Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c9abe1b-8e28-3060-b996-54c5c9d1e606.roa
File:                     7c9abe1b-8e28-3060-b996-54c5c9d1e606.roa (raw, json)
Hash identifier:          fPCqFDaLAFGELdyDAewEE0r6VpQrzkBybbDLlUlRmEo=
Subject key identifier:   8E:2C:5F:A9:8A:73:08:86:DD:7C:67:9D:E0:63:07:32:3E:49:BD:1A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784BF3919C0A3CC172BD180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c9abe1b-8e28-3060-b996-54c5c9d1e606.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:bf:39:19:c0:a3:cc:17:2b:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=266d93a5-294a-4329-aca6-22fc576dd568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:9a:99:46:d6:06:ca:25:a0:fe:d6:9a:38:
                    d6:48:dc:58:d8:4a:8a:6c:0e:68:8d:01:ef:65:a8:
                    49:3b:c4:f3:92:51:e7:30:ab:73:8f:a0:62:89:e2:
                    e7:f6:02:8c:18:5f:43:93:d3:41:c4:ff:e5:58:63:
                    7c:46:b0:45:79:07:c1:78:62:08:8b:a2:58:88:86:
                    b6:81:53:27:9b:aa:e3:2d:69:25:31:c7:c8:fa:44:
                    0a:21:81:df:65:9e:b4:cc:49:53:47:8b:23:2e:4c:
                    73:ae:d6:36:8a:5f:e4:f0:69:6f:c9:25:40:64:7d:
                    7a:98:93:db:47:54:1a:61:f2:70:f5:9b:95:87:45:
                    bc:48:5e:46:73:af:7e:fc:34:19:97:51:7c:5b:9b:
                    ff:b5:53:56:09:d3:1c:4e:ad:9b:c8:3d:a7:06:67:
                    2b:cd:77:da:6e:d8:7f:25:5c:db:88:42:eb:87:c5:
                    ed:14:03:11:d6:0f:15:61:bc:5c:d3:59:38:be:4f:
                    e4:a9:e5:f6:af:38:58:e8:85:f0:dd:6d:1d:83:d8:
                    a7:b7:d6:7a:47:fa:76:77:81:60:56:03:09:4d:ea:
                    31:e4:7a:bd:ca:22:ed:9a:50:18:24:68:ec:0c:73:
                    2c:d2:81:30:62:99:9c:e1:d3:7b:ed:4f:d3:f4:89:
                    64:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2C:5F:A9:8A:73:08:86:DD:7C:67:9D:E0:63:07:32:3E:49:BD:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7c9abe1b-8e28-3060-b996-54c5c9d1e606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:da:e3:99:a2:9d:05:78:2a:3f:6e:61:de:57:0b:d6:22:60:
         24:2b:31:e4:60:a8:6f:34:d1:de:4b:1b:c1:01:09:05:f0:4c:
         c6:b3:8d:e7:d7:6f:55:56:d7:60:89:92:ab:ec:87:4d:b8:5a:
         68:c3:33:33:d0:ec:92:a6:33:88:26:fd:52:48:91:34:81:8c:
         ba:a1:e9:04:3f:2e:c1:3a:7d:24:f4:2e:44:be:3f:0d:24:91:
         6b:13:f7:82:4f:be:9d:8f:0f:8a:ec:26:d0:87:92:d6:5f:64:
         86:0d:45:b7:0c:2e:fb:cf:5b:96:eb:c5:6f:b4:14:e4:be:23:
         e4:21:3f:ee:c9:4b:0e:4e:e7:3b:a7:cc:3a:0f:d5:e9:47:be:
         43:a2:e5:de:c6:54:12:bc:b8:25:93:1a:38:9a:16:68:f8:29:
         30:a3:e6:a5:5c:71:56:eb:17:8f:be:b0:62:82:a0:60:48:85:
         df:82:75:21:07:78:8a:35:80:3c:80:da:75:a8:27:58:a5:5e:
         35:49:40:07:43:be:9e:6a:79:5e:c5:e2:09:4a:07:a6:2f:d1:
         27:b6:35:fd:2e:6c:a4:fe:d0:2c:08:9d:c5:8b:4d:19:a1:33:
         9f:b2:6a:0d:ea:6e:53:cc:81:35:11:d9:3a:9f:fd:bf:2c:82:
         be:34:83:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhL85GcCjzBcr0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
MjY2ZDkzYTUtMjk0YS00MzI5LWFjYTYtMjJmYzU3NmRkNTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM6amUbWBsoloP7WmjjWSNxY2EqKbA5ojQHv
ZahJO8TzklHnMKtzj6BiieLn9gKMGF9Dk9NBxP/lWGN8RrBFeQfBeGIIi6JYiIa2
gVMnm6rjLWklMcfI+kQKIYHfZZ60zElTR4sjLkxzrtY2il/k8GlvySVAZH16mJPb
R1QaYfJw9ZuVh0W8SF5Gc69+/DQZl1F8W5v/tVNWCdMcTq2byD2nBmcrzXfabth/
JVzbiELrh8XtFAMR1g8VYbxc01k4vk/kqeX2rzhY6IXw3W0dg9int9Z6R/p2d4Fg
VgMJTeox5Hq9yiLtmlAYJGjsDHMs0oEwYpmc4dN77U/T9IlkiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI4sX6mKcwiG3XxnneBjBzI+Sb0aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2M5YWJlMWItOGUyOC0z
MDYwLWI5OTYtNTRjNWM5ZDFlNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADLa45minQV4Kj9uYd5XC9YiYCQrMeRgqG800d5LG8EBCQXwTMaz
jefXb1VW12CJkqvsh024WmjDMzPQ7JKmM4gm/VJIkTSBjLqh6QQ/LsE6fST0LkS+
Pw0kkWsT94JPvp2PD4rsJtCHktZfZIYNRbcMLvvPW5brxW+0FOS+I+QhP+7JSw5O
5zunzDoP1elHvkOi5d7GVBK8uCWTGjiaFmj4KTCj5qVccVbrF4++sGKCoGBIhd+C
dSEHeIo1gDyA2nWoJ1ilXjVJQAdDvp5qeV7F4glKB6Yv0Se2Nf0ubKT+0CwIncWL
TRmhM5+yag3qblPMgTUR2Tqf/b8sgr40gwM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:58:23 2025 by rpki-client