Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3038ea2-08e0-39d3-9f5a-b237f9ef29a8.roa
File:                     e3038ea2-08e0-39d3-9f5a-b237f9ef29a8.roa (raw, json)
Hash identifier:          /STv+ZMjuMYhzdVAqG7e2tmndieJH0kao5dlw/M8VdA=
Subject key identifier:   29:11:55:54:9E:5F:73:3A:C8:47:70:75:7F:4F:71:95:D0:7F:1D:B5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858497356B1CE4526E6E9DFCBAB40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3038ea2-08e0-39d3-9f5a-b237f9ef29a8.roa
Signing time:             Mon 07 Apr 2025 20:26:28 +0000
ROA not before:           Mon 07 Apr 2025 20:26:28 +0000
ROA not after:            Sun 06 Jul 2025 20:26:28 +0000
asID:                     30036
IP address blocks:        2604:2d81:4000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:56:b1:ce:45:26:e6:e9:df:cb:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr  7 20:26:28 2025 GMT
            Not After : Jul  6 20:26:28 2025 GMT
        Subject: CN=f017ded4-db90-4919-baff-aa6b5133e679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:92:0c:5e:c5:6b:ef:2f:46:02:85:64:0b:
                    99:07:df:95:a6:bc:c2:38:a3:b3:3b:4e:01:cd:19:
                    3c:e1:e1:63:7b:44:7d:77:fe:02:1e:60:59:63:08:
                    0a:96:d2:a9:d7:9e:59:92:0c:d0:c1:5e:a5:6a:51:
                    e6:13:9e:c0:cc:80:33:6a:8e:67:40:f6:55:3d:a0:
                    9c:96:ab:30:61:c7:1f:fc:46:6b:29:e0:04:20:5a:
                    c9:a6:ef:ba:1e:2c:2f:be:6d:c9:b6:79:3b:0d:8a:
                    55:af:b4:d6:b5:50:4c:e2:b5:eb:56:34:f0:b8:7b:
                    66:6c:39:7b:ca:9c:72:1d:7b:87:0c:1e:33:67:ab:
                    45:fb:b6:b2:13:ba:5c:61:3a:46:f9:2f:06:1a:6c:
                    5b:96:fe:6e:ab:9c:dc:1b:ee:12:8b:c1:2a:77:42:
                    31:6a:a9:ec:62:61:6a:9b:54:de:92:09:9f:bd:3d:
                    c0:86:fa:5c:00:68:e6:a1:a8:56:bb:55:39:4a:92:
                    b0:a4:7e:7f:9c:ea:1d:bf:42:dd:5b:f4:0e:c7:55:
                    d8:06:e9:86:6e:85:99:93:b9:ae:02:44:99:79:b0:
                    08:72:42:ba:aa:06:a4:b1:76:f1:11:cf:5c:d4:56:
                    6c:ff:a1:7f:3b:e1:00:fd:f5:1c:4b:45:9a:75:72:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:11:55:54:9E:5F:73:3A:C8:47:70:75:7F:4F:71:95:D0:7F:1D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3038ea2-08e0-39d3-9f5a-b237f9ef29a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:02:84:4c:29:68:de:21:4c:ad:a6:25:f0:1f:01:8a:2c:4d:
         e5:eb:90:35:3b:d6:9e:24:7d:3b:9f:7f:4c:62:86:43:d8:e2:
         f6:d2:19:3e:e3:60:84:c4:53:32:c7:c1:c4:1a:65:d4:cd:03:
         4b:4f:f5:8f:87:ac:62:db:27:fc:f5:ac:ab:05:54:55:52:92:
         1c:73:39:77:d9:68:fe:2d:cb:2b:e1:7c:fa:15:64:1b:05:30:
         28:aa:c6:9e:b1:31:3b:94:e5:b8:71:ea:ff:d2:9e:0b:49:3f:
         d5:4f:8a:3e:af:9f:7f:f6:2a:db:15:8a:a6:0c:ea:f4:f5:65:
         1b:db:1b:ff:fa:69:5f:eb:af:54:57:13:b9:82:a3:0e:ff:05:
         3d:ea:3f:9c:46:f6:c6:85:55:7d:4c:25:21:70:4a:f1:63:55:
         2c:65:74:a5:0d:8c:d4:2a:4e:d3:12:5b:9d:5b:80:5e:20:ea:
         89:23:51:4e:77:af:88:0f:79:07:01:6a:fe:2c:5f:10:cb:13:
         4b:ed:ee:e7:f9:7f:05:fb:ff:4c:18:c6:21:88:05:fe:b4:b9:
         4a:79:2f:76:5d:c7:d1:85:36:0b:e7:ed:c6:ff:a2:23:f7:a6:
         4e:8f:40:28:a1:30:1b:55:7b:0e:8d:e7:e6:50:62:90:07:48:
         33:cc:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:53:43 2025 by rpki-client