Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d1ea142-81fd-3751-a5ee-547d465a9499.roa
File:                     6d1ea142-81fd-3751-a5ee-547d465a9499.roa (raw, json)
Hash identifier:          Yzu3YDX1lOit+t/puxzdKCf75zHjzQ6WaUkdiSmd4KE=
Subject key identifier:   E8:70:39:DA:16:B8:32:82:E1:A8:37:3B:55:B8:AF:03:17:C9:23:77
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA0E5B7A0BA3825F200E80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d1ea142-81fd-3751-a5ee-547d465a9499.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:2c80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:0e:5b:7a:0b:a3:82:5f:20:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8a169381-32e2-43f7-8096-bcd6a73a9693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:8b:58:4a:d7:0f:06:99:dd:77:ff:83:5f:
                    93:21:79:95:c0:91:df:22:48:26:03:47:03:15:58:
                    e3:98:b2:41:26:11:0a:41:d6:22:29:bd:06:0b:e2:
                    e3:b4:9a:d4:d0:d8:59:62:70:84:7e:60:13:41:f7:
                    7d:7c:b0:91:da:1b:a0:af:f7:5c:83:3c:d1:c7:7f:
                    42:06:e9:64:7b:6e:56:15:8f:cd:f3:35:5c:a1:10:
                    80:52:b1:c3:29:de:fe:ea:1e:1d:c9:9a:4b:4a:f0:
                    3c:f3:3a:97:14:4e:bd:14:93:d0:75:c7:c9:a8:3f:
                    e0:c6:a7:47:c0:6d:fe:3c:2c:42:0b:f4:74:79:0d:
                    20:2d:9e:fe:21:44:67:1c:5d:04:71:db:da:39:14:
                    aa:69:0f:7f:e3:44:ba:f5:52:3c:50:4e:e7:44:6f:
                    8d:a2:b9:d8:ac:a0:41:f2:bb:36:b2:4a:0d:5d:7f:
                    26:e4:1c:33:f9:06:cf:24:c4:f1:32:05:4b:8c:51:
                    c1:02:51:58:ce:28:18:9d:62:0a:e7:bb:15:f6:ee:
                    35:ff:1a:f5:a4:e2:a8:72:9b:d9:ff:cc:90:37:33:
                    a3:ea:46:74:92:91:e5:62:f9:5a:fc:c1:98:90:35:
                    12:c2:9f:a8:b7:37:7e:31:41:53:41:04:fb:50:00:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:70:39:DA:16:B8:32:82:E1:A8:37:3B:55:B8:AF:03:17:C9:23:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6d1ea142-81fd-3751-a5ee-547d465a9499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2c80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:55:af:e0:b6:67:ea:1c:7f:34:16:48:15:17:3a:89:4f:24:
         44:18:ab:33:e6:87:fa:84:b4:26:e3:1b:8e:c2:4e:6a:5a:44:
         af:8c:33:e6:95:1f:d8:0c:f6:fa:0d:db:1d:97:f0:91:4b:a5:
         c0:9e:19:b8:0a:f9:1b:a1:8a:4f:de:e2:a1:93:47:ca:22:7b:
         04:c7:5f:f6:02:34:d5:1a:3d:1f:32:b6:72:76:36:15:c1:a4:
         50:eb:a4:79:e0:1b:de:cd:f5:02:ad:00:36:bc:94:83:8f:29:
         59:01:ac:74:d1:7e:a6:20:1c:45:36:01:59:ca:de:0c:c0:b2:
         fd:f1:1b:70:1b:53:3c:4b:48:ed:4d:4c:f9:97:69:f1:5e:84:
         94:6b:76:2c:03:f9:3f:11:ac:db:37:a3:88:91:59:1e:a7:f3:
         47:57:22:da:4a:af:dc:cd:ee:3a:5e:dd:56:97:92:4b:b3:4f:
         63:87:8b:04:b9:57:f3:e4:33:7e:60:e3:bc:8a:b4:90:65:06:
         02:fb:22:6c:36:f1:53:de:18:43:a8:ea:01:e6:c3:a2:6b:10:
         6a:23:14:04:19:d2:57:05:ad:55:84:5c:47:ff:c5:7b:cc:8a:
         6b:cc:17:f3:4c:ad:45:0c:db:15:8a:b6:08:5b:be:93:7e:b2:
         30:8c:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:02:30 2025 by rpki-client