Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c1a0277-9da9-365f-8930-471cb37bfe44.roa
File:                     3c1a0277-9da9-365f-8930-471cb37bfe44.roa (raw, json)
Hash identifier:          pAQL6SCObz4m7dU6oLfJDVLC7IrIM4fz8+CmQIW3e/M=
Subject key identifier:   2D:F3:BE:D1:A5:C1:C1:CE:8E:70:3C:FE:C7:BD:D1:EE:F6:DE:CE:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA3AD39996C3810C4E1FC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c1a0277-9da9-365f-8930-471cb37bfe44.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:ae80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:3a:d3:99:96:c3:81:0c:4e:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=7d930449-5b0a-4b44-bd1a-896fc8948ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:60:7e:db:c5:e4:34:3a:c4:15:e7:0e:ae:
                    93:7b:d9:64:7a:c0:ce:e8:25:eb:c1:25:b8:7c:23:
                    52:6c:32:a5:f7:c3:a6:1c:28:6d:2d:fd:cb:99:4f:
                    8e:bb:a7:47:56:bc:f3:94:11:af:a7:ef:eb:38:30:
                    b4:9a:ac:6e:14:83:0c:46:c1:9a:2f:fb:9d:11:c8:
                    e4:78:9e:ab:e8:99:ac:a4:cd:d4:a3:56:e4:85:1b:
                    97:e5:b9:4f:dc:25:a0:51:2a:ab:24:83:c8:d5:67:
                    3b:f6:18:e7:8c:89:2c:01:3e:65:7d:4b:c1:ff:24:
                    f0:b5:b5:2a:09:30:66:50:91:ab:0f:75:5a:5a:c8:
                    2d:73:22:ef:56:49:66:8b:bc:85:8c:62:69:8d:03:
                    4d:57:4f:fc:49:d2:70:ec:26:06:69:75:01:70:02:
                    65:53:2d:50:d1:2d:13:df:8e:97:4d:f6:c7:54:41:
                    45:ad:16:d2:ac:41:f1:05:cb:1a:ac:e3:a7:2f:41:
                    19:35:6e:3f:59:4a:65:81:6f:4b:50:fc:60:09:b5:
                    b5:d7:d4:a8:db:eb:c5:f1:f7:14:ed:95:27:3e:2c:
                    11:59:ea:03:fa:2c:ed:f1:b0:61:4c:45:28:42:02:
                    83:64:4b:f1:39:21:90:14:92:06:2c:b2:9e:aa:dd:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F3:BE:D1:A5:C1:C1:CE:8E:70:3C:FE:C7:BD:D1:EE:F6:DE:CE:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c1a0277-9da9-365f-8930-471cb37bfe44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ae80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:eb:6c:c5:a5:c9:07:5c:86:6d:30:32:a5:fc:28:bd:fb:ac:
         8a:a6:0d:ec:ab:9a:31:9b:b1:52:d0:98:34:5e:92:a0:a8:84:
         d7:e9:fc:c1:dc:92:62:e3:c4:ed:01:7f:79:83:97:57:45:aa:
         21:ac:5e:82:ed:13:e3:7b:22:e3:6b:29:1d:a2:e4:29:e7:81:
         59:30:ac:9b:69:78:3c:cd:a4:2c:85:30:19:e2:cf:9a:a5:c0:
         ff:23:d2:6b:90:f3:f5:56:c2:c5:e2:05:de:c2:ea:fc:96:cd:
         15:1f:68:1d:ff:c0:2e:3d:fd:63:89:b7:1d:05:e0:af:a9:6e:
         88:01:05:bc:a9:1b:63:fd:d9:ab:dc:f0:a2:26:24:da:16:56:
         13:43:74:37:c7:91:13:97:0a:64:11:55:96:ff:ab:ce:bc:1e:
         c3:a2:2b:a5:da:fa:1e:2c:0b:68:94:76:31:05:c8:c4:fe:29:
         9a:b6:64:c9:be:7b:6b:22:f5:1a:81:b8:f1:84:67:1e:0c:42:
         78:83:73:f8:3d:fe:74:83:45:bc:4e:e8:e5:a0:32:b8:7e:de:
         2c:25:df:64:26:6f:30:73:e5:f0:bb:13:b2:87:00:2c:1a:66:
         eb:e3:63:90:b8:0c:28:31:1a:01:6c:0b:83:f1:b9:0a:23:74:
         19:b0:9c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:50 2025 by rpki-client