Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0030076b-667f-3ffd-a0a6-6634f482c04a.roa
File:                     0030076b-667f-3ffd-a0a6-6634f482c04a.roa (raw, json)
Hash identifier:          BAfC/bkvR4Dle6xPXkx9M9dC0/Uu1MknI/VB4hpJP5k=
Subject key identifier:   97:43:3B:23:65:DE:7B:46:61:31:2F:1A:7F:8D:C7:7E:36:B4:B6:F8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5808251E708E38086C42580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0030076b-667f-3ffd-a0a6-6634f482c04a.roa
Signing time:             Tue 04 Feb 2025 14:00:04 +0000
ROA not before:           Tue 04 Feb 2025 14:00:04 +0000
ROA not after:            Mon 05 May 2025 13:00:04 +0000
asID:                     30036
IP address blocks:        2604:2d80:c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:82:51:e7:08:e3:80:86:c4:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 14:00:04 2025 GMT
            Not After : May  5 13:00:04 2025 GMT
        Subject: CN=04f8a49f-438e-4f1d-8058-0795130895bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:30:5f:c3:0d:fb:36:1a:c5:9d:6d:a4:74:
                    46:f0:42:36:2c:08:6d:f6:55:3c:0b:1a:17:82:8a:
                    6e:b1:fd:e2:ff:11:65:c5:65:4f:3a:2c:fb:f8:20:
                    c2:ec:41:67:de:6b:62:8e:fd:ec:4f:5e:39:b4:91:
                    7c:a1:85:db:78:58:3a:6e:af:bd:95:3e:ad:9b:ba:
                    6f:44:d6:85:1d:5c:6a:95:33:db:8c:84:5f:b6:0a:
                    69:57:fa:52:5d:fe:0e:89:01:e3:34:da:c2:82:37:
                    eb:76:9a:19:1d:c3:85:55:62:68:ec:85:96:8d:db:
                    f0:c0:ca:6a:2f:7a:ad:9d:82:34:bd:35:91:3c:a6:
                    13:9a:d2:a2:01:68:ff:c3:0a:e0:2d:76:42:e1:ce:
                    5e:1e:68:58:95:12:89:d1:a7:f5:7e:5f:23:f3:ce:
                    1f:86:47:34:d9:f1:b9:3b:af:a1:b2:72:77:b2:fd:
                    97:93:67:8e:29:0b:ff:59:71:7e:97:7d:cc:76:8d:
                    43:3b:b5:70:53:90:15:2b:cf:52:45:e2:be:63:34:
                    3f:91:bf:27:bb:09:a9:92:35:ea:4a:18:cc:b0:1e:
                    ae:05:01:27:23:ef:7e:dd:c7:4f:b7:ad:91:ad:e3:
                    57:2d:59:af:b1:f3:be:6d:c0:53:a9:dc:16:0e:ab:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:3B:23:65:DE:7B:46:61:31:2F:1A:7F:8D:C7:7E:36:B4:B6:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0030076b-667f-3ffd-a0a6-6634f482c04a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:c00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:1c:81:21:6f:4d:02:f1:a0:2c:b2:ce:07:78:5c:13:58:
         84:93:bb:bc:73:17:35:f2:c9:04:f8:93:5e:26:74:69:7f:b3:
         fc:b9:ab:3c:79:7c:8b:05:f7:b0:30:8d:82:a1:66:6b:a8:a3:
         3d:a3:0e:7c:e5:00:06:a2:f9:04:9e:b7:33:5d:d9:8a:9d:6d:
         a3:6a:09:bf:06:b4:26:3b:a8:f0:ca:ac:21:21:0d:5d:c0:0c:
         0a:2b:ac:ee:23:c3:bc:cc:1f:a0:43:bb:8a:95:3c:0d:a2:c7:
         c6:5b:5e:69:74:da:1d:40:9a:86:5f:8d:ed:d2:f4:6f:76:e5:
         3b:9a:b5:f8:5b:00:db:64:15:f7:8b:3d:30:5a:ce:20:db:b2:
         3b:a1:ea:00:4d:8b:fa:b6:4b:22:b2:f0:b8:da:db:31:9b:dd:
         e0:a9:40:9d:56:c6:7b:d9:f7:41:2a:a2:68:21:68:ca:b8:80:
         75:2a:b5:a7:29:69:e6:92:79:c0:bd:08:73:c2:74:4f:a9:95:
         ca:b7:a6:aa:9d:24:28:c4:d8:f8:2f:02:48:89:0e:7a:0e:15:
         14:3a:a4:00:3d:9f:22:1f:d5:29:c9:df:15:9d:42:08:3f:4d:
         fd:fd:24:e7:98:c7:bc:15:46:91:53:ed:24:48:8f:81:fc:7e:
         70:37:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:39 2025 by rpki-client