Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c81fb4a-3641-3b2a-8fa4-dd791b2e06ff.roa
File:                     4c81fb4a-3641-3b2a-8fa4-dd791b2e06ff.roa (raw, json)
Hash identifier:          oWkQnI8h8Gbuo74CUbOl6+jma4y/QcCjruNUrF7Zvvs=
Subject key identifier:   3D:BB:C9:92:B7:88:EA:50:46:6F:00:A8:A8:10:D3:4D:97:91:FD:DA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C55935FC0EE1E9DE1717EA20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c81fb4a-3641-3b2a-8fa4-dd791b2e06ff.roa
Signing time:             Tue 04 Feb 2025 12:40:53 +0000
ROA not before:           Tue 04 Feb 2025 12:40:53 +0000
ROA not after:            Mon 05 May 2025 11:40:53 +0000
asID:                     30036
IP address blocks:        2604:2d80:8d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:59:35:fc:0e:e1:e9:de:17:17:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:40:53 2025 GMT
            Not After : May  5 11:40:53 2025 GMT
        Subject: CN=80b7723b-c796-4951-9bf8-ee4e089158aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:25:2a:73:0a:16:33:75:fb:10:4f:1f:51:c4:
                    af:f9:32:98:2b:2d:82:fa:34:01:48:99:8b:5b:f5:
                    fd:fe:5e:ab:58:62:62:a8:2d:0a:fe:3a:8b:d2:1d:
                    f5:fc:a1:26:1d:4d:3e:d4:d6:dc:2b:fc:20:c3:c2:
                    82:27:22:40:28:46:19:31:bf:8e:f9:f3:f1:62:02:
                    b3:8e:da:b4:6d:89:bf:18:1f:79:03:45:17:fc:69:
                    0b:06:66:50:0c:79:74:59:9b:25:14:98:ba:69:da:
                    1d:3b:4e:ef:3b:02:81:70:1c:50:0d:07:3f:db:d6:
                    6d:37:b9:9a:5b:71:ad:87:6a:bd:85:9a:de:7b:fa:
                    bf:ca:11:ae:dd:c0:f0:8f:3a:2d:83:9f:c4:41:fb:
                    38:1d:d7:39:7f:6e:89:44:4c:70:f9:e8:f2:fa:15:
                    93:29:bd:3f:58:01:b4:0d:50:24:9b:b2:91:bf:61:
                    23:97:75:d4:9a:4c:74:56:4a:6f:4e:6c:59:47:7a:
                    b3:d0:e6:40:4f:0f:44:63:48:bb:f4:11:9b:46:27:
                    a5:f1:7f:95:e9:e3:fd:c3:32:bb:33:11:53:a4:38:
                    50:21:15:09:a0:e1:74:29:c4:f2:86:87:df:31:2d:
                    40:b9:f3:37:71:ef:2a:e0:3e:e2:85:13:3a:96:2f:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:C9:92:B7:88:EA:50:46:6F:00:A8:A8:10:D3:4D:97:91:FD:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c81fb4a-3641-3b2a-8fa4-dd791b2e06ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8d80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:aa:4a:80:e6:7d:2d:65:2b:2e:29:a4:2c:81:0b:47:d8:
         a2:49:ec:fd:a3:7a:7c:ad:0e:db:f8:fd:e2:1b:45:7c:ed:e6:
         b0:17:51:14:97:28:1d:e8:0e:22:63:3d:95:0e:af:cc:21:aa:
         5a:23:e3:e8:be:a0:0e:b0:1b:01:07:83:f3:7f:29:d7:17:19:
         0c:b0:bd:a0:87:87:e9:bc:b5:75:2a:b1:c9:d0:54:e2:c3:4a:
         4b:c5:0a:e2:7d:c9:64:38:fa:0b:41:47:11:c6:d4:e7:14:34:
         2d:09:f5:e7:ea:4f:36:f4:11:b1:64:5c:d7:ae:63:55:09:b7:
         6f:67:0e:85:80:0a:a8:a1:56:13:06:a9:fa:48:1a:8b:5e:d7:
         c4:9c:28:66:1c:ae:a9:de:f7:14:5e:80:8e:62:b8:5a:5a:6a:
         18:1e:04:f6:71:84:9b:6f:eb:04:d7:9f:89:eb:5a:36:93:ec:
         a0:72:24:26:11:9e:8e:5c:31:6e:5b:c7:50:46:11:06:75:06:
         ef:3e:e6:9c:44:92:06:49:b4:73:72:ce:c0:9c:7c:63:ab:a1:
         39:00:c9:ed:92:2a:39:6a:38:6b:de:b0:c1:85:f8:2c:9e:88:
         47:19:4a:7a:7c:a3:64:32:ea:8a:4e:12:01:08:f2:2d:27:df:
         84:7d:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:18 2025 by rpki-client