Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6466fb16-ddfa-3789-bba3-5eca1b13d08d.roa
File:                     6466fb16-ddfa-3789-bba3-5eca1b13d08d.roa (raw, json)
Hash identifier:          dfvIQHpOwfVNb4wdWAOJ+wjfPFZ/c4J4OKOBuxHQwIs=
Subject key identifier:   C1:58:20:DA:55:4D:32:47:B5:CB:D7:F1:64:A7:41:D0:D3:1D:10:9F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C49F0B9BDD4EF1F8051800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6466fb16-ddfa-3789-bba3-5eca1b13d08d.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:5a80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:9f:0b:9b:dd:4e:f1:f8:05:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=b81d6855-faba-491e-a105-8243a59fcdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:5d:f0:1a:cb:c6:ef:03:eb:08:96:b5:dc:
                    99:10:59:4f:86:4a:60:ab:eb:4e:8a:4e:0b:17:c6:
                    77:61:d9:e4:d4:d8:b3:f1:41:44:90:bf:6a:9a:1f:
                    65:6d:63:96:26:4b:c3:70:af:9b:19:2b:99:4e:fd:
                    be:41:26:35:9c:f4:12:51:c4:bc:38:ed:83:00:2e:
                    2e:76:94:45:1b:cf:db:23:72:63:7f:58:45:0c:b2:
                    2b:f7:24:1c:aa:ef:92:71:28:17:a3:cb:1c:55:06:
                    e9:e5:33:43:93:49:ae:c0:85:4d:c6:2b:a1:e6:8d:
                    87:fa:97:d6:49:db:c5:9d:8b:2e:18:b2:d2:0c:62:
                    e2:a6:38:d7:c7:d9:6b:ac:43:5e:74:1a:16:f1:7e:
                    66:90:45:2f:85:3c:75:2b:63:2f:d7:e8:43:7e:88:
                    60:0d:03:a7:26:2d:c6:2e:6b:ba:20:eb:70:d7:2d:
                    f6:98:55:8e:4a:87:e1:bf:7f:9e:77:48:f3:e8:25:
                    a1:5f:e7:7b:1f:81:e5:6e:69:46:2f:94:a4:01:42:
                    5f:08:49:a9:86:5e:72:7d:df:6d:f6:0d:2d:bc:41:
                    0b:ba:58:93:2d:54:a5:b3:9c:59:00:a4:89:fc:05:
                    c4:95:87:07:bc:d8:e0:70:0b:91:05:36:99:f5:31:
                    89:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:58:20:DA:55:4D:32:47:B5:CB:D7:F1:64:A7:41:D0:D3:1D:10:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6466fb16-ddfa-3789-bba3-5eca1b13d08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:5a80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b7:ad:46:2f:7e:0e:79:30:54:45:ba:cc:26:91:61:e0:e1:
         c5:68:ad:2e:fb:18:07:82:7c:37:cd:8a:00:d0:07:94:83:4c:
         3f:84:03:ff:4f:18:5f:b2:f9:f5:12:fc:4c:be:9f:1a:c1:7e:
         13:54:e7:2c:ae:0d:c7:2b:d5:3a:cc:b8:d8:3e:53:05:e0:66:
         b7:5d:70:ac:96:69:ba:36:85:a5:25:de:02:c7:d8:c9:16:91:
         95:26:05:c1:cb:73:2d:0b:34:f0:be:35:b4:ad:43:7a:2c:c6:
         1a:06:7f:e3:3e:15:d5:fa:c9:4e:97:91:cb:dd:56:94:c3:9d:
         7f:67:16:94:a9:3d:58:bd:14:2f:97:61:25:c3:c2:d9:17:85:
         b6:31:14:54:c2:e8:2c:bc:6c:e4:61:11:fa:ea:06:8e:00:3c:
         30:84:df:ef:75:29:0d:6d:88:02:87:36:09:e7:1a:71:1f:b0:
         3e:1d:09:25:f2:df:72:5e:f7:c4:ac:05:de:f9:08:7e:77:9c:
         f5:91:8f:c1:92:73:93:c2:83:75:29:08:6e:69:6f:a7:e8:2c:
         00:60:64:a5:d1:20:56:4b:80:c1:ef:e9:36:47:63:18:84:51:
         d0:58:e4:3e:eb:37:a4:82:03:10:7b:2f:34:7e:d9:a7:70:1b:
         05:c1:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:21:58 2025 by rpki-client