Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e212a8ef-92a6-3b2a-a4ef-9f02d64c5206.roa
File:                     e212a8ef-92a6-3b2a-a4ef-9f02d64c5206.roa (raw, json)
Hash identifier:          P8rivNwYcmkl8Fk6COtc11unKd3FKhGTWu52f13Wuwk=
Subject key identifier:   A0:A5:BA:79:CC:C0:DE:70:81:20:D4:5E:0E:2C:D1:21:AC:1A:A7:A6
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784B6A73AEC45C45F17DD80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e212a8ef-92a6-3b2a-a4ef-9f02d64c5206.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:9b80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:b6:a7:3a:ec:45:c4:5f:17:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=2c445781-d4ca-421e-8900-2e690323d0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e8:c4:03:16:1a:07:85:3c:96:e8:b6:b7:41:
                    11:15:6e:a2:a8:4c:c9:84:81:8c:01:08:7b:42:1b:
                    cb:dd:d8:09:9b:4a:fa:c9:a6:b5:57:3b:25:52:23:
                    b4:b4:c1:d2:03:b9:7b:d1:dc:bd:bf:7d:c4:9f:9f:
                    13:62:2e:90:4e:ff:e4:e7:04:e8:b9:9d:6a:c3:67:
                    be:c0:0f:81:5d:92:89:01:0f:e2:b8:32:86:68:2a:
                    9a:a0:39:f0:4e:df:a1:db:c3:79:72:b8:6e:ef:d9:
                    7d:5d:8e:96:38:19:30:24:41:cb:a4:f7:90:8f:64:
                    fc:3d:0b:0a:d6:e2:a6:e7:bd:f3:4b:ec:3f:f1:9c:
                    12:b6:c9:02:ed:ba:74:74:13:cc:16:8e:8f:80:99:
                    3f:63:83:77:ac:bf:d7:68:7c:a7:f9:b7:8f:87:09:
                    3a:94:92:82:51:38:e3:74:a5:71:a2:b4:7c:1c:a9:
                    6e:2b:c3:e8:3f:aa:29:11:8a:e9:b2:01:5a:db:7b:
                    42:24:76:e6:0b:86:35:fc:02:8c:60:37:e2:38:56:
                    00:f2:5b:0a:e1:d5:d7:8d:5f:11:b2:22:05:8b:27:
                    36:2f:79:b0:98:d7:9d:60:2e:10:d5:2d:51:36:9d:
                    aa:eb:d9:e7:95:c2:e3:ac:73:75:48:17:9c:e6:f8:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A5:BA:79:CC:C0:DE:70:81:20:D4:5E:0E:2C:D1:21:AC:1A:A7:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e212a8ef-92a6-3b2a-a4ef-9f02d64c5206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9b80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:80:85:de:66:77:f1:94:e3:d5:99:82:16:8b:fd:ff:87:5e:
         04:89:53:6e:51:ed:82:67:28:4a:ee:d4:c6:14:34:88:25:74:
         62:e3:0f:ad:1b:b5:12:1f:c8:44:10:30:df:fd:99:55:38:ea:
         8b:df:29:f0:3e:60:bf:a5:87:c7:e7:e3:d8:ad:39:23:83:29:
         fc:1e:cd:49:cf:f8:f6:40:35:a6:67:05:0d:d6:ae:d9:5b:e8:
         d4:6e:0b:f6:b0:92:30:ed:92:d2:9e:ff:d7:6a:fa:9f:51:d7:
         2d:b6:7f:4f:12:bd:9f:2e:55:c5:0b:9c:42:fc:27:15:6b:99:
         36:c8:d5:10:f1:2e:71:54:33:9f:de:37:7b:2a:dc:81:49:80:
         c3:a8:92:35:37:31:db:53:c7:c9:5c:0f:93:c8:13:84:db:b6:
         c9:e6:f9:e4:61:6d:39:fb:13:41:4a:77:5c:ff:1b:58:96:9b:
         03:f7:8b:25:3a:d3:65:53:97:d2:85:7d:4b:33:04:ae:5f:77:
         d6:37:ad:28:22:1d:a2:05:60:b6:71:7c:be:6c:c7:57:d3:78:
         bb:a7:16:33:0b:03:3c:06:bf:a6:be:a6:a4:e9:16:68:03:b0:
         c2:d7:ce:6c:2c:47:89:9e:d9:18:de:6c:c0:b8:fd:4d:d1:29:
         43:9f:8c:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmnhLanOuxFxF8X3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
MmM0NDU3ODEtZDRjYS00MjFlLTg5MDAtMmU2OTAzMjNkMGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlujEAxYaB4U8lui2t0ERFW6iqEzJhIGMAQh7
QhvL3dgJm0r6yaa1VzslUiO0tMHSA7l70dy9v33En58TYi6QTv/k5wTouZ1qw2e+
wA+BXZKJAQ/iuDKGaCqaoDnwTt+h28N5crhu79l9XY6WOBkwJEHLpPeQj2T8PQsK
1uKm573zS+w/8ZwStskC7bp0dBPMFo6PgJk/Y4N3rL/XaHyn+bePhwk6lJKCUTjj
dKVxorR8HKluK8PoP6opEYrpsgFa23tCJHbmC4Y1/AKMYDfiOFYA8lsK4dXXjV8R
siIFiyc2L3mwmNedYC4Q1S1RNp2q69nnlcLjrHN1SBec5vjodwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKClunnMwN5wgSDUXg4s0SGsGqemMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTIxMmE4ZWYtOTJhNi0z
YjJhLWE0ZWYtOWYwMmQ2NGM1MjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgJuA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADWAhd5md/GU49WZghaL/f+HXgSJU25R7YJnKEru1MYUNIgldGLj
D60btRIfyEQQMN/9mVU46ovfKfA+YL+lh8fn49itOSODKfwezUnP+PZANaZnBQ3W
rtlb6NRuC/awkjDtktKe/9dq+p9R1y22f08SvZ8uVcULnEL8JxVrmTbI1RDxLnFU
M5/eN3sq3IFJgMOokjU3MdtTx8lcD5PIE4Tbtsnm+eRhbTn7E0FKd1z/G1iWmwP3
iyU602VTl9KFfUszBK5fd9Y3rSgiHaIFYLZxfL5sx1fTeLunFjMLAzwGv6a+pqTp
FmgDsMLXzmwsR4me2RjebMC4/U3RKUOfjHI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:16 2025 by rpki-client