Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a87f8eeb-6d2a-36ca-8e5d-7bbf68a69c40.roa
File:                     a87f8eeb-6d2a-36ca-8e5d-7bbf68a69c40.roa (raw, json)
Hash identifier:          MC1UX8b+ixezC5LU7z3Ctr2GvsC8SQjcMO1HQ6QtirY=
Subject key identifier:   93:6D:26:91:92:91:DC:2D:14:88:48:53:2B:2E:71:FA:F7:F2:22:D7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF67B34EBF773965E06240
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a87f8eeb-6d2a-36ca-8e5d-7bbf68a69c40.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:d500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:67:b3:4e:bf:77:39:65:e0:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=4052c42f-da6c-4d54-a969-ea08bc0efd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:68:8a:93:f0:f6:88:74:d8:a1:69:17:3f:2f:
                    32:b9:a7:c8:b3:f4:79:f7:c2:1e:bf:1e:ac:c5:0f:
                    7a:b7:2f:75:5c:73:9e:22:9a:7d:1b:1b:34:b0:0a:
                    e6:ff:87:96:c6:ee:8e:81:5e:a8:f5:30:32:1d:bb:
                    d7:ba:44:5e:e1:dc:5b:65:9b:c7:cd:38:cc:6b:bf:
                    bf:10:de:65:90:4a:39:87:22:23:70:19:ee:c8:73:
                    79:c5:73:78:6b:06:60:43:32:2b:da:12:0f:76:e7:
                    2f:10:27:36:7f:02:0e:c2:b1:73:8f:b8:16:fc:bf:
                    1f:16:46:5e:12:ff:9f:66:3b:c9:f9:2a:b7:f7:bb:
                    bc:94:5f:5e:c2:20:49:cf:18:b3:d1:d5:b5:28:db:
                    73:a7:36:74:c8:4a:a4:bf:35:05:47:04:44:93:01:
                    c1:d7:0c:ca:37:53:8a:ae:1c:4c:19:0e:17:54:d9:
                    5a:ff:91:03:96:77:3b:37:03:dd:52:ff:2d:d9:2c:
                    ef:a0:f0:3d:36:36:7f:89:46:67:6f:fe:a6:7b:52:
                    29:ae:a3:bc:d6:8b:f1:66:b7:0e:03:de:68:c9:4a:
                    41:fb:a2:3b:83:8b:da:88:6f:3c:ae:dc:1a:bb:8e:
                    02:d3:7a:c4:a4:42:ef:3d:cf:16:a1:ee:2e:c3:cb:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6D:26:91:92:91:DC:2D:14:88:48:53:2B:2E:71:FA:F7:F2:22:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a87f8eeb-6d2a-36ca-8e5d-7bbf68a69c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:40:1b:d5:ae:13:73:f3:06:e9:26:1a:20:2b:e5:c0:f7:
         7c:4f:a7:3f:59:01:b7:08:c5:83:31:fe:1c:55:6c:be:8b:be:
         ce:5c:62:d1:eb:d3:05:2e:f4:23:3b:55:05:d7:ef:ed:04:9f:
         99:2d:8c:9a:5c:f5:07:21:9a:ca:9c:ef:f7:71:ee:5e:67:89:
         37:a8:af:0b:ed:ff:1d:11:ce:0a:8b:7a:6d:1d:53:c3:8e:06:
         74:e9:ed:11:ac:9b:dc:0d:9d:bf:4f:47:a9:54:87:df:db:1c:
         f4:cd:fd:35:52:3e:be:33:39:53:c1:48:bf:57:3e:ed:75:0c:
         c0:70:aa:fb:1b:40:39:18:20:e5:15:40:b6:57:3c:cf:34:42:
         93:5e:3a:74:31:79:62:86:c4:ba:36:00:99:86:9f:9c:a8:74:
         5d:2e:42:76:bc:a7:16:5a:a6:ea:6f:cb:c0:62:56:5c:28:15:
         4d:fc:f6:20:8b:31:40:09:d2:55:91:f7:dc:52:99:8c:be:ee:
         cd:be:13:91:0c:6e:ec:a2:a3:33:77:e9:62:df:53:27:98:2b:
         51:ef:35:48:c8:3b:f2:71:86:17:1a:b9:2a:45:50:28:cb:b3:
         8d:64:2b:50:dc:ba:e7:87:c7:f1:be:16:b4:48:a9:23:d9:d4:
         22:96:e8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:38 2025 by rpki-client