Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a917afc-3cb4-3a5a-b388-f884d9b17576.roa
File:                     5a917afc-3cb4-3a5a-b388-f884d9b17576.roa (raw, json)
Hash identifier:          GJAlSStdh/2b+gDJvqVdt9dOio7lC/6blEjjBjURRgY=
Subject key identifier:   CF:19:F7:4C:11:95:B7:5B:8F:17:6C:1A:44:22:51:82:F8:82:C9:37
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C265443D7802D3FE82589640
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a917afc-3cb4-3a5a-b388-f884d9b17576.roa
Signing time:             Mon 03 Feb 2025 11:17:45 +0000
ROA not before:           Mon 03 Feb 2025 11:17:45 +0000
ROA not after:            Sun 04 May 2025 10:17:45 +0000
asID:                     30036
IP address blocks:        2604:2d80:3080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:65:44:3d:78:02:d3:fe:82:58:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:17:45 2025 GMT
            Not After : May  4 10:17:45 2025 GMT
        Subject: CN=125eb414-3560-47d4-a0a2-cfec021d601f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:04:3a:59:08:40:28:8e:5b:20:9c:39:52:ed:
                    f2:3c:85:d6:db:34:dd:74:31:fa:8b:89:7c:03:d6:
                    6e:6b:c8:0b:82:0f:a0:53:f3:94:09:9c:ff:fa:03:
                    e4:14:0f:e3:fb:6a:19:88:05:6f:57:ba:fb:40:57:
                    d7:a8:ad:89:7e:28:25:06:60:41:73:31:28:c0:58:
                    c3:44:c7:38:f5:55:c2:87:6e:a1:60:4b:35:37:7a:
                    d6:bc:df:27:0a:27:aa:b6:99:70:a8:f7:c6:e1:e0:
                    00:66:a4:0a:30:5b:2c:48:ec:41:97:01:53:e8:23:
                    3e:9c:e3:50:02:de:17:e3:39:25:8a:4a:59:ea:bd:
                    62:c9:2e:22:8f:42:67:88:39:c9:c4:ed:3d:cc:79:
                    e4:84:6b:3e:eb:b1:97:78:59:7a:67:0c:7b:66:a1:
                    84:6e:f7:99:56:46:16:fd:aa:20:93:ae:73:4e:a3:
                    f6:1e:c2:73:1b:fe:1c:20:a5:3a:d1:0d:74:dc:be:
                    bc:f3:2e:c6:78:5e:99:02:a6:95:d7:33:03:5f:e5:
                    e5:bf:66:30:49:9b:09:52:80:2e:ed:5c:0b:9f:0b:
                    7b:19:4f:26:ad:c3:9d:a9:6c:7c:73:15:fb:20:5a:
                    9e:7c:fb:17:51:99:7f:13:2f:61:1a:2f:5e:1b:fb:
                    55:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:19:F7:4C:11:95:B7:5B:8F:17:6C:1A:44:22:51:82:F8:82:C9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a917afc-3cb4-3a5a-b388-f884d9b17576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c5:88:c4:08:fd:54:30:54:ba:79:84:42:05:3a:56:55:c3:
         8c:60:ee:a0:ff:7f:22:9c:3c:77:6d:d8:38:21:32:63:61:62:
         14:82:4a:f8:76:ac:ba:46:1c:6a:15:9f:da:5c:1f:f1:01:52:
         c8:92:52:5f:6f:be:18:2c:55:bc:fd:69:ba:08:4d:89:ab:8f:
         60:ce:27:82:6e:be:23:58:52:e0:e4:72:ed:c9:04:29:f0:f9:
         5d:c5:2f:a5:1b:12:b2:df:b0:be:b3:d4:4f:f0:33:b3:c3:81:
         0b:c8:12:0a:43:b3:49:90:a9:20:2d:26:81:ce:bc:9c:52:29:
         31:fa:ce:ea:2a:3d:76:af:c6:48:94:ea:0e:41:cb:5a:2e:4c:
         e4:3d:85:83:5d:4a:90:36:a0:8f:b1:92:a2:e7:89:53:f6:4a:
         03:cb:ba:4e:2f:05:7e:ea:c7:a0:35:7c:da:cc:f1:15:ff:16:
         29:da:d0:0d:1d:ee:df:5c:b0:c6:3d:1b:fd:dc:a4:f4:b5:63:
         b1:5a:0d:2e:3c:46:36:10:fd:c5:00:b3:60:c1:68:90:75:18:
         ec:fd:7f:c9:bf:31:2c:83:9f:13:10:6b:47:72:82:f4:a1:34:
         e7:2a:8e:56:7e:f7:e1:ec:c3:37:ed:26:2e:7b:6b:ee:fa:a4:
         81:0f:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:43 2025 by rpki-client