Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa
File:                     1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa (raw, json)
Hash identifier:          VyO4hqonhqZRrevZ07yae4NiscKbYy0QQoxcZrlq4+k=
Subject key identifier:   06:5C:1C:E7:66:06:24:2E:1E:7B:67:B1:B3:F7:F7:6D:41:E5:B2:65
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584981912B352CF352CF0AB2B0E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa
Signing time:             Sat 12 Apr 2025 22:45:36 +0000
ROA not before:           Sat 12 Apr 2025 22:45:36 +0000
ROA not after:            Fri 11 Jul 2025 22:45:36 +0000
asID:                     30036
IP address blocks:        2604:2d81:1800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:91:2b:35:2c:f3:52:cf:0a:b2:b0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 12 22:45:36 2025 GMT
            Not After : Jul 11 22:45:36 2025 GMT
        Subject: CN=365ad36c-dbd7-4102-9e54-30158faf7594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f4:c2:56:95:d8:0c:52:07:7a:ab:f2:e6:ad:
                    bf:93:03:ed:ef:be:aa:6c:a1:5f:b5:fb:65:9e:a9:
                    ca:65:1a:28:51:56:b3:a5:bc:9e:1b:0a:7d:fd:f1:
                    fa:80:2e:2f:5c:a9:b1:c8:5f:87:b3:d8:f9:e5:f3:
                    f4:0b:c2:82:e4:e1:6a:d9:58:cf:d4:ff:b7:b1:cd:
                    81:23:0f:39:9c:43:4b:15:8e:57:d4:05:17:b9:1b:
                    17:48:2c:70:15:a7:b4:b9:46:ec:3c:b1:3a:ed:2b:
                    eb:ef:54:c5:9f:2d:c0:72:41:87:68:76:c0:4b:fa:
                    fa:c2:84:7f:d1:ef:40:90:7f:24:9d:07:8f:95:f0:
                    81:53:f4:18:7b:6a:58:31:2e:ef:22:95:21:37:b1:
                    0f:b9:4f:96:fe:fe:9d:26:e7:a7:b5:12:c9:45:96:
                    5e:6c:52:fd:c1:25:a2:75:bf:d7:54:ef:89:fd:fc:
                    1c:93:35:a8:ec:08:87:ce:04:69:a2:06:b3:06:c8:
                    3d:75:e3:b8:75:cb:68:48:bd:2d:32:0c:63:04:d5:
                    a1:65:ad:62:cb:03:70:79:6a:95:f5:bb:54:2a:1e:
                    8e:6e:80:c3:13:e2:b9:d4:db:db:eb:3d:3b:d5:12:
                    3c:f1:e7:dc:a7:1c:8d:aa:38:3f:92:6c:07:b6:d9:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5C:1C:E7:66:06:24:2E:1E:7B:67:B1:B3:F7:F7:6D:41:E5:B2:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1ca4fc62-c482-3fc5-971c-c0d42ab1b820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:03:f9:bf:2d:4e:79:b3:19:52:b5:c4:01:50:a3:58:7e:84:
         e2:ac:0f:fa:1e:d1:e1:16:97:a3:c6:a2:ff:06:9a:29:93:57:
         58:96:e4:b3:95:69:a0:aa:08:fa:79:d3:da:cd:4c:59:f8:e1:
         2c:b9:1c:62:6e:17:b7:05:04:c1:1d:a9:17:15:b7:01:45:bf:
         af:95:a9:ea:be:a4:94:44:c0:9f:49:43:76:be:5b:60:61:90:
         23:2c:4f:48:9d:09:1a:4e:07:79:35:e6:5c:e7:8d:53:ec:20:
         fb:ab:3c:0c:a2:71:7a:f2:78:e8:77:be:5f:da:f6:04:17:64:
         2c:ee:dc:99:50:01:a3:52:94:9e:a2:a8:94:74:58:ad:7b:58:
         10:ed:dc:e2:d4:ef:7b:2d:c7:ae:f5:3d:11:03:d1:06:9d:74:
         c4:e3:e5:bf:d3:99:ad:20:0c:27:5c:0e:32:89:db:55:9d:f5:
         4f:fc:9b:bf:7d:1a:e7:46:ea:ce:62:59:a4:c0:68:91:7d:e7:
         94:39:1e:23:f4:9f:70:d7:00:51:c3:db:29:bf:14:76:08:22:
         36:c3:89:68:65:7c:c4:65:5b:02:48:99:c3:d3:ca:61:d1:36:
         7d:e1:3b:f7:5f:4b:9e:4f:fb:47:c4:bc:7b:61:c1:6b:ed:90:
         8d:8e:ce:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmBkSs1LPNSzwqysOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQxMjIyNDUzNloXDTI1MDcxMTIyNDUzNlowLzEtMCsGA1UEAxMk
MzY1YWQzNmMtZGJkNy00MTAyLTllNTQtMzAxNThmYWY3NTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPTCVpXYDFIHeqvy5q2/kwPt776qbKFftftl
nqnKZRooUVazpbyeGwp9/fH6gC4vXKmxyF+Hs9j55fP0C8KC5OFq2VjP1P+3sc2B
Iw85nENLFY5X1AUXuRsXSCxwFae0uUbsPLE67Svr71TFny3AckGHaHbAS/r6woR/
0e9AkH8knQePlfCBU/QYe2pYMS7vIpUhN7EPuU+W/v6dJuentRLJRZZebFL9wSWi
db/XVO+J/fwckzWo7AiHzgRpogazBsg9deO4dctoSL0tMgxjBNWhZa1iywNweWqV
9btUKh6OboDDE+K51Nvb6z071RI88efcpxyNqjg/kmwHttnqwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAZcHOdmBiQuHntnsbP3921B5bJlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWNhNGZjNjItYzQ4Mi0z
ZmM1LTk3MWMtYzBkNDJhYjFiODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgRgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGkD+b8tTnmzGVK1xAFQo1h+hOKsD/oe0eEWl6PGov8GmimTV1iW
5LOVaaCqCPp509rNTFn44Sy5HGJuF7cFBMEdqRcVtwFFv6+Vqeq+pJREwJ9JQ3a+
W2BhkCMsT0idCRpOB3k15lznjVPsIPurPAyicXryeOh3vl/a9gQXZCzu3JlQAaNS
lJ6iqJR0WK17WBDt3OLU73stx671PRED0QaddMTj5b/Tma0gDCdcDjKJ21Wd9U/8
m799GudG6s5iWaTAaJF955Q5HiP0n3DXAFHD2ym/FHYIIjbDiWhlfMRlWwJImcPT
ymHRNn3hO/dfS55P+0fEvHthwWvtkI2Ozt4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:51:30 2025 by rpki-client