Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa
File:                     1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa (raw, json)
Hash identifier:          L+8R+z0+RzyjGNMrMcJWZoh6grtaBCv9eO/nf4vNnbc=
Subject key identifier:   23:AD:F8:D3:1C:8C:06:E0:6C:0D:7F:AA:A0:DE:33:18:20:B6:A6:6A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A612B09932E18295E15BFF5C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        2604:2d81:1800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:09:93:2e:18:29:5e:15:bf:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=eb5ccc74-b27e-488c-82c8-98a1fa01e11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:8b:df:ae:d2:74:ff:28:2f:13:37:40:a2:
                    14:7f:ab:2f:5e:b5:2d:db:2a:49:b4:fb:b5:9e:d9:
                    e1:1c:c6:e9:50:16:9c:e7:b7:77:47:ad:62:3b:e5:
                    81:61:31:71:c5:b1:1f:e6:a5:ff:0b:47:8b:f1:39:
                    69:76:56:b7:5e:a4:55:fe:9c:c6:b2:d2:05:34:61:
                    b3:aa:15:51:c6:ba:9e:4e:5f:5b:30:e7:7b:70:0b:
                    81:91:a2:4f:ff:b9:73:e0:6a:1a:7d:06:b7:ae:95:
                    4e:6a:bd:9f:13:73:d3:fa:48:6a:5b:6b:a1:a1:85:
                    d8:19:0c:7c:4a:ec:80:2a:aa:42:79:e7:61:fb:6c:
                    c9:0e:e5:9a:e0:5e:99:47:2f:2f:02:e5:23:49:8b:
                    e5:e3:10:bb:2c:c5:a9:aa:5a:b2:49:91:b2:55:dc:
                    80:fa:5f:63:01:81:ca:5c:39:c2:74:77:2d:18:b3:
                    9d:df:8f:43:59:ea:bb:c5:42:1e:b3:9f:5c:99:1b:
                    a6:c6:9d:d6:80:1c:e5:e1:58:b5:21:d6:05:2c:3f:
                    c2:ed:cb:12:c7:e8:52:aa:8a:5e:b9:75:a8:07:7d:
                    09:ba:ea:15:ba:71:7b:1e:6e:d2:d6:a1:21:bb:05:
                    0f:13:3f:81:2c:10:46:d0:6a:86:7d:dc:01:8a:6b:
                    76:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AD:F8:D3:1C:8C:06:E0:6C:0D:7F:AA:A0:DE:33:18:20:B6:A6:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:00:7b:6c:8b:1f:40:29:05:42:08:66:a8:f9:e5:12:65:22:
         eb:f9:b0:5c:f1:89:e9:ba:61:e7:30:d5:24:44:08:2d:96:b1:
         a2:54:c8:b4:17:54:5e:f0:07:27:1f:53:c6:29:f7:1c:91:fb:
         f2:64:a1:2b:84:7b:c2:aa:64:11:c1:64:b1:64:bb:73:3c:14:
         36:89:0d:5b:ac:d6:e0:e4:13:5f:4c:a6:fc:f5:92:15:dd:c5:
         14:9b:d3:3a:e3:1c:97:32:6b:3e:b7:3c:5e:ef:fb:cf:d6:b7:
         96:e2:cf:e3:76:93:01:58:a7:8f:bc:5a:cf:54:b6:80:45:46:
         09:9c:f4:96:46:64:5f:6b:de:96:28:5c:86:88:a3:46:14:19:
         90:22:75:67:f8:39:28:fc:08:4b:e9:63:bb:ca:c4:9d:3a:91:
         ea:77:a5:a2:7f:19:bd:72:e0:92:72:e9:d1:66:89:af:1f:3a:
         30:22:a2:b7:46:1d:d3:41:bc:af:fc:11:1b:f0:8d:4e:0d:9f:
         e1:fb:25:7d:b7:2a:e4:35:6d:cd:b3:14:97:9a:20:f4:19:b5:
         e5:59:b4:41:43:aa:46:66:50:20:5c:0f:16:94:2c:4b:f5:14:
         56:c9:bd:8a:06:b3:87:91:69:26:d3:35:4a:64:3d:75:55:d9:
         8c:aa:4b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:30:52 2025 by rpki-client