Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9737e193-e2d4-30ba-a580-7ffa1cdf845f.roa
File:                     9737e193-e2d4-30ba-a580-7ffa1cdf845f.roa (raw, json)
Hash identifier:          /uX1/gIpfAtSs6V0nY4yEyiJrq+Wk8P2X1ogZntsxrU=
Subject key identifier:   AC:72:4E:8D:20:60:05:BE:A8:50:98:FC:C5:E1:D9:43:24:35:CC:11
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A5B95AB7328A41A810606D300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9737e193-e2d4-30ba-a580-7ffa1cdf845f.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     19905
IP address blocks:        2604:2d80:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:ab:73:28:a4:1a:81:06:06:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=5cd5937b-325d-4f96-8ec0-41feb479571e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:47:4f:57:70:e0:19:e7:ab:84:18:9b:22:d4:
                    bd:84:e1:3b:b8:e4:6c:cb:d9:f9:a5:86:17:f4:44:
                    87:aa:99:ee:32:90:db:b4:e3:96:e6:1a:02:67:2d:
                    52:6a:e9:85:3e:4f:b0:9f:ad:a3:e2:14:d3:63:63:
                    47:7a:6d:2c:10:5a:43:bc:9a:52:7d:77:18:6b:0c:
                    43:1d:8d:14:ee:2a:de:b0:6f:0f:f7:02:91:1b:b0:
                    62:81:3f:1f:c8:c4:6f:a9:14:b3:4e:b1:b9:c0:4a:
                    d3:31:8b:dc:e9:e1:b5:79:20:12:76:40:28:7c:d2:
                    59:d1:05:e6:74:e5:be:74:6e:10:32:3a:00:dd:dd:
                    6b:c0:db:45:9c:e1:fb:76:96:c0:ff:83:d9:c8:70:
                    5c:47:b2:f7:35:28:b8:f1:42:71:fe:53:c5:1c:7a:
                    ef:f3:b8:09:de:83:22:af:79:d7:e9:f8:5a:70:f7:
                    ee:47:7b:ea:df:59:e3:b4:57:0e:0d:ef:40:95:17:
                    0f:15:c6:0b:35:9a:9e:7e:29:92:d7:43:3a:80:0c:
                    de:e3:d4:5f:a9:49:ec:51:61:25:fa:b0:3e:2e:56:
                    7c:70:92:4a:e4:8c:74:6d:9d:3c:c5:83:e4:b0:f3:
                    27:b6:b6:d4:38:04:d1:0f:9a:c2:bc:53:e1:27:d7:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:4E:8D:20:60:05:BE:A8:50:98:FC:C5:E1:D9:43:24:35:CC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9737e193-e2d4-30ba-a580-7ffa1cdf845f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:94:4a:25:50:04:2e:e5:54:7b:d1:bd:d3:7c:23:c3:a4:f2:
         cb:67:fd:6d:b6:ae:48:c6:18:7a:48:45:d2:64:ad:31:e5:50:
         49:c9:31:59:b0:47:7f:92:57:23:8d:27:be:c7:62:8b:1d:02:
         a2:64:c0:42:0a:53:6e:ba:8d:a3:cc:06:8a:6e:6e:21:27:46:
         87:1b:74:c7:ab:2f:c9:19:1e:d5:68:f0:4a:9c:87:a5:9a:5a:
         c1:6b:5c:73:73:bf:5d:42:43:65:dd:f9:23:de:3b:dd:38:ea:
         ff:e9:0d:57:44:7c:bb:3b:0f:2f:70:bf:2c:17:ad:bd:a0:2e:
         0a:96:0d:f9:fb:13:3c:ed:48:32:94:a4:5c:4f:55:5c:81:9f:
         c6:2b:2f:d2:74:79:ff:ca:0f:c9:63:0b:65:56:e5:ca:24:65:
         17:d5:16:92:72:b5:34:b3:8f:3e:c2:89:46:f7:8f:82:ce:68:
         15:37:42:d6:77:b3:60:ac:c2:17:5b:4f:0f:89:e7:cc:22:c5:
         21:f5:c6:e2:2a:83:95:90:e7:3d:b5:8a:b8:75:b3:87:40:1b:
         57:12:38:d1:81:c4:fa:80:98:50:a7:3c:a2:80:cd:44:f9:3c:
         cb:4f:3b:95:b8:c9:a1:f8:8c:d2:6e:a7:3e:66:5d:b2:82:db:
         91:d5:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:19:03 2025 by rpki-client