Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1447a2cc-3d71-33e5-a0c6-a611b7844659.roa
File:                     1447a2cc-3d71-33e5-a0c6-a611b7844659.roa (raw, json)
Hash identifier:          j4ctXevMdvxWZPWEJAHNdIOljOAaiZWoUWavC9SCtWA=
Subject key identifier:   65:A3:4B:E6:FB:B3:CD:81:C2:23:4D:9F:FC:5D:25:2D:A1:F6:6F:96
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF66B629269760C2BCA640
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1447a2cc-3d71-33e5-a0c6-a611b7844659.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:7080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:66:b6:29:26:97:60:c2:bc:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=d3c78ca0-ebd6-4142-b569-df7146e90948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:78:2e:67:b2:40:d4:e7:96:7b:6f:16:0e:
                    2e:eb:3f:c0:e4:67:0c:bf:55:ac:51:3b:eb:0b:64:
                    0f:27:c9:d9:5a:00:20:ec:fa:7f:ae:44:db:95:c4:
                    ed:d3:ad:49:67:08:19:7e:a0:6e:e2:5a:dd:0e:50:
                    ec:95:d8:ec:c0:ce:37:48:f0:81:7b:fb:8c:83:0f:
                    8d:df:7e:65:24:e7:4d:65:63:a8:75:18:05:f5:14:
                    df:a1:05:a6:0e:65:04:07:08:15:57:90:35:68:4e:
                    eb:0b:c5:9d:c8:36:6e:0d:d0:f0:b5:51:f0:49:ef:
                    f1:fd:e9:bb:02:de:27:9b:3e:eb:a4:4b:2f:00:5e:
                    25:69:57:e9:d8:34:ba:8e:e1:45:03:d2:61:f6:49:
                    08:bc:f7:30:cd:f4:49:9d:d2:f8:43:92:03:92:22:
                    7c:e3:2f:f8:e7:2b:b2:65:6a:e3:c7:c0:2b:cb:56:
                    25:f3:3c:15:cd:fe:e9:d6:bc:af:2d:40:91:71:4e:
                    db:d7:53:82:09:09:39:45:97:3d:69:41:22:b8:f1:
                    65:7e:be:b3:a0:31:a3:02:13:b7:89:8b:11:f6:45:
                    c8:d8:57:b5:84:36:41:06:1b:68:17:61:79:5c:25:
                    ab:65:f3:ad:15:93:c6:f9:5e:02:f5:de:05:5b:1b:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A3:4B:E6:FB:B3:CD:81:C2:23:4D:9F:FC:5D:25:2D:A1:F6:6F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1447a2cc-3d71-33e5-a0c6-a611b7844659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:63:07:eb:e6:26:1a:a1:98:36:c5:6a:1f:a3:aa:48:d5:
         af:81:cd:9b:83:0f:0b:05:45:64:2b:c9:80:7f:90:5d:02:52:
         ef:2a:0c:ff:3c:57:c7:e1:97:0f:9e:a0:38:20:5e:03:0e:9c:
         aa:fc:a0:eb:a0:91:f6:31:8b:78:b9:74:8d:d3:f4:93:9d:b5:
         18:6e:57:fc:66:63:fa:a4:78:a5:4d:fb:a8:c2:cd:f1:5a:47:
         58:de:13:aa:40:3b:d7:f2:af:84:fe:90:c3:25:2c:a8:de:7c:
         ce:e8:96:90:c0:03:a5:28:14:7a:85:68:6b:22:e9:88:43:4b:
         72:c7:2d:b0:6d:e3:33:9e:a5:bd:42:1c:fe:bd:1e:2a:fb:ab:
         ba:a6:f8:6d:65:d4:00:04:f0:a9:c9:66:80:bb:61:8f:48:64:
         41:39:14:44:fd:1b:fb:f7:d5:43:c9:c8:c0:37:94:a4:da:cf:
         38:3f:31:a4:72:4b:4b:d4:d1:0a:d1:1b:0c:98:99:32:ba:cd:
         c5:f3:f2:a6:db:4d:c0:6c:cf:40:26:9d:cf:e1:e7:b9:97:f6:
         b4:98:a5:e4:7c:c6:ae:ae:2b:02:0b:3e:e0:96:db:7e:c2:56:
         e1:77:f1:84:7a:5b:ee:89:0a:ad:c1:91:53:c3:17:54:8a:24:
         22:07:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:50:46 2025 by rpki-client