09:7a:
                    8e:71:17:ea:ba:2d:dd:23:f5:e9:79:3c:49:5a:29:
                    bd:63:82:fe:6c:f9:92:9b:14:76:dc:f4:9c:b7:cf:
                    4a:cb:82:5a:18:ab:93:76:5b:14:bc:09:0c:cf:b3:
                    23:bd:78:f1:bb:0a:7b:20:a6:b0:e9:bc:fe:1e:28:
                    d9:4e:3a:de:b5:b7:a0:9b:92:07:77:07:d3:c2:b5:
                    a9:00:57:25:f8:f8:22:c3:7b:60:a0:6e:b4:e7:c4:
                    aa:47:0b:91:7a:36:f5:2a:89:81:15:d3:4d:ed:5c:
                    3b:03:1f:c2:dd:ab:05:59:8d:36:79:50:f8:34:52:
                    17:5f:45:49:c0:0f:9d:b6:8f:ca:2b:da:31:59:2c:
                    78:d6:e1:90:73:78:9b:cd:fb:40:89:5b:78:1b:fc:
                    ae:5a:06:e8:df:52:fc:1a:cc:e6:8e:71:65:7e:d3:
                    54:b7:ea:41:66:a6:19:4f:d2:77:d7:c7:c1:4e:a8:
                    96:17:db:05:54:b1:96:00:9d:94:74:bc:af:bd:cb:
                    08:2a:64:bb:19:d3:50:35:4c:42:43:70:a8:b6:31:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:72:66:4B:12:D7:84:0D:E1:FF:64:2E:1D:82:97:E7:E5:B1:37:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/03384d78-f7ad-347a-8430-c9c4793c7847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:5a:a8:bc:7d:58:3b:b1:67:19:ac:05:05:86:8d:89:d9:a1:
         d8:da:3d:7b:95:20:c2:f4:73:ba:48:90:e3:e5:6a:7e:c1:a6:
         80:0b:f5:ed:87:ce:bb:2a:ea:4a:be:42:be:f3:51:f0:41:c0:
         0d:cc:40:34:e6:f0:f8:51:74:d8:8a:73:2f:5f:79:19:d8:74:
         3a:53:4b:80:6f:56:77:75:40:3a:f1:c6:4d:35:92:32:7b:ed:
         44:ad:d6:98:ef:a5:a2:21:d0:c2:60:a8:fd:c2:aa:bb:a9:5e:
         e8:e7:c1:32:c6:2f:d9:1f:e0:66:c7:c9:7b:87:b5:12:2b:73:
         ee:54:b4:99:ef:81:db:82:ea:c1:41:c2:40:c7:88:af:22:23:
         6f:3d:c3:b7:17:37:91:6f:33:2e:a2:6f:20:a8:ed:f0:d4:ff:
         83:ea:a4:32:74:42:28:ea:16:0c:da:e5:81:1c:08:1b:31:79:
         2e:01:fe:5a:2e:ec:55:16:aa:f4:ee:d2:ae:93:55:2a:bc:cc:
         dd:2f:6a:6f:49:b2:4f:07:55:bf:47:ea:0c:c9:24:08:12:f7:
         5c:ec:58:34:dc:e7:7d:ac:83:55:3b:61:fa:da:4f:93:7c:f4:
         c8:93:7f:9b:cd:09:ca:41:b3:b9:5c:9e:fa:6f:8c:ae:1a:80:
         6f:a1:96:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:50:55 2025 by rpki-client