Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf188245-b724-390d-8f18-b309fe789633.roa
File:                     bf188245-b724-390d-8f18-b309fe789633.roa (raw, json)
Hash identifier:          b4+nd5YFTtxjwxCOeMBXsffbeZ3xJtGv+Q+eZahxs0s=
Subject key identifier:   AF:98:9A:99:C8:C4:89:42:BC:11:A4:0E:22:5E:68:A3:BB:EC:80:B8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849E0BF8B9292A710097A390F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf188245-b724-390d-8f18-b309fe789633.roa
Signing time:             Sat 17 May 2025 01:00:47 +0000
ROA not before:           Sat 17 May 2025 01:00:47 +0000
ROA not after:            Fri 15 Aug 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        2604:2d80:3300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:bf:8b:92:92:a7:10:09:7a:39:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 17 01:00:47 2025 GMT
            Not After : Aug 15 01:00:47 2025 GMT
        Subject: CN=c595feca-d375-4091-8aea-76da9206d7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:43:c8:68:c7:7b:6e:21:33:d1:f6:2e:48:
                    d6:d1:28:97:99:65:91:a6:9c:ab:20:26:b5:bc:9b:
                    19:70:6b:42:89:10:05:4a:75:1d:6b:11:e7:d3:60:
                    8d:90:94:8b:56:e8:d6:e1:8b:fc:75:1d:b0:97:16:
                    3d:db:86:28:9a:80:f9:48:62:0f:55:2e:12:0d:3a:
                    1a:b4:ed:f4:b7:04:99:db:06:3c:4d:40:94:b9:18:
                    02:29:16:ab:45:35:23:ba:81:b2:cb:32:bb:24:66:
                    ec:b5:ec:ce:8b:5e:75:0c:b8:52:9d:37:56:f0:d6:
                    d1:b1:86:fa:54:3d:a4:a1:c4:60:7e:60:3d:7d:29:
                    d2:d5:b9:56:ee:24:16:20:45:f5:78:69:84:f8:92:
                    95:24:9e:e4:a5:bf:86:d3:52:9f:3f:47:6f:7e:3f:
                    7e:a3:83:3e:bc:b1:89:fe:c9:37:fe:14:31:23:a3:
                    6b:db:04:98:c2:f6:e5:13:86:4f:0f:41:b0:7d:3b:
                    c1:95:2f:b5:62:67:9c:0c:3e:7f:03:f3:4c:cb:2a:
                    d7:37:73:7e:a1:82:3d:3b:77:2e:61:cb:61:67:e9:
                    d6:b6:cf:63:5b:20:d2:25:8f:7e:df:1b:69:8b:a4:
                    1e:0a:50:d4:1f:44:c6:8d:ae:da:89:50:9d:bf:16:
                    b5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:98:9A:99:C8:C4:89:42:BC:11:A4:0E:22:5E:68:A3:BB:EC:80:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bf188245-b724-390d-8f18-b309fe789633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:f1:8c:87:a9:9b:d8:fc:36:6f:9e:38:e5:a0:7d:e0:a8:
         e8:cd:fc:07:0d:df:51:73:3c:99:bb:e0:0f:15:26:f1:c8:c3:
         94:34:10:89:28:6c:e3:6b:8f:14:f3:14:43:37:a9:db:73:02:
         bc:8d:93:78:b4:76:e6:88:62:51:a6:f3:f7:ce:7a:ab:7d:c5:
         b4:99:fb:96:d2:4a:21:c6:32:cc:37:ce:71:a3:e9:25:7d:b8:
         ec:5c:5e:1f:d8:90:69:24:49:f9:5c:c3:9c:7a:da:94:5c:4c:
         d8:d2:5e:8c:45:e7:3d:3c:68:8b:99:bc:fc:89:4e:e0:b6:0b:
         e4:3d:3b:e8:23:52:d7:76:2b:6e:fd:71:32:f3:25:f4:24:b8:
         92:03:17:60:46:ae:bb:d3:4e:0d:bb:92:fb:46:e7:c9:ad:9f:
         ed:fe:ca:d2:a9:93:30:75:91:52:8d:49:c6:31:57:71:e1:f3:
         f8:83:56:aa:d7:da:5c:e4:dd:ab:24:8c:35:2a:fc:32:42:44:
         ca:a4:38:39:5e:da:88:3d:af:c9:ef:d7:60:e7:2d:18:c8:37:
         ed:2f:cc:ed:c5:d3:b6:f7:e9:16:e7:51:86:a5:d2:1c:02:60:
         f7:6d:d9:f5:56:32:97:f1:fb:16:bd:ba:89:fa:3c:c6:17:1e:
         9a:05:8c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:00:07 2025 by rpki-client