Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa
File:                     bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa (raw, json)
Hash identifier:          20/MCa/VE2WQBMW0BLOP8FT+iLpB8OSSJVZPMU4rc6A=
Subject key identifier:   1F:78:F4:17:AE:7B:4C:DA:4B:88:50:E3:E8:2F:00:4F:5B:04:DD:B9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849849EF3376C9A07A48C3E6470
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     30036
IP address blocks:        2604:2d81:380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f3:37:6c:9a:07:a4:8c:3e:64:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=2868fd79-23fe-46b9-8e49-6aab6e063b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:c7:a3:44:10:50:dc:ee:8d:cd:98:ef:65:
                    87:64:58:be:16:21:73:e5:3a:6c:af:f6:11:30:7e:
                    51:53:7f:ca:06:1d:36:9e:9f:27:7e:b8:29:d2:c2:
                    78:d7:4c:83:11:09:8f:95:54:2e:54:ed:a5:9d:0f:
                    5a:5d:08:25:42:0c:6d:a2:e6:a1:65:9a:1f:af:4b:
                    01:0b:03:1a:0e:30:fa:ca:ce:ae:57:f7:93:fe:9f:
                    23:37:50:6e:af:d7:8c:f6:2d:17:0d:81:84:95:89:
                    e4:b0:54:cb:e8:ed:5e:1b:1e:1f:74:e8:b0:37:2e:
                    ef:12:71:84:d8:09:db:de:30:ae:10:e0:80:30:60:
                    9b:a7:eb:0c:05:f0:07:34:cf:58:cf:05:73:23:f7:
                    e4:81:d8:eb:c2:9a:47:5b:50:1b:0f:dc:2e:eb:6c:
                    fc:d9:e3:8a:c2:80:90:a7:fc:91:72:a4:6a:25:bb:
                    2d:78:dc:5e:42:32:82:1b:40:5d:27:f4:8b:9f:90:
                    80:6c:04:20:56:57:e8:8f:67:7d:96:af:e6:34:99:
                    6b:c6:5b:73:f4:07:e5:19:ad:b5:b2:2b:ff:ec:4f:
                    38:1e:1b:1d:fe:f2:15:13:7f:57:68:e2:1b:24:84:
                    69:0b:f5:16:dc:59:9b:68:9f:b4:d6:ba:4b:d6:e1:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:78:F4:17:AE:7B:4C:DA:4B:88:50:E3:E8:2F:00:4F:5B:04:DD:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd9bf8d-b6e3-3d03-9b84-0f74807ffc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:62:3d:87:f8:55:1b:8b:77:df:f4:bf:d9:0c:ce:ba:be:c0:
         ca:30:6e:ce:96:c2:f7:ed:29:4f:51:a8:38:a4:4c:f1:3d:03:
         3f:83:6a:87:88:68:78:b4:cc:bf:70:5c:60:ce:b1:d8:7f:bb:
         1b:bb:38:73:6b:e6:54:e3:8b:f2:d5:37:81:57:86:d8:f6:7d:
         47:3e:7a:76:f1:e8:61:1c:80:7f:42:50:5f:ed:97:8e:c7:6c:
         f1:7b:43:af:b5:b9:41:19:ba:b5:b2:6b:b8:97:15:29:70:88:
         fd:61:37:27:c6:0f:62:82:fb:51:fc:e8:57:26:9f:c0:71:ef:
         f5:e5:78:0f:f0:eb:2e:28:5b:18:1c:7d:65:a2:29:96:2c:52:
         73:44:2c:9e:35:01:98:62:c7:7c:b5:af:17:25:22:23:94:79:
         32:34:75:6f:ca:ad:f6:1e:19:be:66:90:a4:8c:2a:e5:9b:97:
         fa:1f:9c:7f:14:51:cd:04:b5:e4:1e:2e:d3:c3:5e:e8:b2:64:
         c2:77:f2:aa:2c:57:e7:78:b0:d0:ee:bf:be:b8:17:81:63:c1:
         6f:a1:6e:4c:ed:4f:31:9d:8c:21:21:08:e5:63:68:a7:ac:82:
         f7:42:54:a0:55:9e:39:d1:e1:4f:7b:3e:8a:15:de:8d:43:a2:
         f6:ce:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:49:45 2025 by rpki-client