Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de81dd91-2a87-37fc-98bb-b7af2c10d236.roa
File:                     de81dd91-2a87-37fc-98bb-b7af2c10d236.roa (raw, json)
Hash identifier:          QIgT3xDRWPYkwoKhhLlqw3Rye2Pfc84ycIiC8UMHvE4=
Subject key identifier:   83:2C:29:0B:16:57:B4:E5:07:27:79:B9:69:E2:22:41:A9:39:7F:94
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784B687C3695B18300D53F0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de81dd91-2a87-37fc-98bb-b7af2c10d236.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:9a00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:b6:87:c3:69:5b:18:30:0d:53:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=992d0245-3a4b-4a77-adbd-e8b20b4c4641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:c2:8b:7f:05:69:94:7b:68:3a:99:d5:ef:
                    39:85:a4:f0:4f:c0:7c:68:7f:69:4e:65:83:64:ac:
                    e6:6f:36:13:d2:8d:56:f5:ac:09:46:5d:48:09:b0:
                    cd:03:4c:ba:95:41:0a:aa:c0:23:f5:ec:5d:2d:db:
                    43:ec:74:28:e0:75:57:5a:df:7e:e9:ec:f7:64:65:
                    14:1c:e6:59:6d:7e:00:51:a7:9b:99:09:37:bf:f2:
                    7f:d1:e9:5d:75:df:75:a4:50:96:45:39:9f:2d:a7:
                    4d:0e:7c:aa:1c:72:1e:2a:ca:21:1b:02:a5:2c:16:
                    32:2c:f5:f0:18:9c:79:02:fb:0b:33:68:f2:a3:92:
                    c1:4c:c9:12:7f:a2:ab:1c:be:01:3f:3a:42:89:1b:
                    e6:15:39:8a:1d:f3:96:2c:94:0a:26:7a:ed:a9:6b:
                    af:88:60:fb:cb:c5:0f:b7:a8:6d:17:a0:5b:28:ef:
                    c7:a5:97:65:6b:ba:6a:a6:bf:f4:24:55:af:a2:78:
                    48:95:dc:89:f7:dd:f7:53:b5:2a:8d:e7:41:ab:2e:
                    d0:a9:78:ed:e0:2d:a8:6c:9f:21:7b:3b:a2:06:a5:
                    86:2a:c0:74:8d:68:c0:55:49:23:75:35:82:d1:73:
                    72:e1:7b:ae:fc:69:62:25:fa:4d:41:15:c7:4f:99:
                    e6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2C:29:0B:16:57:B4:E5:07:27:79:B9:69:E2:22:41:A9:39:7F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de81dd91-2a87-37fc-98bb-b7af2c10d236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9a00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:be:f2:8e:f9:c3:cd:ce:a7:d9:f1:e1:75:6e:94:11:ca:20:
         6d:b6:39:13:64:32:81:c0:7e:c4:52:d8:14:c9:fc:c1:2e:8a:
         30:25:74:b5:50:e1:16:ff:43:ab:e7:8f:bf:74:c3:7a:f6:93:
         01:b8:53:e1:88:dd:4c:2f:8a:26:a9:5c:40:24:43:0e:1f:79:
         f9:07:a9:a4:38:37:9a:0d:b7:83:ec:00:59:04:f3:6a:1e:4c:
         59:96:82:e6:5b:b7:41:d5:0f:da:8b:bf:4a:eb:2d:68:b0:c1:
         76:72:09:6d:ad:d7:38:34:ce:58:8e:38:dd:b7:d7:9c:1e:6d:
         c6:d4:54:72:4b:33:c8:fa:49:f6:28:c1:7c:52:39:51:91:a2:
         a4:01:e4:d9:03:50:73:c0:a2:5e:3a:b4:d5:21:e1:96:92:6f:
         8e:36:fe:3c:08:2c:44:ee:84:14:f6:ba:cd:bb:5b:ef:3d:d7:
         15:49:fd:32:ed:b9:17:ce:7d:d0:b3:f6:ed:8a:0d:bc:b9:ac:
         e9:98:2f:09:ad:21:38:a1:95:1c:67:f2:6b:29:b8:ef:2a:e6:
         e6:fb:dc:ae:d1:e3:88:ca:3c:56:c4:1f:f5:32:65:c9:1d:b3:
         a5:f2:a6:13:b8:1b:fd:9e:b9:54:e7:d5:cc:da:d6:aa:c1:d4:
         02:50:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:52:02 2025 by rpki-client