Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a0bb42e-9756-3ee7-9787-b44f4110ac88.roa
File:                     7a0bb42e-9756-3ee7-9787-b44f4110ac88.roa (raw, json)
Hash identifier:          YVhOifwUJYFnoIyyfY1If/Q7kFXuD0zVgxw0AEpV3EA=
Subject key identifier:   CF:67:AF:BD:B5:64:87:BF:7A:77:3F:6D:32:27:47:A3:61:0E:9F:4E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848B737EB459EF5542C76983900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a0bb42e-9756-3ee7-9787-b44f4110ac88.roa
Signing time:             Thu 30 Jan 2025 11:12:29 +0000
ROA not before:           Thu 30 Jan 2025 11:12:29 +0000
ROA not after:            Wed 30 Apr 2025 10:12:29 +0000
asID:                     30036
IP address blocks:        2604:2d80:4b00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:37:eb:45:9e:f5:54:2c:76:98:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 11:12:29 2025 GMT
            Not After : Apr 30 10:12:29 2025 GMT
        Subject: CN=16a7a728-357e-4704-85e6-364cc9e4f89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:85:9d:94:3a:5c:4a:8e:24:64:d8:98:9a:
                    51:e3:85:8e:c2:a5:21:8d:42:8c:cb:81:52:83:01:
                    68:f4:2c:58:2e:2e:16:1d:e3:76:e0:80:1f:82:32:
                    a9:b4:b7:43:cd:cb:cf:59:a2:8f:c5:b2:1e:ad:77:
                    b3:81:87:44:f7:9d:a9:1a:80:16:69:ff:c9:e2:af:
                    fd:cd:bf:10:8d:fe:7a:c1:48:99:ee:a6:27:aa:88:
                    ec:c6:1f:b1:c0:32:c5:16:ff:4b:a4:06:61:94:69:
                    62:0b:5e:e5:60:d8:83:b8:90:4f:34:ee:81:ad:16:
                    34:a9:6c:79:89:bf:9f:be:e3:8b:49:83:40:e9:a1:
                    3f:ed:49:d4:8d:a4:34:a1:be:1e:83:08:36:c6:4d:
                    e6:71:1a:51:41:ab:96:ba:69:72:93:a2:8f:b9:16:
                    a1:13:3e:05:a0:c3:69:bf:c0:d3:c7:a1:61:20:20:
                    45:7f:37:8b:28:d3:23:ea:98:8c:a7:16:e5:ca:a7:
                    f9:22:cc:66:8c:29:b9:c5:92:07:4b:6f:72:f2:26:
                    06:25:31:a2:1a:3a:bf:64:05:b6:75:33:91:77:3b:
                    2b:fe:18:8c:e7:ee:5c:f0:72:38:68:0a:51:2d:55:
                    ae:cb:b2:40:50:69:70:4c:f9:a2:c9:51:9a:23:05:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:67:AF:BD:B5:64:87:BF:7A:77:3F:6D:32:27:47:A3:61:0E:9F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a0bb42e-9756-3ee7-9787-b44f4110ac88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:4b00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f1:0d:78:3b:69:5d:8f:3b:29:0e:bd:e3:89:fe:44:6b:56:
         85:b7:4b:87:76:08:49:99:07:b9:b2:cb:91:13:b0:15:22:c2:
         5f:9b:38:81:0c:1a:5d:d3:2b:50:c6:93:85:39:bf:ca:2a:b5:
         3b:08:c7:16:de:9c:87:45:de:7e:57:ec:5a:f7:73:2d:f2:54:
         9f:33:f4:fc:4e:2a:46:3a:ce:f8:38:82:57:ed:18:67:ee:c7:
         57:0e:46:7a:a6:3f:42:06:ab:85:ed:85:29:ca:da:fe:0e:50:
         b3:db:ed:8c:18:a4:0c:58:fc:53:d0:56:c5:4e:40:c1:02:94:
         e1:1e:0d:33:a9:4d:07:3c:97:97:b4:09:b7:7c:cf:fc:f8:84:
         72:0d:dd:14:57:0f:5f:89:04:80:07:d4:40:b8:11:87:b9:87:
         3c:80:4c:1e:6f:5e:aa:92:22:2a:99:9b:91:3f:a7:3f:40:53:
         21:4c:27:85:89:ac:9e:62:e7:55:5d:6c:fb:e3:41:6f:ce:34:
         5f:9a:68:24:b3:9d:90:f6:3c:3d:d3:59:4f:eb:59:d7:c4:a2:
         39:a5:6a:b6:a9:a2:45:aa:56:13:38:84:7b:1d:a6:d5:a4:2b:
         1c:8e:4c:81:da:32:2c:79:be:07:9f:8f:c7:23:99:32:d3:c2:
         65:9b:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:41 2025 by rpki-client