Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b47e4ad-0202-321e-b1db-366817683f69.roa
File:                     1b47e4ad-0202-321e-b1db-366817683f69.roa (raw, json)
Hash identifier:          LTxHb75aiygNS/mjg07zScF1BgH3Qy/KU7q3d3KbMzg=
Subject key identifier:   D9:D9:15:CB:AF:92:40:91:0D:32:D1:82:C1:04:66:B1:7C:86:46:8C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A71EB27A80AAC500599B23840
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b47e4ad-0202-321e-b1db-366817683f69.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     30036
IP address blocks:        2604:2d81:1080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:27:a8:0a:ac:50:05:99:b2:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=69b94531-b71b-49e4-a4d3-9caf7ba3a6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:7a:b3:ad:6b:9b:f7:35:be:27:14:c9:14:
                    07:8d:14:4f:13:ce:2e:ee:5d:13:89:39:ce:0f:a3:
                    e5:c4:78:dd:a4:47:60:42:b5:1d:46:e3:b3:47:64:
                    43:e5:76:bc:80:34:3a:a4:de:1f:86:18:68:fd:be:
                    69:0c:aa:3f:fa:ed:ea:07:45:40:91:01:c8:a4:b9:
                    40:59:ac:14:0c:49:9a:31:f1:a6:b6:1f:e6:68:70:
                    f2:8b:94:25:cb:ae:47:47:e0:91:1c:bc:c6:54:c8:
                    95:cc:23:63:96:5c:cd:dc:8f:d2:e4:93:a9:de:f3:
                    b6:28:8e:16:63:3f:a1:2e:1c:05:6b:e4:4b:41:83:
                    a5:cd:1d:c8:b2:80:71:4d:6d:4c:61:be:6d:6e:eb:
                    10:bb:93:dd:6b:1a:7f:d3:bf:ba:18:99:67:a0:65:
                    89:66:f9:9e:5e:dc:38:53:15:53:12:d2:f6:c6:bf:
                    3f:ee:4c:45:4b:a6:37:d2:e1:17:37:07:6b:65:5d:
                    e6:5c:72:0e:09:d4:82:5d:d4:8d:ae:13:07:5d:7a:
                    d4:23:4b:60:ec:6f:0a:22:5b:bf:43:f9:12:f6:ee:
                    aa:44:48:16:7d:78:e0:0a:79:eb:e2:6e:62:d5:08:
                    ae:20:b3:05:5b:e8:c6:4a:9e:ae:5a:20:ff:55:b7:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D9:15:CB:AF:92:40:91:0D:32:D1:82:C1:04:66:B1:7C:86:46:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b47e4ad-0202-321e-b1db-366817683f69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:21:d7:03:ae:38:17:77:7b:34:c1:08:b6:a3:5d:c3:19:
         d0:52:4f:52:21:5b:58:92:eb:d8:c6:bb:14:81:60:5a:00:df:
         cf:af:13:9c:96:87:9f:c5:fd:e8:b8:54:15:0f:2f:64:55:10:
         1f:38:76:fe:d2:48:da:f6:8e:da:56:99:ac:d1:57:12:cd:37:
         23:d9:8a:75:7e:03:b7:bf:27:ed:5d:9d:af:69:dc:1e:09:63:
         6c:e9:28:cc:1a:98:06:0e:7b:a8:1e:c6:19:c3:68:36:8e:1c:
         2e:bd:da:7a:34:b3:4a:5e:d0:17:c8:3f:2c:4f:a9:df:9c:7f:
         c5:02:c5:59:87:fb:7c:3b:fc:59:26:24:a4:d1:bc:dc:6c:79:
         e5:fd:be:00:7e:c6:d2:70:92:6a:ed:7d:1c:91:48:d2:8b:71:
         f2:01:d4:7f:d0:72:84:fe:52:b5:6b:92:b0:d1:f2:05:ef:5c:
         fc:6a:96:10:f7:8f:18:25:87:d6:31:02:86:70:65:b8:3a:74:
         f1:c0:b1:b2:82:8a:a7:cd:0c:9f:2a:f9:36:b2:b5:c7:22:ca:
         01:fb:7b:d5:67:77:2d:54:d1:d8:77:d0:f8:00:28:27:75:2a:
         ee:b7:b5:73:4e:13:b0:6e:10:29:33:0c:2b:69:fc:c6:92:24:
         91:b3:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:21:09 2025 by rpki-client