Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c94d5e-285e-369f-bc50-01836280b629.roa
File:                     53c94d5e-285e-369f-bc50-01836280b629.roa (raw, json)
Hash identifier:          ALfFl9kd27bdhJ7mbhXCHW1V8gMrzB8CEbGs7wARpJg=
Subject key identifier:   72:D8:2C:56:29:13:E4:B5:8F:4B:4E:AE:45:2C:E1:44:15:0F:EC:BA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858492CBA2279600C0391AE6AE080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c94d5e-285e-369f-bc50-01836280b629.roa
Signing time:             Thu 13 Mar 2025 13:24:26 +0000
ROA not before:           Thu 13 Mar 2025 13:24:26 +0000
ROA not after:            Wed 11 Jun 2025 13:24:26 +0000
asID:                     30036
IP address blocks:        2604:2d80:300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ba:22:79:60:0c:03:91:ae:6a:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 13 13:24:26 2025 GMT
            Not After : Jun 11 13:24:26 2025 GMT
        Subject: CN=b74eb37c-8cff-440b-97a1-6379825f4d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:f2:b5:6c:96:27:63:3a:e8:9b:13:c9:88:
                    23:4a:fb:59:84:c1:53:45:38:3b:fb:7b:fd:78:af:
                    9d:28:3d:a1:e6:fc:70:8c:3f:fb:5e:49:6d:ea:58:
                    41:40:e0:14:3f:ca:ee:05:74:63:f9:1b:5e:3d:b7:
                    c1:c1:3c:23:d0:80:ce:8d:ef:ce:e9:76:11:e1:bf:
                    64:0c:5f:1b:39:18:d9:ed:69:a4:bc:9b:9d:9b:b2:
                    7f:85:f5:ac:83:f8:db:65:44:7e:88:bb:c2:91:1b:
                    f9:61:ae:17:3a:76:a8:8c:33:1e:15:36:c7:fc:2a:
                    02:01:7d:85:fb:68:15:d0:4e:6a:cf:ec:2e:3c:02:
                    12:52:4a:00:24:7b:7d:c2:ed:ba:71:c2:3b:dd:6d:
                    c3:29:51:b6:2c:04:0b:d9:9b:f5:66:c4:3b:1d:75:
                    45:58:e2:f7:03:7b:9d:a3:ef:11:ab:60:99:1b:2d:
                    6c:fa:4a:5f:0b:78:8a:0d:2d:a5:8d:50:12:f1:a3:
                    de:75:b5:6c:d6:2e:bb:80:a1:93:49:7f:5b:3a:3a:
                    4b:25:15:29:15:e9:eb:f1:c7:d9:7a:85:e5:96:ab:
                    19:f2:75:c9:30:7d:9c:58:b3:b8:f3:c6:c0:2f:75:
                    d8:4e:d6:f8:a7:d3:d2:e7:76:57:b3:d3:0e:d7:48:
                    ee:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D8:2C:56:29:13:E4:B5:8F:4B:4E:AE:45:2C:E1:44:15:0F:EC:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c94d5e-285e-369f-bc50-01836280b629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:30:85:e2:ec:ff:b3:7d:51:4f:79:51:6b:70:46:16:0e:ab:
         0f:a7:01:e6:7e:cd:e0:9b:25:f3:e4:90:78:44:a5:d5:61:27:
         3e:b9:12:a1:2b:2f:c4:ac:b4:b9:be:c4:f9:84:85:b5:55:67:
         93:30:96:0b:58:7f:f6:e4:11:61:11:c8:19:01:99:4e:e6:d4:
         44:f0:0d:65:fa:94:68:de:b2:e9:ff:68:2b:5b:a1:54:64:d5:
         ca:64:0b:6e:31:7c:b8:fa:f6:1b:5c:6a:ed:4e:3f:85:e9:62:
         1c:41:0f:57:c1:41:c7:5d:55:4a:6d:0a:af:e6:fc:c8:d4:bd:
         d8:26:7a:02:b8:35:d0:06:76:38:2d:18:54:a5:3a:73:5e:0f:
         1a:33:3a:0c:7f:c3:66:06:35:ec:8d:a8:43:05:64:11:7d:de:
         b4:c9:63:c6:07:b5:2f:68:2f:41:2f:a7:a0:3d:15:a6:88:48:
         41:d2:dc:b5:57:b9:30:3f:bf:27:37:42:5f:85:17:32:9f:47:
         e1:c9:29:26:b6:07:0d:5b:1f:cb:39:20:1a:4b:9e:a3:25:a0:
         28:cd:8d:aa:18:da:0b:66:de:f3:e4:c9:80:28:ac:9f:83:f4:
         ab:ae:bf:0d:cf:0f:5f:61:d6:0e:83:92:50:e2:5d:b7:99:4a:
         3e:75:19:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:09 2025 by rpki-client