Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3089f031-91f3-3b37-81e2-09fe84597232.roa
File:                     3089f031-91f3-3b37-81e2-09fe84597232.roa (raw, json)
Hash identifier:          dxf9qdsKUC+md8ofEPljTmRVHa9vT7oWpNs/u4WZ/7U=
Subject key identifier:   95:A1:70:19:80:CF:19:66:65:D5:D0:1B:CE:75:0E:95:D9:F5:66:AF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784BF6FE2B8F8F71A1C3700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3089f031-91f3-3b37-81e2-09fe84597232.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:1600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:bf:6f:e2:b8:f8:f7:1a:1c:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=17cc7301-2e01-4104-8491-44d7aed4651a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:22:d5:94:56:c3:ab:03:ba:90:66:3b:a4:
                    da:02:23:29:6d:ac:a3:fb:6a:bc:7e:dd:96:26:e6:
                    67:86:4f:7b:ba:44:9c:8b:77:6c:bb:39:61:f7:ac:
                    24:8d:f0:46:22:3b:c6:40:5e:65:ac:9f:45:9f:f1:
                    5f:ef:10:67:22:a9:7e:bc:76:13:17:e3:6b:07:45:
                    83:9d:2d:5e:3d:0c:4f:26:b4:25:84:8e:ec:b5:2a:
                    b9:61:bc:d5:03:e9:79:e1:f6:59:9b:c8:b6:51:77:
                    bd:c9:fe:05:88:2f:95:e1:8e:5e:5f:00:75:11:ed:
                    d1:20:86:42:3b:cd:ae:8c:8a:5a:fe:10:26:66:4b:
                    33:d6:8c:4d:6e:07:d2:d8:76:0c:f3:42:5b:b5:0e:
                    2c:31:84:72:e3:d0:bc:46:28:91:9b:4e:43:32:39:
                    6b:e2:bc:12:9e:5d:7e:28:a5:4d:c2:73:99:3c:e5:
                    79:b8:e9:45:bd:eb:a1:63:bc:d5:f6:fb:e4:64:db:
                    39:39:19:84:31:ba:c2:60:0b:f7:b6:f9:e7:be:90:
                    cc:18:99:f2:4d:33:e3:81:e8:03:7d:0f:00:18:b7:
                    3f:c4:af:19:6f:7a:7e:1a:4f:12:12:89:ef:92:c0:
                    ba:b9:27:01:f8:63:2c:88:b3:f1:19:32:3c:c4:d0:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A1:70:19:80:CF:19:66:65:D5:D0:1B:CE:75:0E:95:D9:F5:66:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3089f031-91f3-3b37-81e2-09fe84597232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1600::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:35:ce:28:bb:a2:90:53:1d:31:a6:b0:7b:4a:fc:7b:3c:5b:
         cc:18:16:1f:b8:be:53:07:4c:ca:cb:91:8e:63:38:0a:88:7b:
         04:03:84:db:1b:ac:6a:7c:e7:54:23:da:13:8b:58:7f:60:d2:
         53:84:2f:e4:30:52:c0:d9:07:53:32:be:d5:cf:ba:56:8b:99:
         a6:a8:f2:0d:2a:22:b7:2f:c7:3a:c4:0d:7f:b8:6b:36:d0:65:
         b6:0c:b0:59:5a:b4:28:6d:ee:4d:db:b1:03:74:03:ba:d7:7a:
         79:65:da:5b:1e:bb:b9:52:b8:d1:80:de:69:ef:85:00:9a:0d:
         72:08:1d:9c:65:77:6b:ce:09:ea:78:08:be:49:08:84:51:18:
         a7:5e:5d:ee:dd:94:bf:f7:96:8c:1c:83:b7:f2:0a:40:24:31:
         aa:5f:72:c7:3f:d8:b5:1b:0c:8c:83:4f:f4:d3:76:9e:89:55:
         00:be:4e:c4:1a:48:36:26:00:e0:5c:68:ae:14:bb:d7:14:e4:
         14:6c:83:0a:8f:56:90:e5:3c:d9:ef:98:e8:3c:3b:74:37:4a:
         16:a9:79:00:65:88:df:c0:25:7c:93:20:42:a9:d3:cc:6c:9b:
         07:59:1e:be:43:47:60:67:2c:81:c3:6b:13:86:53:e8:58:f5:
         d7:6a:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:47 2025 by rpki-client