Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acdeb875-c830-3aab-97a0-3b8183c25f0c.roa
File:                     acdeb875-c830-3aab-97a0-3b8183c25f0c.roa (raw, json)
Hash identifier:          elZGpKBTLc2588VPMogBHZRN5VYYlPIZieyOmaJ80UQ=
Subject key identifier:   8F:48:DC:BB:E8:41:22:0E:A1:AD:E9:0C:0D:7F:8D:B7:96:59:E7:A7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784BF53A88B35C871EEC440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acdeb875-c830-3aab-97a0-3b8183c25f0c.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:180::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:bf:53:a8:8b:35:c8:71:ee:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=081d70cd-c194-4da0-946d-34c8d644b6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9e:0b:8f:3f:1c:f8:7d:6e:b6:ac:e7:1f:13:
                    ff:5c:1c:28:fb:22:3a:ec:db:f2:57:df:de:df:69:
                    25:2c:2a:d3:3f:bb:a2:08:8d:ce:57:ca:f4:fe:62:
                    bf:fc:34:e1:20:e1:90:22:4a:d1:8e:b4:19:53:01:
                    79:c9:71:e4:f3:1a:66:77:18:5c:fa:0f:3d:b7:a1:
                    67:c0:71:04:13:1b:bf:b4:74:5c:e0:44:20:18:7f:
                    42:72:31:d5:95:23:04:e1:c1:33:07:c7:81:c0:84:
                    4d:aa:01:89:43:ae:9a:25:a7:10:8f:61:2d:b7:63:
                    83:af:d9:df:48:62:27:18:bc:ce:44:cc:df:0e:36:
                    06:f3:ec:1b:9e:3c:fd:b4:f8:9e:f3:68:be:1c:6b:
                    1b:89:da:b7:b2:4f:c4:8c:48:45:09:84:d3:a2:85:
                    0b:b7:7a:28:ce:21:e8:44:dd:49:10:82:13:b2:11:
                    99:cd:3d:15:ca:35:e5:d1:c4:63:96:6d:8e:ee:71:
                    20:37:4f:f0:ae:e7:4a:99:64:67:cc:d2:ed:eb:f7:
                    5a:64:8a:02:9a:22:28:d3:d9:4c:a7:7a:bd:05:9f:
                    d6:5a:20:73:17:85:f5:08:62:33:35:33:e3:44:a5:
                    87:36:85:50:6e:13:f2:9c:25:cd:81:ef:10:b5:ec:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:48:DC:BB:E8:41:22:0E:A1:AD:E9:0C:0D:7F:8D:B7:96:59:E7:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acdeb875-c830-3aab-97a0-3b8183c25f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:af:e0:e5:f4:11:fd:9f:74:f6:87:4e:df:56:3a:74:ae:
         6e:c1:7c:19:ba:b4:df:f5:19:b6:0c:fb:82:19:72:04:72:94:
         58:48:68:0d:5e:51:99:4f:dc:af:f4:89:45:36:9c:65:1c:6e:
         a4:10:b2:7b:6e:52:80:ad:57:2f:84:65:37:2c:4e:dd:57:98:
         37:73:5c:e6:46:72:3f:3b:7e:ea:3f:2f:98:64:c0:b8:58:10:
         f4:5f:26:02:7b:50:74:28:ab:3a:8d:78:51:92:cb:8f:2f:20:
         02:7a:19:98:91:13:75:32:12:4c:63:ed:33:72:26:50:c1:20:
         35:5f:fd:cf:41:eb:e2:cb:db:90:9d:78:f6:88:23:6a:84:77:
         9f:ca:19:f0:98:38:48:6f:14:98:a1:4c:9c:4f:c6:1e:60:a1:
         36:ed:c6:8c:fb:6a:15:42:b4:7e:24:68:3b:05:de:10:36:6d:
         9a:55:7c:82:a4:d8:b7:31:60:db:4d:ab:32:a6:1d:46:97:d6:
         6c:2f:d6:8f:aa:7e:35:12:d2:34:9b:22:db:e9:08:fb:83:44:
         97:65:6c:e6:7d:04:b7:fb:00:cd:7c:e7:e1:f7:49:53:61:f0:
         b9:03:59:6d:cb:66:dc:88:21:61:ce:a9:bf:9d:50:6a:28:55:
         89:a6:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:11:07 2025 by rpki-client