Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c60501a4-b4d5-3bee-8d03-bf1ac94f8fc0.roa
File:                     c60501a4-b4d5-3bee-8d03-bf1ac94f8fc0.roa (raw, json)
Hash identifier:          tIwJX74OtnP/aKXZ80doFr7J64gfVom7tIqf1iq+L1E=
Subject key identifier:   15:C1:EA:AC:77:A0:5F:51:2A:7E:73:0A:22:8D:ED:DB:E7:51:B9:3F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF687223412BDA3FB24380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c60501a4-b4d5-3bee-8d03-bf1ac94f8fc0.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:e200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:68:72:23:41:2b:da:3f:b2:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=af16d929-d465-4885-95b4-c5478cc2676c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:ee:6c:73:c8:45:56:72:80:8c:47:34:12:
                    b2:13:5f:de:aa:8c:05:8a:d7:3e:d0:9f:ee:00:1c:
                    07:78:c0:6f:0b:be:17:69:6c:f1:1f:64:2b:0f:ba:
                    25:9f:11:c0:3e:c8:29:61:11:86:6e:ae:08:ac:93:
                    e3:f3:72:5b:89:c4:5e:ca:86:d5:2c:33:53:f0:a6:
                    de:cf:79:ae:1e:ab:66:17:3e:da:96:13:63:b6:ae:
                    13:02:96:f3:e4:91:41:45:08:61:a3:14:96:ed:34:
                    ae:fa:59:41:8b:7d:6a:d4:f0:fd:2b:d9:81:d9:4e:
                    59:b4:c6:c4:5f:12:81:2b:e4:10:b1:77:ae:77:8d:
                    ae:e3:b1:64:78:66:40:db:c6:59:0a:d6:f4:8f:54:
                    1c:68:59:70:91:b2:2c:b1:29:af:e5:1c:df:f7:d1:
                    86:23:67:12:97:fe:4c:04:0a:09:f1:37:d8:ab:39:
                    94:bc:78:17:0b:5e:52:04:0e:ac:8c:df:56:32:1d:
                    e5:88:fc:28:ff:26:4c:32:36:36:c4:8d:08:5e:41:
                    e9:50:d4:7e:c1:e1:a1:cb:a3:84:25:51:53:da:9a:
                    7f:81:f2:42:e3:55:fc:46:02:fb:0f:b8:2e:15:b0:
                    3b:8d:60:f3:2d:7c:e4:a6:17:02:34:f7:3f:e2:a7:
                    fb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C1:EA:AC:77:A0:5F:51:2A:7E:73:0A:22:8D:ED:DB:E7:51:B9:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c60501a4-b4d5-3bee-8d03-bf1ac94f8fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:93:36:1c:ab:2a:11:35:55:13:6e:42:8d:89:a7:5e:9d:b5:
         3d:f4:19:45:55:a3:ec:44:d5:06:ec:89:8a:d4:d7:da:13:36:
         53:2c:b9:e6:5b:c9:07:c6:b3:dc:b3:39:4b:80:37:d7:f9:40:
         f3:e8:dd:ab:d3:ed:65:d2:f4:61:db:75:4d:e0:4e:fb:9a:cf:
         0b:01:64:c5:1b:29:a7:11:80:13:d3:3d:45:7f:e5:cb:75:ba:
         2a:8c:1c:8c:b0:26:3c:be:22:ea:e4:22:68:6f:80:f7:4e:27:
         4e:86:72:a4:06:e5:de:7f:3c:66:ce:27:a7:7f:15:84:8e:6e:
         61:fb:56:22:42:8b:35:13:e4:06:53:7e:a4:c6:67:87:02:25:
         fc:ba:2a:80:f0:d8:ce:33:51:cf:31:dd:ba:00:75:bb:58:b9:
         94:e6:3d:e3:c0:36:f0:1d:e3:23:e9:cd:52:2c:96:26:60:e8:
         f3:d4:6b:93:4e:35:72:29:e5:bc:07:f7:a9:89:b5:8f:78:52:
         3f:f5:38:e0:8b:c1:10:50:2d:16:16:bc:a5:a3:4f:8c:56:8c:
         cb:0a:9d:36:3a:62:18:4f:81:31:fd:53:56:f0:bd:b0:5c:aa:
         b6:46:e5:94:3b:5c:15:66:4c:cd:15:c9:ce:79:93:d5:48:6a:
         5a:0f:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:33:27 2025 by rpki-client