Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95d31a2b-9b23-3c9f-a65e-ea15191de074.roa
File:                     95d31a2b-9b23-3c9f-a65e-ea15191de074.roa (raw, json)
Hash identifier:          wmNAduOudyLZK57GZTbRI0x25d9gcRSeYqbMke7vgZw=
Subject key identifier:   5A:E3:E4:FC:70:EB:6F:D5:28:B2:DA:B0:7E:2C:14:68:40:3D:E7:5D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858499AF473607480E8C06B75B280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95d31a2b-9b23-3c9f-a65e-ea15191de074.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        2604:2d80:f180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:73:60:74:80:e8:c0:6b:75:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=e04a81f5-2cb3-4710-9192-eebf84c3fb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:96:5f:df:58:97:34:4a:ad:67:1c:d8:d6:e1:
                    2b:08:75:a2:30:a0:46:91:b3:df:e6:66:ac:cc:b6:
                    b3:ac:4f:47:d7:89:77:47:d1:20:e4:47:28:df:9e:
                    da:1b:27:76:f5:e3:bd:98:37:9f:33:9c:e1:32:38:
                    d9:7f:a2:80:41:cc:a3:e5:ec:99:af:f4:47:59:3c:
                    9a:4e:2d:b9:f1:a7:3e:fa:fe:04:44:ac:da:0c:33:
                    a3:31:bc:82:5c:ee:4e:a7:b6:85:db:a4:b8:6d:46:
                    70:54:65:60:19:a0:1b:4d:da:2d:95:6f:0f:27:ac:
                    cc:78:ae:0a:33:37:59:aa:96:d7:dd:a4:c7:27:9d:
                    5a:9a:61:cf:77:4e:b9:19:10:ed:7d:8a:92:41:84:
                    1b:99:8d:26:41:b1:fd:c9:fa:38:4e:77:65:54:76:
                    f2:63:2d:fc:9f:69:3b:e0:3e:96:91:55:d5:1d:8c:
                    da:b1:d3:b1:b1:82:86:be:93:35:a5:3c:94:39:7e:
                    48:f3:eb:af:50:34:c9:1d:13:dc:56:57:52:78:92:
                    4d:f3:26:fe:b3:c8:36:72:61:6f:b7:65:31:f9:10:
                    48:97:47:33:3a:e5:53:fc:03:a1:26:c4:da:3b:05:
                    81:3f:b5:bc:a3:cb:bb:b6:c6:2e:3a:fc:55:03:fc:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:E4:FC:70:EB:6F:D5:28:B2:DA:B0:7E:2C:14:68:40:3D:E7:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95d31a2b-9b23-3c9f-a65e-ea15191de074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ee:bc:d9:14:cd:a8:d2:54:fc:6e:3f:e7:bd:ac:7c:a0:75:
         9d:fe:92:00:64:5d:d4:4c:93:bd:f8:57:29:ff:1d:9c:0f:67:
         6d:59:b1:b0:bf:1f:3d:89:ae:8f:24:bf:d6:e9:2a:da:87:cb:
         80:61:37:f3:f5:c1:e3:db:d8:35:a9:53:89:c4:ca:12:09:51:
         55:d2:76:98:4f:ef:da:79:1d:6e:2e:eb:eb:d5:63:19:cd:72:
         26:d8:7c:ff:f8:d3:39:c4:06:71:4c:1c:bd:41:bc:4e:18:e4:
         0e:f7:dd:9d:cd:62:48:54:7a:32:12:b0:d6:3f:e9:98:8a:1c:
         16:ad:47:a3:4f:72:91:52:16:ab:24:dc:42:63:00:0a:05:b6:
         52:fc:ca:42:78:e9:3b:e4:ae:25:b3:89:11:ec:d9:32:04:ad:
         b1:27:2e:bc:9d:9a:e0:06:7e:8d:bf:2b:b9:c2:d5:f0:14:5b:
         cb:9e:86:54:6c:70:fd:bb:24:99:19:57:90:26:16:fb:d4:c7:
         86:5b:1d:fa:1f:9b:5d:64:fc:ef:1a:fa:99:9e:e4:1c:b3:dc:
         b7:0a:39:4a:73:8f:6d:ab:b0:02:f2:3c:81:e4:05:eb:ad:c6:
         7b:12:07:a4:a3:39:e1:36:cd:f3:8c:a0:69:53:cb:6a:88:91:
         80:fa:cf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:26:01 2025 by rpki-client