Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b53973-dd8b-35e2-81f3-e0b86af82204.roa
File:                     f8b53973-dd8b-35e2-81f3-e0b86af82204.roa (raw, json)
Hash identifier:          upTQEG1arI0YIufbcB/2OGMC6wOelv0DZiCSYGSX0ns=
Subject key identifier:   71:CA:1B:81:D6:86:2B:16:9F:17:49:BF:C5:58:BF:A5:B6:39:08:D2
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A761B5060BA1DD4C07120EA80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b53973-dd8b-35e2-81f3-e0b86af82204.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:3500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:50:60:ba:1d:d4:c0:71:20:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=3c25c3f8-2ea1-4af3-881a-356cd775f90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:b3:50:e5:42:ba:70:77:1e:b6:40:46:01:
                    4f:59:df:54:5c:8a:7b:9e:bb:5d:0b:7f:89:b7:86:
                    5e:19:a2:4e:5f:56:71:62:7a:76:1f:d6:62:d0:e5:
                    42:6f:b8:53:b1:5b:8d:d0:5f:e7:d2:f2:8f:30:6e:
                    6c:7f:19:c7:1a:33:ea:9d:35:20:5a:f7:ed:4b:20:
                    5e:5a:45:67:1b:bd:6f:22:3d:a5:28:cc:a9:38:3b:
                    8b:bc:a4:f1:b6:21:a6:d8:46:94:1c:3b:0f:5e:73:
                    dc:34:99:32:54:0e:61:8e:a7:cd:10:8f:aa:5b:88:
                    74:37:ac:9e:c2:5a:ff:35:6a:0d:6f:59:d2:9a:9d:
                    20:e2:1a:a6:0b:71:43:38:b6:78:df:20:4b:ac:07:
                    f5:e7:09:af:1d:3f:0d:42:51:eb:0f:a2:55:ce:53:
                    a4:ca:73:fd:92:3f:bb:e6:46:11:f2:e6:56:90:52:
                    8b:28:70:23:40:83:20:e1:95:65:5f:c3:75:e7:85:
                    70:7e:3b:9f:79:ec:aa:f9:93:7b:f8:12:f1:c6:12:
                    f2:ee:74:03:53:bd:6f:d6:e3:26:68:58:3c:ef:5c:
                    5b:a4:08:b4:02:67:23:b6:b2:fc:45:1d:31:5a:a3:
                    e8:1d:a9:b9:e0:bf:3a:5e:ab:70:1f:81:d0:3b:b6:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CA:1B:81:D6:86:2B:16:9F:17:49:BF:C5:58:BF:A5:B6:39:08:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f8b53973-dd8b-35e2-81f3-e0b86af82204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:fd:29:9d:1b:2d:5d:ff:ef:dd:ca:3b:98:71:8e:1a:0a:
         c3:44:01:2b:48:96:dc:70:3e:f1:13:07:98:55:91:ba:2d:bf:
         d0:87:8b:b8:fb:63:bf:e0:76:06:23:f9:8d:b0:e2:56:91:c4:
         3a:1a:a0:7a:cc:c9:6c:c4:c4:82:83:7e:90:2f:ae:15:48:d6:
         cf:a1:69:0c:58:35:c6:65:3c:f7:6b:cb:68:f3:98:74:9c:f8:
         00:66:20:53:b9:b0:7a:4f:4f:56:4a:5b:e2:6d:5e:17:f0:be:
         62:31:ea:9e:02:e7:75:9a:d1:9b:0b:52:db:0b:0f:e1:b0:67:
         c5:7a:5b:cd:5f:98:99:35:4f:f3:4b:94:8e:bf:1f:8d:64:2d:
         87:1c:22:8e:04:ff:2c:77:ba:db:f0:07:51:37:38:33:12:89:
         55:0c:c7:b9:d9:8c:9e:a4:2c:42:90:aa:d6:6f:cd:59:cd:33:
         da:99:a9:2c:b8:59:67:0f:24:e3:bd:3f:a6:8c:30:f1:cc:03:
         c4:10:3d:a9:56:dc:40:ca:05:ae:9b:06:87:96:64:74:4d:51:
         83:2e:e6:59:52:fe:d1:cb:93:fb:b9:77:6c:06:00:30:bb:8c:
         e8:ed:6e:4f:d3:50:e6:b9:02:fe:28:58:3c:18:0f:98:f3:20:
         21:de:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:07:03 2025 by rpki-client