Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa
File:                     3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa (raw, json)
Hash identifier:          iireJXcl46TP3hs/wff29r2CvDvEGwqOdQJawzj4E4k=
Subject key identifier:   B7:14:DA:5C:4C:32:DC:99:D0:56:92:40:7A:38:41:E7:FD:9C:5D:14
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A66C065E1966503605832E240
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     19905
IP address blocks:        2604:2d81:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:65:e1:96:65:03:60:58:32:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=b44d11c9-8ffc-4f5e-8049-24871f969303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:bd:81:2e:9d:d2:b4:5f:24:a4:ba:43:4d:
                    f1:42:a7:82:f0:04:59:92:f9:70:57:42:bc:1c:e3:
                    21:1f:9a:2c:a2:39:31:22:34:10:51:18:37:13:20:
                    2e:09:40:47:4c:0c:3a:15:85:c3:4b:bb:d7:a2:2e:
                    1e:30:73:17:cf:b3:d0:dc:10:5e:4d:50:11:64:cd:
                    95:9f:05:34:c0:0c:c1:46:71:ee:77:56:94:62:01:
                    87:16:b0:2b:33:c5:ea:dd:7b:3f:b9:a2:d3:cc:4d:
                    b9:c5:38:75:59:cf:5c:57:51:1b:ba:a6:58:b1:d7:
                    e6:98:b2:46:17:57:40:93:4a:3f:b9:ef:4d:49:be:
                    cc:e4:7c:e4:da:4d:1a:a3:86:1f:16:72:bc:38:48:
                    5e:22:37:0a:3f:8b:4e:78:a9:55:35:5c:ed:c4:61:
                    61:09:9d:e1:30:b6:56:45:f1:dd:fa:9a:47:ab:bd:
                    6a:88:36:a1:4c:58:19:52:19:39:e1:f9:2f:97:b9:
                    f9:90:27:06:e7:87:74:15:2a:5f:5a:5c:0a:7f:b3:
                    5e:5a:b7:72:bb:a9:1a:91:09:47:3c:63:6f:f9:db:
                    48:e4:91:73:38:af:89:0c:6f:f0:7e:31:f1:9e:6a:
                    94:89:b6:de:e8:f4:f3:37:fb:be:e2:1d:ee:80:1f:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:14:DA:5C:4C:32:DC:99:D0:56:92:40:7A:38:41:E7:FD:9C:5D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e72bff0-0832-39e7-8e8b-f28d2a52db36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:64:94:ed:17:ca:63:9d:ee:0f:76:49:13:11:bc:c1:33:2f:
         b7:9a:e1:86:c0:52:85:43:c2:54:a6:bc:86:c7:7a:f2:bc:19:
         76:b8:54:9a:02:58:28:18:b0:e7:df:82:cf:da:a5:e7:4e:d2:
         f3:eb:ed:04:a2:ed:7b:7c:83:5c:91:66:5a:8c:d5:04:6c:3e:
         0c:f0:41:11:d5:20:c4:91:cf:84:24:55:fe:e2:4c:db:7e:cd:
         d0:df:fd:b3:c2:9c:45:03:48:80:0b:85:0a:98:90:a7:0b:f2:
         20:46:42:38:1f:ab:5b:86:69:85:b2:44:23:09:5e:27:06:7a:
         27:5a:f1:0e:dd:ef:72:cd:67:1b:cc:37:fc:71:e4:24:c9:60:
         c1:6f:18:c0:58:98:e7:f3:d9:2c:c2:f4:f1:e3:eb:5a:80:8e:
         f9:7f:93:54:31:8d:d0:69:05:52:f3:d0:a4:a0:1e:51:5d:69:
         28:f9:84:1b:1d:2f:4e:ec:ae:c4:07:35:af:64:14:e6:3c:ab:
         3f:80:d9:38:12:91:1c:1c:ee:3e:d9:1c:8b:52:9d:00:21:0d:
         39:ab:43:cd:b4:83:de:6b:e2:67:67:79:d8:84:5b:0e:ca:26:
         4a:d0:4d:fe:d8:8c:b2:21:7e:55:2e:74:78:5f:21:a7:17:1c:
         c2:91:bc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:30:52 2025 by rpki-client