Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91740dca-4784-393e-9681-9549608b5b2e.roa
File:                     91740dca-4784-393e-9681-9549608b5b2e.roa (raw, json)
Hash identifier:          qLXY9B0PYFTLY3XJiIVQ/YYSNWjjLuGMRDHHHN1YCBA=
Subject key identifier:   10:BC:83:25:CD:7D:6A:CF:9B:D7:7C:FC:D4:AB:A2:5F:68:C2:14:00
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584996C49CA33D4C6808235CC900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91740dca-4784-393e-9681-9549608b5b2e.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:2480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:9c:a3:3d:4c:68:08:23:5c:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=1be74a3d-2dec-413a-812c-70b58e1a9beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:d4:18:25:d0:0f:77:0b:f8:74:bb:58:46:
                    e3:f1:9a:26:90:ca:e3:1a:5b:70:84:29:d0:7d:0e:
                    93:ee:32:f8:36:a4:66:12:1a:ad:0c:f1:d6:5d:85:
                    be:b2:f0:ff:12:33:fa:22:13:19:b8:70:88:2c:4c:
                    b2:74:e7:5d:d5:e9:63:17:42:dd:be:4c:6a:04:84:
                    8d:9c:f7:5a:5e:af:a8:54:59:d9:0e:6b:af:a2:8a:
                    03:4d:ff:ed:10:76:08:1d:e7:25:db:4f:50:32:60:
                    65:26:4f:ab:f8:dc:18:11:56:d2:81:a4:fc:71:a3:
                    c7:0a:49:7f:47:3c:28:79:5b:c7:a9:ec:9b:76:10:
                    ee:ae:22:3c:f7:87:a1:ef:f5:99:80:bb:08:e3:43:
                    cf:4c:19:61:69:cf:e5:41:a0:15:b6:3c:1e:d4:b3:
                    e1:de:47:5e:81:44:b5:9c:3e:10:12:22:86:d3:b0:
                    37:92:94:56:46:0f:2f:2a:3c:4d:80:fc:70:07:cc:
                    bf:a4:2b:e7:7e:60:a1:d9:7d:49:cd:61:f6:d8:9a:
                    d5:3b:4a:b2:86:8d:d9:e8:bd:83:ec:99:16:a5:3a:
                    a2:02:2a:6c:ea:26:b2:ad:7b:80:df:dc:16:f3:b2:
                    14:3d:43:cb:80:23:ee:69:42:ea:ae:93:53:d1:48:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BC:83:25:CD:7D:6A:CF:9B:D7:7C:FC:D4:AB:A2:5F:68:C2:14:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91740dca-4784-393e-9681-9549608b5b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8a:12:c4:86:d4:34:41:5d:a0:a0:bd:d2:4e:b2:6a:cc:8e:
         a7:a2:23:3a:c5:1e:76:ad:6b:ea:9b:ef:00:10:38:59:87:cc:
         d6:4e:cf:46:46:f5:e0:bb:de:ab:55:5f:2f:a9:e2:23:ef:b3:
         6e:f0:9e:21:8a:6f:7e:2c:b1:21:29:6a:e1:5e:0b:d9:d8:56:
         59:4e:96:ab:a2:e5:a3:0d:b6:19:29:33:18:07:b4:59:65:bb:
         89:c0:ed:a8:a8:81:b8:3f:4d:33:65:22:10:aa:dc:32:b3:dc:
         b2:29:70:4e:11:9d:bb:a9:b3:e4:6f:0f:54:72:81:a6:a2:c7:
         df:c4:4e:33:8f:d1:ac:f8:e7:26:75:50:a7:05:61:b3:0f:b9:
         54:60:ca:7c:40:f8:8e:7f:0a:30:59:7a:92:a0:c7:92:28:3f:
         d0:b9:fd:c7:da:3b:d6:b3:d4:3c:24:47:4d:3c:37:99:1e:de:
         01:c6:5f:04:10:f0:61:0f:dc:05:ba:ca:03:b4:a2:99:c0:88:
         31:fd:5c:f3:67:2a:10:3f:d3:ee:a5:93:91:06:c2:ed:ef:87:
         1a:12:17:8e:ce:1c:ce:12:5e:7f:1e:ad:0f:0d:87:5f:dd:50:
         b1:89:d8:33:44:3c:84:ec:d7:89:85:7b:1c:cb:c5:b0:1d:df:
         e6:48:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:04:00 2025 by rpki-client