Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c0c917-499c-3626-95b1-5e150764f9ad.roa
File:                     53c0c917-499c-3626-95b1-5e150764f9ad.roa (raw, json)
Hash identifier:          t9zFzSmcFt70fNcdVXjl1GBrL6azn2NY/aKjwNmRb2Y=
Subject key identifier:   9D:AF:D6:04:73:4E:05:2A:08:0C:2E:54:0E:27:35:67:7D:F5:AD:FC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848B737F2335F641761AD880AC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c0c917-499c-3626-95b1-5e150764f9ad.roa
Signing time:             Thu 30 Jan 2025 11:12:32 +0000
ROA not before:           Thu 30 Jan 2025 11:12:32 +0000
ROA not after:            Wed 30 Apr 2025 10:12:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:4d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:37:f2:33:5f:64:17:61:ad:88:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 11:12:32 2025 GMT
            Not After : Apr 30 10:12:32 2025 GMT
        Subject: CN=4979aa3d-22f0-4308-b755-7e7c4d4447eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:e4:66:00:dd:37:47:2a:fd:66:74:f0:91:
                    50:02:fe:f1:7f:b7:07:12:33:c0:1a:33:c1:1c:68:
                    0e:5e:17:ad:a5:1e:10:0f:09:50:ea:61:17:5d:64:
                    29:7d:4d:49:ac:9f:5e:02:3a:13:fc:d7:32:1d:d6:
                    4f:d0:dc:cc:ae:02:7c:cc:90:e5:d5:95:12:8a:da:
                    fe:ed:11:8a:8a:a0:90:38:b8:9a:7b:9f:d5:7c:ae:
                    19:2d:98:2c:2d:79:13:1a:49:56:2c:ca:1e:83:ea:
                    c5:fe:2d:29:cc:4a:f9:48:75:88:f6:59:b0:0a:2e:
                    43:6e:16:24:ec:a2:07:18:92:d0:a4:54:ff:a9:9b:
                    b5:3d:16:7d:2d:90:12:b0:81:4f:9a:8c:bd:2e:c8:
                    4f:c2:50:b8:94:d5:0a:8c:c7:79:d9:88:97:fe:b0:
                    29:4f:ca:dc:3c:1e:c1:8b:55:10:e0:c3:1d:65:68:
                    e1:92:10:86:45:37:d7:0b:f9:74:0b:60:c2:a4:d0:
                    d1:69:e6:ce:2d:b5:7d:98:65:d0:79:c9:91:4c:fe:
                    12:51:e0:2f:cf:e2:88:c9:f9:b7:ed:d6:48:62:1e:
                    b6:63:33:36:82:ec:59:c1:a1:10:78:b9:9b:a8:d4:
                    86:0c:32:d2:92:8b:dc:ff:c9:54:53:c3:17:4d:72:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AF:D6:04:73:4E:05:2A:08:0C:2E:54:0E:27:35:67:7D:F5:AD:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c0c917-499c-3626-95b1-5e150764f9ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4d80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9f:42:71:69:8e:5f:ee:c9:8c:ab:b4:e8:ac:2e:f2:c0:7c:
         12:b1:e4:ed:b4:af:43:1e:9b:8b:81:9d:e8:af:6d:ad:55:d3:
         e9:db:40:cc:d0:07:75:66:da:73:ab:4a:05:06:c2:44:73:4e:
         cb:db:9f:7a:25:2a:6a:64:41:e5:07:ba:5d:9a:56:64:38:ad:
         42:fd:60:3f:a4:8e:82:1c:7c:25:c4:7a:7b:1a:c3:10:a2:0b:
         fe:d5:50:4f:02:e0:ea:25:65:c3:a8:48:f7:2b:0b:be:3b:3a:
         d5:a4:e0:65:0d:e4:0b:a5:07:f5:e9:27:e5:dd:04:83:bc:1b:
         fb:31:a1:94:15:2e:0a:84:fd:1a:c5:4a:98:37:99:50:5a:ce:
         79:a7:c9:4f:53:e3:4c:1c:61:7a:ca:ab:b8:b7:98:51:68:51:
         f9:fa:e2:1a:05:74:01:42:43:13:c5:2a:d7:12:c5:fb:b2:3f:
         a0:5d:78:bc:6a:e8:19:24:f6:cb:a3:10:5b:46:1b:00:c1:ae:
         35:e8:64:c1:75:f6:af:d7:4b:01:84:18:9d:fe:12:41:0d:df:
         32:b6:e2:b7:9c:9b:b0:2f:0e:d9:d6:65:25:cf:c8:7e:23:3e:
         6e:fd:32:e4:34:4f:55:73:da:58:3e:96:9b:f8:34:52:1c:86:
         77:0c:69:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:24:19 2025 by rpki-client