Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be3639a-1716-36e9-b560-099ba7f44e25.roa
File:                     5be3639a-1716-36e9-b560-099ba7f44e25.roa (raw, json)
Hash identifier:          VSifyRQwH/HjfCBFN1BfekfanAAZVeYXZE+E58W4gLg=
Subject key identifier:   EC:8B:0B:DB:4B:59:3F:36:07:27:39:90:5D:28:29:D0:D8:51:03:E3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5784C648DF9D39DB1C7EC80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be3639a-1716-36e9-b560-099ba7f44e25.roa
Signing time:             Tue 04 Feb 2025 13:43:31 +0000
ROA not before:           Tue 04 Feb 2025 13:43:31 +0000
ROA not after:            Mon 05 May 2025 12:43:31 +0000
asID:                     30036
IP address blocks:        2604:2d80:a300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:78:4c:64:8d:f9:d3:9d:b1:c7:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 13:43:31 2025 GMT
            Not After : May  5 12:43:31 2025 GMT
        Subject: CN=3efc6578-8399-46a7-b348-5cabc6487682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:9b:e0:03:20:b2:15:95:d8:19:ac:9a:d8:
                    c3:d0:17:d8:d5:9b:0d:86:0a:49:fb:5f:72:56:0b:
                    15:4c:7d:4a:be:e0:78:5e:c4:2b:62:29:ee:4d:b1:
                    59:1f:b7:2a:5d:8f:fb:5e:71:12:ff:12:08:34:3d:
                    fe:d7:ec:fc:ea:ec:99:2c:65:35:cb:6d:3a:4b:73:
                    c5:4b:4b:ed:53:3d:06:b5:d3:9a:d1:aa:3c:32:1a:
                    1a:17:33:cf:da:3a:62:f2:91:b5:08:f8:98:0a:4d:
                    cf:f2:4c:4e:22:85:66:d3:15:66:de:4b:ae:d2:7b:
                    3e:75:ff:a5:f5:47:53:8b:ef:2f:52:2f:fe:81:41:
                    a1:43:d8:85:04:0f:7e:a7:fb:8d:95:b0:71:d2:2e:
                    91:b6:a0:44:f2:56:08:c6:6c:58:3f:44:61:90:71:
                    af:1b:eb:06:fa:b7:e0:6e:4b:de:bc:31:c5:84:8d:
                    52:d0:9a:d8:80:11:c6:f4:d7:e4:72:36:2e:a4:5d:
                    21:a1:b5:6f:f9:02:4f:58:22:69:35:50:74:8e:0f:
                    60:ae:01:33:bf:01:a3:17:47:26:92:63:53:4d:44:
                    22:c2:e7:03:cb:69:05:8a:1c:84:cb:9b:4f:ea:83:
                    bf:1d:a2:95:9a:44:6a:66:39:f8:8e:44:61:10:7f:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8B:0B:DB:4B:59:3F:36:07:27:39:90:5D:28:29:D0:D8:51:03:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be3639a-1716-36e9-b560-099ba7f44e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:a300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2b:9a:bd:82:4e:4d:93:7f:82:b4:30:4e:22:1f:1a:36:87:
         c4:3c:33:b3:6b:15:c6:72:79:4a:3b:22:d7:6c:ff:e4:e0:90:
         b2:c1:e5:4c:2b:5b:bd:dc:f3:8c:fc:db:de:6a:31:3e:11:19:
         91:ac:84:e0:13:d1:82:f2:c2:ee:be:a7:c7:ff:38:82:a0:48:
         2e:16:0f:07:b6:93:0e:d1:92:58:71:ba:fc:66:c6:25:45:84:
         4a:22:81:e2:50:c1:53:3d:33:56:c9:ea:ba:68:be:97:90:62:
         b5:0a:ea:81:ab:cb:7b:98:52:c8:bd:92:7a:23:4f:6f:aa:c2:
         eb:4b:c5:91:ed:e5:1a:bd:fe:da:30:30:ac:07:c3:bb:ee:56:
         54:29:23:d2:9f:5e:d7:f1:bf:2b:d1:4f:7a:1f:da:8d:14:de:
         9f:df:2c:39:16:ca:bc:1d:ae:ff:5b:20:2e:db:ed:ec:a8:24:
         e2:de:0b:d8:a7:53:f3:58:4f:83:d4:77:b4:41:60:6e:58:21:
         7f:b1:36:b0:76:4a:23:50:8b:a6:96:2a:97:1a:27:f6:99:f4:
         ba:90:69:3a:b1:93:aa:f5:0d:db:f3:ed:09:8d:2f:1d:43:4d:
         20:4c:a6:41:1b:c2:ae:86:de:9b:50:70:1e:f6:d5:0d:2c:ff:
         ee:d5:63:59
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFeExkjfnTnbHH7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEzNDMzMVoXDTI1MDUwNTEyNDMzMVowLzEtMCsGA1UEAxMk
M2VmYzY1NzgtODM5OS00NmE3LWIzNDgtNWNhYmM2NDg3NjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3eb4AMgshWV2BmsmtjD0BfY1ZsNhgpJ+19y
VgsVTH1KvuB4XsQrYinuTbFZH7cqXY/7XnES/xIIND3+1+z86uyZLGU1y206S3PF
S0vtUz0GtdOa0ao8MhoaFzPP2jpi8pG1CPiYCk3P8kxOIoVm0xVm3kuu0ns+df+l
9UdTi+8vUi/+gUGhQ9iFBA9+p/uNlbBx0i6RtqBE8lYIxmxYP0RhkHGvG+sG+rfg
bkvevDHFhI1S0JrYgBHG9NfkcjYupF0hobVv+QJPWCJpNVB0jg9grgEzvwGjF0cm
kmNTTUQiwucDy2kFihyEy5tP6oO/HaKVmkRqZjn4jkRhEH+LrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOyLC9tLWT82Byc5kF0oKdDYUQPjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWJlMzYzOWEtMTcxNi0z
NmU5LWI1NjAtMDk5YmE3ZjQ0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgKMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHwrmr2CTk2Tf4K0ME4iHxo2h8Q8M7NrFcZyeUo7Itds/+TgkLLB
5UwrW73c84z8295qMT4RGZGshOAT0YLywu6+p8f/OIKgSC4WDwe2kw7Rklhxuvxm
xiVFhEoigeJQwVM9M1bJ6rpovpeQYrUK6oGry3uYUsi9knojT2+qwutLxZHt5Rq9
/towMKwHw7vuVlQpI9KfXtfxvyvRT3of2o0U3p/fLDkWyrwdrv9bIC7b7eyoJOLe
C9inU/NYT4PUd7RBYG5YIX+xNrB2SiNQi6aWKpcaJ/aZ9LqQaTqxk6r1Ddvz7QmN
Lx1DTSBMpkEbwq6G3ptQcB721Q0s/+7VY1k=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:00 2025 by rpki-client