Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b370c87-ec57-3346-9f39-43b506de76a5.roa
File:                     2b370c87-ec57-3346-9f39-43b506de76a5.roa (raw, json)
Hash identifier:          0qYJWN85Ai/iPTYtV9AUMK6Wi3MMhe/2r/kWCvAvLvw=
Subject key identifier:   58:B0:8F:C6:98:4C:E3:1B:D6:1C:0A:5F:CA:76:7A:7F:F6:64:6A:0E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784BF8C910219103C850CF8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b370c87-ec57-3346-9f39-43b506de76a5.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:1780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:bf:8c:91:02:19:10:3c:85:0c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=6329a67f-8272-43e8-8805-1cad1bed4c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:eb:0a:2f:5d:d5:ec:30:5d:8e:d4:f8:07:
                    9f:6d:02:40:6a:f2:40:92:37:a6:6e:96:89:14:9c:
                    19:ec:46:ec:03:e6:7e:3a:58:f3:c9:ca:e9:8f:a0:
                    4e:84:06:e7:c6:82:f1:60:d2:dd:f4:81:be:cd:fa:
                    fe:00:13:26:82:50:d2:c3:57:93:64:15:80:cc:62:
                    fc:0e:d3:5f:71:ed:61:4a:eb:f9:e1:02:7b:8f:ed:
                    65:0f:d5:90:5c:e0:b1:e3:da:da:43:15:8e:7e:84:
                    fd:32:4f:8e:07:1a:e5:b0:9a:1c:9b:14:d1:0a:9a:
                    df:ae:68:87:aa:14:5f:c4:69:c4:60:4e:bb:af:ec:
                    b3:5f:90:3f:82:1d:e8:a5:b7:ee:01:c6:cc:2d:18:
                    03:95:2c:f7:05:a8:c6:0e:dd:38:47:10:e3:09:89:
                    ab:30:13:56:46:1b:4f:bc:74:fb:f9:0b:96:54:1b:
                    41:ae:62:ae:c5:43:ab:a8:b0:f4:b4:f8:29:e9:11:
                    2d:48:83:50:21:7d:f0:4f:d6:17:56:01:73:d3:2c:
                    58:a8:36:85:0b:fb:51:a3:81:ec:2f:0e:0b:24:21:
                    56:0c:f5:2b:18:d4:7e:a9:7e:ae:ec:a2:d4:cb:64:
                    aa:bd:37:42:80:10:c3:8d:39:37:7b:de:03:1e:08:
                    d2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B0:8F:C6:98:4C:E3:1B:D6:1C:0A:5F:CA:76:7A:7F:F6:64:6A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b370c87-ec57-3346-9f39-43b506de76a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:90:83:0e:6a:0f:61:22:eb:61:6e:76:9e:89:14:a3:ef:a3:
         d4:b8:c0:4b:a0:56:be:7b:0d:30:27:ec:7b:59:62:ea:1e:f4:
         0a:e5:2c:0c:04:79:f3:dd:21:94:a1:cc:1e:e4:c8:85:cb:ee:
         74:fc:54:f7:03:b5:6e:15:97:5c:c9:b8:e9:78:ca:4d:e3:d0:
         14:83:6e:7c:bf:bc:43:0f:82:e8:11:8b:f0:ac:19:fa:b3:cd:
         f1:b8:cb:a4:06:25:b7:71:e7:c7:46:57:ad:8c:57:1d:19:aa:
         16:08:42:50:f1:8f:4f:21:e0:cb:f4:91:b7:cb:57:08:c9:60:
         3a:e8:26:8d:c8:50:09:98:b8:dd:aa:dd:5e:4e:d2:17:4f:05:
         07:04:98:d9:e0:d9:9f:3d:7b:65:73:41:54:b5:e8:a4:bf:02:
         b6:0e:49:64:70:a8:2f:25:09:72:bb:03:98:03:bf:5c:74:3b:
         50:f9:40:35:bb:54:d7:c9:4c:9b:a0:af:23:0f:bc:0f:73:1f:
         bf:de:5e:43:ff:6e:8d:16:7e:2c:25:10:05:ae:25:3c:26:e4:
         72:65:ad:64:d5:f7:82:d0:3b:30:26:cf:a8:9b:77:bf:9e:8d:
         d0:db:e7:56:6e:5a:9f:7c:ed:36:b6:06:e6:c7:3a:7f:43:02:
         39:60:62:4e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhL+MkQIZEDyFDPgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
NjMyOWE2N2YtODI3Mi00M2U4LTg4MDUtMWNhZDFiZWQ0YzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWXrCi9d1ewwXY7U+AefbQJAavJAkjembpaJ
FJwZ7EbsA+Z+Oljzycrpj6BOhAbnxoLxYNLd9IG+zfr+ABMmglDSw1eTZBWAzGL8
DtNfce1hSuv54QJ7j+1lD9WQXOCx49raQxWOfoT9Mk+OBxrlsJocmxTRCprfrmiH
qhRfxGnEYE67r+yzX5A/gh3opbfuAcbMLRgDlSz3BajGDt04RxDjCYmrMBNWRhtP
vHT7+QuWVBtBrmKuxUOrqLD0tPgp6REtSINQIX3wT9YXVgFz0yxYqDaFC/tRo4Hs
Lw4LJCFWDPUrGNR+qX6u7KLUy2SqvTdCgBDDjTk3e94DHgjSlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFiwj8aYTOMb1hwKX8p2en/2ZGoOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmIzNzBjODctZWM1Ny0z
MzQ2LTlmMzktNDNiNTA2ZGU3NmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgBeA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB6Qgw5qD2Ei62Fudp6JFKPvo9S4wEugVr57DTAn7HtZYuoe9Arl
LAwEefPdIZShzB7kyIXL7nT8VPcDtW4Vl1zJuOl4yk3j0BSDbny/vEMPgugRi/Cs
GfqzzfG4y6QGJbdx58dGV62MVx0ZqhYIQlDxj08h4Mv0kbfLVwjJYDroJo3IUAmY
uN2q3V5O0hdPBQcEmNng2Z89e2VzQVS16KS/ArYOSWRwqC8lCXK7A5gDv1x0O1D5
QDW7VNfJTJugryMPvA9zH7/eXkP/bo0WfiwlEAWuJTwm5HJlrWTV94LQOzAmz6ib
d7+ejdDb51ZuWp987Ta2BubHOn9DAjlgYk4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:50 2025 by rpki-client