Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5627f26-3f9e-3a0d-8341-e6f234e6754e.roa
File:                     f5627f26-3f9e-3a0d-8341-e6f234e6754e.roa (raw, json)
Hash identifier:          Ei6cnLa9DAgfWsaW2taWhB3PjvVnCJzrmQlY3UF6CLg=
Subject key identifier:   FD:E9:25:22:0D:16:4C:BC:A4:64:AE:EB:94:EC:88:A6:7F:5D:E1:23
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA0FD3B1BD4C52FD537F80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5627f26-3f9e-3a0d-8341-e6f234e6754e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:a880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:0f:d3:b1:bd:4c:52:fd:53:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=30ad0c4a-5d7c-483a-a335-82b095a83bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a4:68:b1:32:28:75:ec:02:b0:12:c3:82:b4:
                    84:01:ec:f1:a6:ef:fe:07:fb:d5:43:e1:13:17:25:
                    19:34:b3:dc:c3:e9:d0:15:ca:94:2d:ac:18:45:67:
                    5c:87:23:d0:26:e6:6c:bf:e8:82:4c:da:3b:25:32:
                    97:d9:a3:bc:ae:52:45:eb:8a:3e:b0:19:4b:54:90:
                    6d:c7:bd:9b:3c:c0:ed:95:40:a8:05:df:39:13:18:
                    85:26:0f:cf:39:9d:b5:d4:1b:a6:48:ec:a8:02:44:
                    07:79:f0:46:72:65:27:aa:c3:25:b0:8b:40:31:74:
                    3e:0b:4a:b6:5e:c3:9f:40:ef:69:e2:d4:2a:0f:85:
                    5d:e9:79:77:d3:7e:92:b3:50:05:a0:99:bd:34:b0:
                    48:20:7d:0d:3b:d6:fd:85:ba:b9:03:d0:ab:37:55:
                    ae:81:4f:03:c1:aa:76:c8:03:b4:db:dc:ac:1b:6f:
                    6f:2d:c2:67:0e:7b:00:c2:17:73:74:01:0f:78:13:
                    37:01:5a:20:bc:b7:08:71:ac:a2:f5:87:04:f8:a1:
                    5b:ed:c1:c6:e5:7d:75:02:1a:f6:4a:fc:e3:6d:cf:
                    bc:2a:a5:6e:1f:16:8d:fd:26:b4:85:35:75:66:b7:
                    9b:95:0e:6b:af:c5:e0:17:f5:4e:ea:85:5c:26:ab:
                    de:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E9:25:22:0D:16:4C:BC:A4:64:AE:EB:94:EC:88:A6:7F:5D:E1:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5627f26-3f9e-3a0d-8341-e6f234e6754e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ae:6f:f6:d4:04:05:a1:a2:da:3d:53:fa:62:54:fa:86:d4:
         c0:aa:e1:02:da:e8:79:15:b0:87:64:e6:80:76:59:a8:99:28:
         52:9c:f8:cc:52:a1:cd:f9:d9:40:af:c2:4c:80:72:cc:86:c5:
         28:55:af:fb:98:16:f8:c3:f2:76:91:79:14:10:8b:52:e2:11:
         98:66:ca:9d:b0:d0:12:7b:f2:72:ad:4d:6c:2b:ae:64:e6:f7:
         f4:9d:b1:af:34:bc:73:91:e7:ab:d4:d9:3b:a9:57:55:e4:87:
         1d:36:b0:0d:48:71:65:a5:df:a5:c7:95:9f:69:27:12:58:12:
         3a:ba:31:3f:c8:33:2a:d3:37:cd:93:6e:e6:91:0a:24:4e:1a:
         f7:3f:ce:da:2c:9a:5f:29:30:76:f8:00:0b:08:ae:31:41:99:
         f5:5f:42:68:e2:05:c5:5a:23:be:a3:1e:4c:e4:6a:1d:bc:ca:
         8a:55:cf:0d:62:aa:89:72:53:6d:88:78:96:75:aa:c8:8b:c5:
         58:af:97:6f:98:53:35:32:5f:59:70:f9:83:4d:62:08:94:74:
         b8:f9:9b:f8:ab:24:55:5c:d9:ec:34:ac:22:8d:11:f4:a2:a0:
         f9:1c:3e:9b:f4:d1:4f:5f:98:f8:06:e9:b3:7f:74:dd:ae:e8:
         9f:c9:99:65
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkug/Tsb1MUv1Tf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MzBhZDBjNGEtNWQ3Yy00ODNhLWEzMzUtODJiMDk1YTgzYmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqRosTIodewCsBLDgrSEAezxpu/+B/vVQ+ET
FyUZNLPcw+nQFcqULawYRWdchyPQJuZsv+iCTNo7JTKX2aO8rlJF64o+sBlLVJBt
x72bPMDtlUCoBd85ExiFJg/POZ211BumSOyoAkQHefBGcmUnqsMlsItAMXQ+C0q2
XsOfQO9p4tQqD4Vd6Xl3036Ss1AFoJm9NLBIIH0NO9b9hbq5A9CrN1WugU8Dwap2
yAO029ysG29vLcJnDnsAwhdzdAEPeBM3AVogvLcIcayi9YcE+KFb7cHG5X11Ahr2
Svzjbc+8KqVuHxaN/Sa0hTV1ZreblQ5rr8XgF/VO6oVcJqveIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP3pJSINFky8pGSu65TsiKZ/XeEjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjU2MjdmMjYtM2Y5ZS0z
YTBkLTgzNDEtZTZmMjM0ZTY3NTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKiA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEuub/bUBAWhoto9U/piVPqG1MCq4QLa6HkVsIdk5oB2WaiZKFKc
+MxSoc352UCvwkyAcsyGxShVr/uYFvjD8naReRQQi1LiEZhmyp2w0BJ78nKtTWwr
rmTm9/Sdsa80vHOR56vU2TupV1Xkhx02sA1IcWWl36XHlZ9pJxJYEjq6MT/IMyrT
N82TbuaRCiROGvc/ztosml8pMHb4AAsIrjFBmfVfQmjiBcVaI76jHkzkah28yopV
zw1iqolyU22IeJZ1qsiLxVivl2+YUzUyX1lw+YNNYgiUdLj5m/irJFVc2ew0rCKN
EfSioPkcPpv00U9fmPgG6bN/dN2u6J/JmWU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:49:54 2025 by rpki-client