Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/22c6d0a3-e651-3ec3-9d56-909aa8709c4f.roa
File:                     22c6d0a3-e651-3ec3-9d56-909aa8709c4f.roa (raw, json)
Hash identifier:          TeSzpLEtMR8Gz+YaGpqLTcVCKtJVJiPCzLady6G56Cc=
Subject key identifier:   25:B7:6D:C4:ED:FF:FE:B2:11:3C:64:81:00:8D:A2:81:EF:16:35:45
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B541E96E15053A11E0758
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/22c6d0a3-e651-3ec3-9d56-909aa8709c4f.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:4a80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:54:1e:96:e1:50:53:a1:1e:07:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=053c2143-a675-42be-8f97-797a165b276f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:36:c4:7e:7a:ed:fd:1c:63:fd:ce:92:73:
                    c6:25:fd:01:68:f6:94:bb:61:37:19:5c:65:ad:46:
                    40:b1:0c:95:a0:f8:b5:bf:30:87:e6:92:e6:d4:0d:
                    70:82:ed:14:60:7c:49:00:76:59:91:08:7e:63:e5:
                    0b:f3:d6:b6:1d:10:a7:ac:17:06:6e:59:f9:a4:6c:
                    d4:e8:89:fa:5f:5a:bc:e6:1e:48:69:19:aa:5f:68:
                    b4:60:16:54:fc:a7:90:8e:8b:34:02:c1:dc:c0:83:
                    5f:7b:3f:be:c2:d0:d1:67:3e:86:20:96:2d:be:58:
                    17:a4:6b:21:21:5d:4a:5a:19:33:49:9c:45:e1:32:
                    d8:c9:93:9f:6f:ef:2d:64:f9:fa:82:56:6f:9c:d3:
                    36:72:18:95:6a:3d:d5:f8:80:4b:32:d8:7c:8a:37:
                    ec:40:b9:3c:0e:de:dd:9c:b5:e6:29:1b:a4:a6:61:
                    fa:e3:cf:6c:bd:96:a6:66:ba:c5:d7:42:de:51:10:
                    6a:12:72:5e:c6:0a:bf:f3:4f:29:ea:80:62:c4:be:
                    63:13:2d:e6:82:5d:4d:a9:80:bc:0d:26:85:bf:08:
                    14:ce:8a:43:cc:3e:fd:9b:3d:8f:8e:aa:9e:82:bd:
                    92:cc:2b:22:1f:be:8d:33:c3:15:79:6b:85:66:1a:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B7:6D:C4:ED:FF:FE:B2:11:3C:64:81:00:8D:A2:81:EF:16:35:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/22c6d0a3-e651-3ec3-9d56-909aa8709c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4a80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fb:76:4b:b6:1a:e9:ea:2d:75:df:b6:66:3a:79:34:10:b7:
         93:ef:e9:dc:8b:4d:20:28:97:7b:10:a2:2e:5c:3b:8a:1d:7c:
         bb:4d:49:98:c4:62:05:80:a1:5b:78:ff:1c:b1:b4:18:ba:27:
         c8:0e:b0:e7:74:a3:b7:22:98:3e:7a:db:ed:b1:ab:3d:23:f0:
         4d:90:bf:20:ae:4d:d7:f9:e1:87:15:7c:0e:85:70:80:7c:b0:
         56:b9:25:db:73:b3:53:d2:9f:59:ec:d1:60:5b:3d:97:dc:89:
         b5:fe:50:01:50:74:57:4f:1e:66:b5:39:c5:30:4a:0d:d8:dd:
         55:c6:90:7d:b9:04:cd:7e:36:7e:ce:a8:b2:f5:55:74:d7:69:
         51:2e:9a:d5:94:c6:df:f5:80:be:1b:5f:99:ea:9b:c3:56:99:
         89:2e:9f:41:28:ab:5c:1c:73:f5:bb:36:c0:92:cd:e4:d5:0b:
         6d:3a:9d:59:7b:58:48:03:54:1b:99:a8:fe:56:73:65:24:d1:
         8c:bd:fd:47:f8:02:75:d2:9f:69:d4:3f:d6:b0:b6:2c:29:f3:
         6e:49:b8:90:7a:4e:e1:b8:e5:ad:7c:a6:30:dd:bc:cf:9f:ba:
         ae:27:89:75:39:4e:8d:8d:0c:d4:60:69:f3:43:a5:1d:e8:d1:
         c2:87:82:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp2G1QeluFQU6EeB1gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk
MDUzYzIxNDMtYTY3NS00MmJlLThmOTctNzk3YTE2NWIyNzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyU2xH567f0cY/3OknPGJf0BaPaUu2E3GVxl
rUZAsQyVoPi1vzCH5pLm1A1wgu0UYHxJAHZZkQh+Y+UL89a2HRCnrBcGbln5pGzU
6In6X1q85h5IaRmqX2i0YBZU/KeQjos0AsHcwINfez++wtDRZz6GIJYtvlgXpGsh
IV1KWhkzSZxF4TLYyZOfb+8tZPn6glZvnNM2chiVaj3V+IBLMth8ijfsQLk8Dt7d
nLXmKRukpmH6489svZamZrrF10LeURBqEnJexgq/808p6oBixL5jEy3mgl1NqYC8
DSaFvwgUzopDzD79mz2Pjqqegr2SzCsiH76NM8MVeWuFZhq7yQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCW3bcTt//6yETxkgQCNooHvFjVFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjJjNmQwYTMtZTY1MS0z
ZWMzLTlkNTYtOTA5YWE4NzA5YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgEqA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAf7dku2GunqLXXftmY6eTQQt5Pv6dyLTSAol3sQoi5cO4odfLtN
SZjEYgWAoVt4/xyxtBi6J8gOsOd0o7cimD562+2xqz0j8E2QvyCuTdf54YcVfA6F
cIB8sFa5Jdtzs1PSn1ns0WBbPZfcibX+UAFQdFdPHma1OcUwSg3Y3VXGkH25BM1+
Nn7OqLL1VXTXaVEumtWUxt/1gL4bX5nqm8NWmYkun0Eoq1wcc/W7NsCSzeTVC206
nVl7WEgDVBuZqP5Wc2Uk0Yy9/Uf4AnXSn2nUP9awtiwp825JuJB6TuG45a18pjDd
vM+fuq4niXU5To2NDNRgafNDpR3o0cKHghE=
-----END CERTIFICATE-----
Generated at Thu Jul 10 03:07:22 2025 by rpki-client