Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/810040d5-00bb-3884-8f89-9ed97c748589.roa
File:                     810040d5-00bb-3884-8f89-9ed97c748589.roa (raw, json)
Hash identifier:          t0SnZAbZY6qlFzp4E9ss6Wre/MoE9fp+WUfxyS/4Eik=
Subject key identifier:   D5:1C:8F:46:64:40:EF:94:4C:EF:A3:6E:CF:1A:61:1E:86:41:79:6B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B5C8971529491B4E648A0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/810040d5-00bb-3884-8f89-9ed97c748589.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:7c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:5c:89:71:52:94:91:b4:e6:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=8ef843b1-a1b7-4dbd-a105-0d62c5538a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9a:c6:e5:2b:62:f1:74:52:5c:e0:11:cc:f5:
                    d4:9a:75:51:af:7f:65:c8:1e:31:d9:67:40:76:13:
                    54:53:b5:44:9e:16:90:d1:79:f1:a8:9c:83:5a:e0:
                    1f:0d:16:f0:8e:a4:13:8b:7b:a4:bd:73:81:a5:a1:
                    64:23:c8:84:c6:fb:0c:3e:af:12:f3:f0:09:87:bc:
                    7a:27:ed:4c:54:33:ba:c0:a4:e1:0b:cd:c9:44:8d:
                    f4:b3:98:92:43:84:ea:a4:e2:7c:40:98:99:61:e8:
                    e0:6d:d6:78:b7:e2:a3:02:1b:03:42:36:e0:b6:d2:
                    f6:a1:bf:d7:38:39:8a:b3:f3:d7:8e:99:38:a9:19:
                    7f:3a:a2:f6:f3:d3:92:bb:69:4c:8a:34:ed:57:01:
                    36:7b:ea:48:76:26:26:c4:cb:23:bc:48:86:8f:1a:
                    2e:86:be:cc:84:b0:21:b5:7e:e5:92:4f:10:b5:47:
                    c3:fb:2f:72:7d:28:d5:42:9d:30:8e:ea:c3:d5:2f:
                    5a:a0:a7:ec:32:2a:9d:c1:37:d7:32:66:f9:2a:83:
                    96:7d:40:51:b8:d7:60:87:69:b9:5a:87:df:41:44:
                    99:e5:d3:25:97:2a:64:65:8d:03:70:d0:ec:20:51:
                    99:d0:cb:f5:d9:f7:6f:5d:a6:64:d5:b7:75:19:2a:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1C:8F:46:64:40:EF:94:4C:EF:A3:6E:CF:1A:61:1E:86:41:79:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/810040d5-00bb-3884-8f89-9ed97c748589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7c00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:53:ea:06:54:ae:e7:be:2f:d9:e4:d5:c7:56:12:00:b2:28:
         4c:aa:1c:0b:ad:6a:6a:9a:ac:d1:5b:cc:74:20:dd:35:48:73:
         87:66:a9:f0:ec:d0:38:10:df:22:26:2c:51:6d:7e:a7:72:e4:
         9b:58:eb:bf:eb:36:94:fc:e3:0d:15:45:43:0f:f5:b5:55:19:
         7f:79:18:22:45:b1:1c:0b:83:95:9b:25:e1:2e:d1:d0:02:b1:
         df:ad:47:fe:a5:27:a4:ea:24:d1:94:2e:bd:76:54:da:ea:d5:
         20:90:4a:3e:28:51:14:b1:31:2e:39:6e:9b:c8:67:41:0a:29:
         31:f8:d3:72:56:c2:7d:69:2c:71:cb:76:e3:c8:39:c1:c9:aa:
         d7:f3:bb:65:0a:46:77:f2:2c:39:fb:a0:57:81:16:cf:4d:d9:
         e2:cc:ee:de:9a:57:5d:94:05:50:11:82:fc:c1:f8:01:63:44:
         41:28:ba:cb:a1:8c:eb:b1:2a:bd:2a:c5:c8:bc:c0:ab:52:b0:
         04:1a:42:f9:73:a4:e6:fe:6e:b0:a2:55:ef:a8:3f:43:eb:7a:
         dc:fa:89:32:4b:9e:f9:a8:9b:0e:60:84:c0:60:a6:a5:10:fc:
         39:fe:09:b5:9a:4e:df:72:34:5e:c2:46:cf:6f:46:a0:0f:fe:
         3b:fc:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:34:31 2025 by rpki-client