Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05da21d2-4ab1-3c76-b852-e60e5778bfc2.roa
File:                     05da21d2-4ab1-3c76-b852-e60e5778bfc2.roa (raw, json)
Hash identifier:          85jHWSO+gK5FEF4NlNJ5wkRD42TnYPlBv6ylwK4lbiA=
Subject key identifier:   18:CB:F3:37:83:15:68:DC:DF:B2:7C:D2:6C:71:37:C6:69:5A:77:02
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784B59FCA4A3DCEF7AB5480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05da21d2-4ab1-3c76-b852-e60e5778bfc2.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:7b80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:b5:9f:ca:4a:3d:ce:f7:ab:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=51e7faf6-0a7f-4337-b21f-496b9686ee5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:2d:2f:8b:40:10:1b:56:6b:8c:d5:a8:db:
                    8c:21:7b:9b:3a:93:69:ad:86:34:e6:8f:90:59:aa:
                    12:7d:6e:c2:fc:d6:b2:3e:f9:af:d5:9b:be:d8:72:
                    7b:c0:21:10:69:57:4f:9d:b2:ab:30:ab:84:7b:13:
                    b9:c1:5b:c4:13:c1:1f:dc:8d:cf:2a:e8:fb:e5:63:
                    f2:0c:c2:68:bd:84:21:2d:fd:c3:bf:62:76:b8:b8:
                    73:b3:e5:f7:d0:e1:90:e8:23:ec:5f:0f:dd:6e:d1:
                    cd:34:7e:8a:0a:6a:e4:0a:a6:b4:bc:d3:3b:bb:78:
                    fe:5b:62:e0:55:44:0b:ab:93:2e:fe:52:cd:70:f9:
                    ed:77:79:cf:44:90:54:eb:9a:30:55:b4:d4:21:1a:
                    84:5c:0b:10:03:a7:c1:03:3c:63:b9:18:e4:3a:45:
                    5d:b5:58:b4:9e:ef:2c:1d:62:42:54:31:9f:e1:ff:
                    4b:9e:0e:83:93:d2:ea:52:d6:8f:29:61:58:0b:88:
                    2f:e3:05:99:ef:ac:65:eb:ff:f0:66:6d:f5:5e:d1:
                    9e:ac:0c:02:c6:43:7d:c2:ef:20:99:cf:4c:43:e9:
                    6d:8c:11:e6:33:59:28:59:17:42:5f:53:9e:4b:2b:
                    b1:24:f3:71:d4:b4:62:d2:1d:1b:0e:81:20:5f:a8:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CB:F3:37:83:15:68:DC:DF:B2:7C:D2:6C:71:37:C6:69:5A:77:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05da21d2-4ab1-3c76-b852-e60e5778bfc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7b80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8c:60:0a:f2:1e:a4:70:e3:82:3d:27:38:96:7f:ff:b8:2c:
         58:9d:d7:0f:a3:19:30:52:11:f7:93:08:cc:36:21:9f:13:87:
         74:ab:35:bd:f4:6f:b0:ac:fb:57:5f:bb:7c:df:db:b8:0a:0c:
         07:35:d7:fb:d4:57:5a:75:35:d0:9d:69:bb:1a:7a:1e:fb:3d:
         1c:c4:08:9d:5b:13:ff:59:6f:5a:a7:0b:06:c5:a5:6d:63:8c:
         6d:fb:6e:ae:02:9d:2a:ca:9c:33:a6:e9:ee:6f:f3:64:1a:04:
         c2:a1:c3:dc:4b:22:88:34:1c:53:ed:77:fc:0a:4b:3e:eb:c4:
         3d:3f:57:e7:80:4c:67:1a:fe:62:88:fc:3f:e2:4e:0f:a1:c0:
         02:0f:01:db:81:30:85:55:26:e3:e1:22:0c:e4:86:a8:db:4b:
         5f:8b:f9:85:5d:53:ca:2e:7c:87:c8:51:b3:d8:41:c9:57:74:
         ee:38:6f:21:82:3d:73:d1:88:6d:60:ec:76:49:96:43:92:7a:
         eb:bb:75:d2:f5:47:82:68:43:ee:4c:8c:26:32:58:a0:78:13:
         7b:5f:31:cb:5a:bc:9f:c3:a6:61:bd:1e:5d:8a:00:13:b2:c8:
         69:63:c2:37:25:9e:39:3c:10:d5:59:c3:17:af:02:a3:e6:79:
         fa:fb:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:07:46 2025 by rpki-client