Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d75649a1-b301-3715-8538-a3a7b4010c93.roa
File:                     d75649a1-b301-3715-8538-a3a7b4010c93.roa (raw, json)
Hash identifier:          SPErKFs+GLtvV+voB1He28ECOjUC4U/zVWDbOxmu0gQ=
Subject key identifier:   75:09:77:F5:22:1D:F1:1B:F8:47:D5:05:66:A0:81:00:9B:FB:2D:F9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA103D62CDDFC736350050
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d75649a1-b301-3715-8538-a3a7b4010c93.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:ac00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:10:3d:62:cd:df:c7:36:35:00:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8371f37c-abc7-4254-b1ff-b88e391eaf74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:80:2f:cb:cc:fe:25:e7:8c:11:27:60:10:
                    0d:20:3c:0b:9e:0c:be:11:84:fd:a7:06:1d:e1:42:
                    7b:c8:d5:3f:f1:db:ac:b1:9d:e2:13:38:a7:53:95:
                    e2:8a:22:ca:68:18:20:4e:67:fc:67:7a:6a:dc:14:
                    ec:bf:ce:9d:3b:95:84:bc:9a:53:f8:61:16:90:f8:
                    04:9a:a6:1d:e5:81:88:c7:18:8c:3d:01:ba:89:5e:
                    06:05:d0:a4:36:26:5b:55:b2:17:ef:c8:bb:74:6f:
                    44:9b:4c:81:b8:fb:3e:28:6e:61:56:8c:e2:e8:4b:
                    dd:cb:b3:9f:ec:a9:8e:4a:90:bb:f2:46:23:93:0b:
                    2e:84:a3:da:39:67:b0:fd:7c:85:b2:27:1d:95:8f:
                    e7:65:2d:10:ef:45:85:67:0f:84:83:ac:77:8e:dc:
                    a9:5c:9b:f0:11:91:9c:4a:2d:dc:3b:e2:22:04:95:
                    bf:31:a7:27:45:64:4f:27:6a:02:3c:78:ae:8b:7e:
                    e9:18:50:9c:4a:15:d0:d0:28:a6:48:13:16:fd:3b:
                    19:5b:3c:f9:6e:a8:ad:18:7d:00:82:cc:f8:17:ee:
                    c8:7d:c7:a4:51:6b:b0:13:62:e8:6e:1c:2b:4b:88:
                    61:ab:36:eb:fa:4f:8c:cc:e0:e8:67:58:18:d2:73:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:09:77:F5:22:1D:F1:1B:F8:47:D5:05:66:A0:81:00:9B:FB:2D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d75649a1-b301-3715-8538-a3a7b4010c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:ac00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a2:3b:05:01:19:e0:49:8a:00:4c:dd:e8:57:69:c9:04:7f:
         20:bd:ef:8c:d7:59:d3:aa:d2:73:bb:55:c1:d5:9f:ff:be:83:
         a0:16:7e:79:86:09:83:cb:a5:f9:ca:99:65:77:63:bd:09:f8:
         43:b3:66:79:9d:2a:dd:74:b4:83:8b:2c:bb:f8:f2:13:bb:c3:
         d6:3c:db:f9:e4:f9:d1:0d:64:d2:18:79:e4:86:54:26:bc:27:
         19:56:9d:48:e4:90:98:5f:1d:41:57:ff:52:77:9b:bd:50:76:
         28:95:54:49:42:c9:78:2a:6d:e1:d9:05:d8:a4:6d:2f:6a:24:
         00:fa:65:4e:b8:df:ee:58:ab:5e:02:20:63:63:59:8d:a1:73:
         02:84:8c:8b:c8:67:94:49:99:20:f2:b4:be:15:a2:ae:cb:83:
         7b:9d:57:aa:59:8f:d4:05:f9:47:a3:16:37:d8:b9:f0:70:51:
         be:94:9e:e4:b1:1b:62:4c:60:db:72:1b:55:8b:77:31:7e:43:
         46:d8:69:88:f1:72:80:39:b0:4a:1d:8e:2a:da:2a:f9:8b:92:
         cb:96:19:2e:8a:2d:c5:92:18:4f:ea:c9:85:a8:84:f0:01:b4:
         22:f5:0f:37:44:92:f2:8c:bb:ff:85:22:50:22:e5:19:5e:ae:
         08:71:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:10 2025 by rpki-client