Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c931f3-5995-35dd-a833-dd487ec4b69b.roa
File:                     91c931f3-5995-35dd-a833-dd487ec4b69b.roa (raw, json)
Hash identifier:          X0XvewuHT8QSRR9CU+K9UoIVzlelwjhO7DShu8aW8zw=
Subject key identifier:   62:1C:F2:F9:68:85:30:72:E6:D3:08:5F:99:29:DB:2A:1D:1D:48:DB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784B6F3A83BB14F7FB637C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c931f3-5995-35dd-a833-dd487ec4b69b.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:d080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:b6:f3:a8:3b:b1:4f:7f:b6:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=7752e6ef-c817-4c33-b84b-bb7d0f501bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:ab:2c:5f:71:98:10:0f:6d:e6:e1:ca:e0:
                    99:e5:19:c9:7c:73:85:a1:a1:f4:f1:3b:2a:42:e6:
                    26:0a:2b:ea:95:7b:4c:f5:0b:9a:49:79:e4:06:32:
                    8d:99:0f:22:dc:2b:e6:af:55:cd:93:da:5a:60:fc:
                    0e:cc:f4:f8:63:c1:d2:fc:6e:c5:27:2d:64:0f:49:
                    85:2c:39:bb:d2:32:6c:ed:17:e4:b4:10:49:75:c1:
                    cd:00:f7:9a:92:b8:0b:5f:4d:c0:8e:65:4c:39:b8:
                    33:25:ea:09:25:d1:6f:2b:49:cb:bb:32:3b:23:71:
                    ff:52:fa:7b:97:20:a4:64:a9:43:75:63:1b:89:68:
                    85:98:90:1f:76:f4:74:f6:52:b4:a5:99:01:3a:78:
                    6d:b6:f3:e6:2b:2c:16:ce:16:8f:f7:70:b2:26:bf:
                    e1:05:1e:90:7b:e8:f3:1e:64:6b:32:66:50:18:0f:
                    f1:0b:33:4a:f4:84:1c:92:20:b1:a3:ec:50:36:24:
                    9f:9c:7c:04:6b:05:5d:29:83:ef:89:3d:2d:0e:92:
                    84:08:4b:40:88:da:38:00:c4:97:90:ff:cc:f8:79:
                    9a:9b:f8:36:65:04:e8:15:db:2c:81:1c:a1:7c:b9:
                    53:99:da:bf:52:2f:3c:c0:b6:9c:97:35:76:0b:fa:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1C:F2:F9:68:85:30:72:E6:D3:08:5F:99:29:DB:2A:1D:1D:48:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c931f3-5995-35dd-a833-dd487ec4b69b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:df:f6:02:6a:32:78:a0:61:06:56:62:dd:5c:1b:cf:9f:4c:
         37:11:a0:67:3e:86:b3:77:e1:0d:5b:85:d1:57:2f:cb:75:97:
         30:9b:c8:55:72:55:75:7b:3f:d4:b1:44:27:4f:57:e3:29:03:
         8e:a5:94:a5:ab:8d:93:32:84:c9:ca:00:8f:8c:ee:e5:b4:4f:
         95:98:b7:9d:c4:4f:55:db:ae:77:36:d0:3f:ee:50:69:83:92:
         98:ac:e0:d6:21:4a:a1:5d:ea:20:95:5d:92:bf:d9:8a:fc:d0:
         a1:e5:b0:fd:25:10:73:0b:62:33:3d:2f:25:2e:d6:91:ba:e7:
         8b:da:49:cb:e1:07:59:98:c0:bb:05:19:b5:96:46:25:87:9e:
         84:e9:ca:2a:90:c0:06:f7:00:6b:2b:a2:7f:0b:c1:6d:80:2b:
         27:c9:8d:c1:75:05:df:25:03:ed:41:3b:89:b5:a1:91:a6:f7:
         ea:2c:2f:49:d7:fc:92:4b:4c:b5:31:5d:0f:82:c5:5d:06:fb:
         b3:8f:66:d5:b6:83:31:c4:27:99:8a:9e:64:45:c3:39:32:50:
         e7:ef:14:c8:00:0d:68:5c:e0:14:66:8c:76:2d:13:10:9b:37:
         62:12:24:e3:d7:45:9c:67:20:66:58:f5:6a:4e:be:10:33:59:
         bb:59:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:21:01 2025 by rpki-client