Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d00d59a-0ca1-3c7e-ba46-c715a0fa065e.roa
File:                     5d00d59a-0ca1-3c7e-ba46-c715a0fa065e.roa (raw, json)
Hash identifier:          nGL9EIXPqgECL5UwYEV57nccXk8xtgpVUyazaUgVk+8=
Subject key identifier:   CB:CF:0F:67:1B:02:22:AC:86:38:BC:C8:0F:EB:DC:D0:9A:4D:9F:45
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C49E523318F6AC26F08600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d00d59a-0ca1-3c7e-ba46-c715a0fa065e.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:5280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:9e:52:33:18:f6:ac:26:f0:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=2f581ef5-5031-4fff-a767-9ed38112a937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:9c:97:8b:c8:f4:ba:a7:8c:1f:30:40:34:
                    ff:4e:9b:35:49:06:55:d6:09:69:c9:21:84:a2:63:
                    8e:9e:d5:c0:b6:3d:fd:c5:e8:64:9c:92:31:99:2a:
                    64:fc:8d:a6:00:d4:56:34:14:a2:d5:a9:b4:3f:a1:
                    0b:e1:44:af:bf:60:87:10:5f:90:93:36:3d:bf:ca:
                    ec:86:21:13:24:64:c4:a3:91:c3:9b:84:b7:7c:6b:
                    53:8e:bf:eb:35:c5:6f:a7:11:b4:48:77:6d:16:83:
                    22:87:dd:34:86:3e:9e:d4:b3:99:22:c0:51:08:af:
                    14:a1:af:5d:73:c1:ce:22:f9:1b:de:b9:36:d4:c5:
                    40:ec:8d:f2:26:b6:8b:68:65:27:07:73:6d:76:72:
                    b6:5a:3b:be:28:be:f0:81:d3:89:48:34:46:9a:59:
                    31:a4:29:4e:db:c9:5b:1b:cd:0d:81:1c:cf:80:ae:
                    35:dc:07:75:a0:36:17:14:1b:9e:5c:b6:7c:3a:6e:
                    9a:0e:6b:99:c1:3e:c1:36:d5:5b:44:b2:ff:cf:8f:
                    cf:b9:6b:95:18:1d:fd:de:66:c7:d2:4f:fd:04:77:
                    4e:85:15:7c:f1:46:88:5f:ff:3d:d7:32:a6:9f:e8:
                    1d:89:70:9d:d7:24:dc:c9:c9:da:7c:f5:6b:84:06:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CF:0F:67:1B:02:22:AC:86:38:BC:C8:0F:EB:DC:D0:9A:4D:9F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d00d59a-0ca1-3c7e-ba46-c715a0fa065e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ea:8b:0b:36:24:0e:35:78:82:bf:46:3b:00:71:20:2c:03:
         03:12:b7:56:fa:e1:ac:e0:fb:a9:5d:82:b8:40:1f:57:a1:84:
         8d:f7:dc:74:06:5b:5f:2e:5b:b8:2a:15:10:33:24:d1:ff:b0:
         11:f2:99:38:f6:4a:3e:24:f7:6d:2b:09:2b:4d:4f:5e:1f:6b:
         9a:b6:dd:0a:78:d7:88:b9:33:5e:b4:9f:b9:83:b8:1a:31:34:
         0a:3e:88:c3:08:5c:87:16:dc:32:70:30:06:8d:b8:ee:1f:d8:
         a9:30:22:4b:0b:d6:e9:7b:e0:78:6c:f9:14:3d:94:b8:5c:22:
         e6:09:3a:f8:92:59:cd:7e:03:8f:b7:ad:9a:54:ad:73:66:1f:
         58:b1:25:6f:a6:f1:e4:7b:a4:0f:ed:d8:bd:12:43:99:14:49:
         c4:6e:6c:a8:5e:d2:e4:6b:29:3f:7c:bd:ad:f4:42:e5:fd:0d:
         28:bb:9e:cb:de:24:1c:fb:d5:6a:c8:9b:2b:d2:16:54:03:5b:
         64:88:17:81:2b:0b:02:6a:fe:19:d7:a8:31:ef:5e:75:ae:61:
         e1:5f:ad:a1:f3:31:49:cb:1b:76:b0:6b:dc:3d:c0:20:a8:84:
         7f:0e:77:0e:83:d8:0f:16:57:d7:0d:8b:b1:76:9c:37:f6:07:
         85:e1:80:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxJ5SMxj2rCbwhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
MmY1ODFlZjUtNTAzMS00ZmZmLWE3NjctOWVkMzgxMTJhOTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EOcl4vI9LqnjB8wQDT/Tps1SQZV1glpySGE
omOOntXAtj39xehknJIxmSpk/I2mANRWNBSi1am0P6EL4USvv2CHEF+QkzY9v8rs
hiETJGTEo5HDm4S3fGtTjr/rNcVvpxG0SHdtFoMih900hj6e1LOZIsBRCK8Uoa9d
c8HOIvkb3rk21MVA7I3yJraLaGUnB3NtdnK2Wju+KL7wgdOJSDRGmlkxpClO28lb
G80NgRzPgK413Ad1oDYXFBueXLZ8Om6aDmuZwT7BNtVbRLL/z4/PuWuVGB393mbH
0k/9BHdOhRV88UaIX/891zKmn+gdiXCd1yTcycnafPVrhAYxeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMvPD2cbAiKshji8yA/r3NCaTZ9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWQwMGQ1OWEtMGNhMS0z
YzdlLWJhNDYtYzcxNWEwZmEwNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgFKA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEjqiws2JA41eIK/RjsAcSAsAwMSt1b64azg+6ldgrhAH1ehhI33
3HQGW18uW7gqFRAzJNH/sBHymTj2Sj4k920rCStNT14fa5q23Qp414i5M160n7mD
uBoxNAo+iMMIXIcW3DJwMAaNuO4f2KkwIksL1ul74Hhs+RQ9lLhcIuYJOviSWc1+
A4+3rZpUrXNmH1ixJW+m8eR7pA/t2L0SQ5kUScRubKhe0uRrKT98va30QuX9DSi7
nsveJBz71WrImyvSFlQDW2SIF4ErCwJq/hnXqDHvXnWuYeFfraHzMUnLG3awa9w9
wCCohH8Odw6D2A8WV9cNi7F2nDf2B4XhgM8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:17:57 2025 by rpki-client