Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c511540-65d8-3607-8125-a5107c567b69.roa
File:                     3c511540-65d8-3607-8125-a5107c567b69.roa (raw, json)
Hash identifier:          I6MWe36HvU85Sa/FbY+lg8gBJs8AfEDI6xDIWvN2UUQ=
Subject key identifier:   45:0D:47:3E:40:BC:F5:AB:CD:A0:83:C0:43:38:E8:10:32:23:3E:5E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784B504B3B86ED05671C1C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c511540-65d8-3607-8125-a5107c567b69.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:1900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:b5:04:b3:b8:6e:d0:56:71:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=f1a232d1-871b-4c9c-abef-598c5edf51fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3c:7f:ab:47:1b:0d:c7:01:a7:4e:67:60:ea:
                    78:9a:c5:15:10:85:6b:e7:f2:93:d6:56:ec:23:d6:
                    76:7d:db:50:b5:8f:27:67:53:08:e3:9c:6f:25:8a:
                    6f:4e:af:bf:a0:50:cd:38:10:85:0b:72:f5:bb:5b:
                    08:d1:c6:13:db:f7:41:fd:d9:ff:2a:c7:43:e4:d2:
                    50:ba:37:a8:96:64:ab:c5:07:1f:d8:c2:e0:f4:25:
                    c5:36:cf:f9:a9:7b:0a:ec:db:d4:c2:c2:f3:96:ee:
                    59:0e:a6:0b:cd:b0:57:39:d2:f5:98:c8:21:e4:a7:
                    b6:a5:2f:47:c9:37:cf:f8:a5:a8:c7:38:0d:e4:e1:
                    d1:6b:e3:73:f2:b9:9e:24:6f:16:13:82:5c:c9:56:
                    ae:79:10:cd:fa:99:68:42:3b:5c:79:e2:c4:98:b7:
                    06:76:b9:9f:40:7c:fa:a7:a3:e9:9c:48:80:78:c2:
                    72:a3:fb:2f:d9:24:64:5d:8f:23:f5:a0:ea:e4:2d:
                    98:2b:46:02:75:e1:8c:f8:73:f7:52:d2:62:d4:41:
                    eb:b5:bf:d2:9e:dc:70:77:3d:90:db:09:c8:60:bb:
                    8a:94:5d:81:8d:91:54:e7:87:53:20:ff:b0:56:15:
                    e5:2a:bb:f9:df:aa:12:59:b6:a6:59:b6:20:32:1b:
                    bf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0D:47:3E:40:BC:F5:AB:CD:A0:83:C0:43:38:E8:10:32:23:3E:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c511540-65d8-3607-8125-a5107c567b69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:07:f2:b1:d3:e1:bc:dc:18:fa:31:f4:1f:1b:dd:c5:a2:c6:
         db:10:9e:83:f1:c0:0d:d6:95:4b:8d:b3:3b:18:fd:93:90:aa:
         a1:57:50:27:80:c2:75:ae:dc:3f:1c:6b:20:a9:99:8e:ef:90:
         cf:9c:38:ca:2d:41:01:1f:bb:89:10:7c:37:04:38:71:78:87:
         df:28:97:0a:d8:50:87:ed:97:c8:aa:6f:9f:83:79:2f:a8:77:
         83:e4:ac:97:5a:16:49:54:e3:e9:f6:13:7f:d8:d7:fb:f8:bc:
         17:13:36:58:a2:be:0b:16:73:2e:69:fe:51:e4:3e:bb:9c:55:
         fb:f9:a5:bc:eb:15:a9:8b:19:1d:7f:7a:79:b4:38:34:94:20:
         db:99:55:36:43:ee:30:6b:94:cf:b3:77:a1:7a:3f:c6:a3:3c:
         4c:5a:1b:ca:cb:ee:a0:38:a1:b2:56:ff:82:2e:0a:15:27:fa:
         51:95:1c:60:7c:6e:95:b7:b8:ea:aa:23:fe:6f:be:2a:24:79:
         77:60:18:6b:e0:7c:94:66:4b:f5:54:50:ab:7b:97:d9:1c:b1:
         0b:5e:a9:2d:97:42:82:7a:f8:59:80:7d:c6:58:6e:f9:3a:f2:
         5c:36:1a:2a:cf:4e:4f:63:f6:f7:84:c0:df:d0:01:51:ee:e9:
         23:65:06:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:11:39 2025 by rpki-client