Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/842e0ac4-6e6f-3460-8e76-2b9526e727ef.roa
File:                     842e0ac4-6e6f-3460-8e76-2b9526e727ef.roa (raw, json)
Hash identifier:          CyKhMzUTRq41mlNU66ZU7Bgc+5EQ1bNpFrLs32XjlRQ=
Subject key identifier:   DB:13:37:A8:1F:4D:EC:18:22:80:90:11:9C:57:CE:ED:48:57:71:68
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C7F874A862C6E8438E8C8080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/842e0ac4-6e6f-3460-8e76-2b9526e727ef.roa
Signing time:             Wed 05 Feb 2025 11:13:21 +0000
ROA not before:           Wed 05 Feb 2025 11:13:21 +0000
ROA not after:            Tue 06 May 2025 10:13:21 +0000
asID:                     30036
IP address blocks:        2604:2d80:9600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f8:74:a8:62:c6:e8:43:8e:8c:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  5 11:13:21 2025 GMT
            Not After : May  6 10:13:21 2025 GMT
        Subject: CN=85e14136-d14e-4e27-acaf-aa72e64dfd03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:db:82:bc:0e:d0:ba:f8:37:f5:f5:a8:b4:
                    f9:38:bb:45:78:31:41:00:2c:7d:00:2b:39:cc:71:
                    9c:3a:3b:ec:f1:97:f5:c2:06:e3:4c:a6:2d:f8:79:
                    d3:a6:04:6d:ba:75:74:51:ac:d0:17:9e:ed:bc:1d:
                    3e:47:c7:b2:de:6d:09:26:18:ee:91:61:a5:eb:da:
                    92:ce:95:54:33:2a:bd:2e:66:38:a1:b2:5a:9c:85:
                    0a:4f:4b:6f:c2:38:a5:01:f1:16:bc:47:6d:c7:3a:
                    ad:33:1d:90:dd:b2:18:87:ec:1c:40:42:87:59:aa:
                    c4:b9:f8:ef:d9:eb:11:e3:c1:6c:74:e5:76:6e:96:
                    58:65:dc:94:0c:14:3e:78:a1:0b:86:cc:fb:02:f2:
                    74:c8:d5:4f:0b:95:3b:d4:e0:f3:f0:6b:8a:16:4a:
                    0a:5f:d1:a4:d1:f2:2b:d3:c1:12:14:8e:4e:bd:fa:
                    e9:90:82:1a:89:a2:ce:73:6b:8f:d4:39:d2:79:42:
                    f6:87:bd:63:a0:ff:6c:23:45:2a:d4:77:47:c0:d7:
                    b7:61:c2:24:c4:86:44:a5:8e:ca:2d:61:44:78:84:
                    c3:4a:ac:42:7b:fd:82:44:ba:cd:33:5e:e0:ad:85:
                    3e:95:f7:74:a7:be:d2:47:03:75:83:2a:b7:d4:f8:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:13:37:A8:1F:4D:EC:18:22:80:90:11:9C:57:CE:ED:48:57:71:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/842e0ac4-6e6f-3460-8e76-2b9526e727ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9600::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:88:d5:bb:5f:9a:cc:77:a0:20:ef:70:5d:6f:e2:d7:c9:1b:
         48:11:78:05:33:25:73:ce:80:d4:63:b3:02:0d:62:e3:43:76:
         e4:6d:f9:9c:be:91:59:99:77:a5:ba:c1:95:2f:65:4f:90:95:
         4c:01:0b:71:f4:53:db:ca:05:ce:4c:f1:6b:1d:be:8d:01:1d:
         e2:01:4b:e3:e2:8a:e6:e7:71:54:fa:3d:87:79:89:50:63:88:
         85:27:e1:fa:2a:ff:60:bf:64:df:d1:59:e9:7f:d7:29:eb:34:
         a2:0d:86:df:cd:30:9a:a7:a6:73:29:19:3c:7b:66:b6:17:27:
         6e:b2:b3:2e:bd:72:4e:7a:15:28:f9:a8:a6:a8:64:39:6c:75:
         c2:49:67:a8:ea:f7:fe:55:e8:3f:dc:6e:55:7f:17:31:a3:3f:
         c7:04:ac:f1:f6:d7:9a:61:bd:a0:40:e5:87:0c:3c:4a:c1:84:
         a2:83:26:33:8e:8d:f8:69:64:4e:90:61:79:8b:ee:06:91:cf:
         43:55:c7:6f:a0:9e:dc:b8:ed:ed:12:2f:b6:aa:dd:0e:3e:6c:
         cd:4c:b6:ee:13:12:f1:69:ac:fb:ac:8c:a5:72:8b:62:47:e3:
         14:b9:b6:ab:10:76:81:0e:b1:2d:55:98:73:f7:b8:09:fb:d6:
         b2:48:6d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:18 2025 by rpki-client