Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0fc621a-fb47-33a6-b6d6-19fa67efc761.roa
File:                     b0fc621a-fb47-33a6-b6d6-19fa67efc761.roa (raw, json)
Hash identifier:          efLHw8akrbxzcVNtrfjOtx+VnIatKrVBdxVSlKvPq7c=
Subject key identifier:   88:5B:A9:46:18:A4:0F:2F:BA:FE:DD:65:86:E4:EC:27:59:6A:04:D8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA1C0BA32158B561585000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0fc621a-fb47-33a6-b6d6-19fa67efc761.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:bd80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:1c:0b:a3:21:58:b5:61:58:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=91d0507e-2078-4aa8-8dda-0b294cbb77ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:eb:48:16:47:29:d8:8e:03:17:fa:76:fc:be:
                    be:42:17:07:9e:2f:93:62:cb:44:29:07:78:90:31:
                    2f:13:0e:e1:2c:0a:59:5b:7e:af:82:ab:b9:34:84:
                    d0:b6:15:a0:61:e8:60:19:94:70:30:bc:d4:5e:80:
                    92:51:b3:7c:b3:24:20:d8:d9:77:fe:39:77:2f:61:
                    a0:09:ff:d9:f3:44:cc:6f:cd:3a:2a:78:ca:ca:5f:
                    0a:ad:94:a1:1b:f8:2e:8b:05:27:1f:c1:a7:c9:d4:
                    20:4a:9f:9d:24:01:04:f3:7b:a8:2f:fa:6a:77:c3:
                    a9:87:97:9c:37:78:84:ee:2f:19:26:1a:b8:a6:9a:
                    3c:67:f3:85:ae:a6:24:39:74:c0:10:0b:8b:34:1d:
                    70:ca:c5:bb:08:40:17:c7:16:0f:e5:74:70:01:dd:
                    42:99:4a:e4:e0:31:cc:66:bc:69:ad:6d:d2:7f:16:
                    19:84:69:12:80:a5:fb:ac:ff:9c:37:b6:7b:fc:b3:
                    ac:7e:4b:83:12:56:cd:9a:7d:ee:36:59:0f:c0:cc:
                    1e:6f:86:b4:3a:66:e9:c8:dc:92:af:0a:63:2b:d2:
                    a8:53:d1:40:8e:07:72:b2:47:f1:ca:04:53:29:8c:
                    ec:b6:7b:64:16:74:ef:a6:46:6f:b3:dd:7f:fd:3d:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5B:A9:46:18:A4:0F:2F:BA:FE:DD:65:86:E4:EC:27:59:6A:04:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0fc621a-fb47-33a6-b6d6-19fa67efc761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:bd80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b7:74:78:33:37:b2:ea:06:9d:c9:64:c0:4c:90:d6:3e:11:
         8b:4a:bc:68:36:44:51:e5:70:83:76:15:25:b0:48:df:2f:a6:
         06:cb:a1:98:ae:6d:f5:20:34:e0:84:fe:a2:57:24:5c:c9:cf:
         ad:02:8d:76:ac:54:cf:d3:45:b8:63:d0:73:f1:21:4e:ec:65:
         71:09:b6:a3:b0:ea:0c:7a:78:21:7c:a7:1b:e9:69:45:ea:aa:
         f5:7c:1d:a8:e0:77:07:98:18:92:04:e7:ea:b9:89:e0:f0:1b:
         16:8f:77:a5:80:5b:af:7f:5a:57:bb:9b:c6:81:ee:e9:c9:9f:
         14:12:eb:07:24:33:b9:6b:ff:c9:0c:c0:22:ec:bf:0b:b3:0c:
         61:a7:fe:bc:f2:8b:31:a1:83:84:6e:ed:6c:fc:90:a3:15:0d:
         70:4e:c2:0f:5a:83:ca:80:3e:ce:63:20:36:09:13:38:14:b0:
         01:bb:ae:d3:66:9f:ba:fc:a5:75:44:35:a6:de:f1:06:4b:25:
         ad:cc:60:ea:68:33:da:01:46:f5:53:d8:55:90:38:5a:62:33:
         9e:fc:cf:29:b1:07:36:aa:80:47:0f:24:8d:40:28:a8:0d:b2:
         0b:44:74:7c:7a:19:44:46:f7:dd:75:22:6e:49:db:8a:fb:53:
         c2:4e:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:18 2025 by rpki-client