Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a21980f-e95e-377e-871d-bb2e94f1f91f.roa
File:                     8a21980f-e95e-377e-871d-bb2e94f1f91f.roa (raw, json)
Hash identifier:          skusslonxBJTbE6PobJUFy65VtnI0GtH2PrO+gQYrj8=
Subject key identifier:   D2:F2:08:B6:06:7E:5A:18:08:62:89:54:9E:E3:C7:90:26:34:DF:3E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C560086DCFDEE702FCCB9D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a21980f-e95e-377e-871d-bb2e94f1f91f.roa
Signing time:             Tue 04 Feb 2025 12:54:38 +0000
ROA not before:           Tue 04 Feb 2025 12:54:38 +0000
ROA not after:            Mon 05 May 2025 11:54:38 +0000
asID:                     30036
IP address blocks:        2604:2d80:9380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:60:08:6d:cf:de:e7:02:fc:cb:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:54:38 2025 GMT
            Not After : May  5 11:54:38 2025 GMT
        Subject: CN=e6cd5056-7eee-4a6b-93e9-fff55126312e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:f3:c8:ce:c4:fc:4b:41:b4:4c:79:39:19:
                    bc:9a:4c:31:f0:c5:03:02:48:14:cd:b4:d7:4c:48:
                    8d:9f:3b:b1:e2:4d:4e:0a:bd:d8:ce:29:56:ca:e1:
                    21:d0:c4:fe:6c:78:d2:6d:8c:be:6b:b4:0c:9b:bc:
                    e7:47:ee:17:27:76:36:37:79:bc:dc:07:8e:93:95:
                    ec:3e:42:13:55:c0:cd:51:cc:7b:8e:76:7c:3e:c6:
                    c3:90:5f:31:1c:b5:c8:71:3f:5e:ad:8e:b8:f1:09:
                    10:79:cb:55:d1:8c:f3:db:50:1c:7a:95:e5:25:62:
                    73:e3:ea:54:d3:62:85:ce:0e:b7:2b:14:45:b2:ce:
                    ee:cd:2c:1a:9d:0e:30:bf:48:4a:e9:79:08:3f:a2:
                    31:02:9c:0d:f2:ce:ca:db:dd:b0:a9:06:89:ff:1a:
                    80:24:c3:1c:12:90:3d:43:25:77:9b:be:d5:7e:7f:
                    07:5e:80:ca:1b:93:e0:af:a3:31:b1:c0:19:fc:16:
                    70:93:a4:61:3e:52:c9:d0:df:ea:8b:7d:ec:cf:65:
                    91:41:f8:87:b1:95:29:07:a1:42:f1:19:08:10:b2:
                    3f:42:ea:dc:38:bc:27:f5:ac:c3:c0:ca:60:76:f6:
                    8d:83:b7:4c:26:0f:ee:b3:b2:83:8e:de:b6:1f:cd:
                    ee:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F2:08:B6:06:7E:5A:18:08:62:89:54:9E:E3:C7:90:26:34:DF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a21980f-e95e-377e-871d-bb2e94f1f91f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:9380::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1f:c2:5c:b2:9a:82:f0:0d:ac:be:39:19:52:23:54:17:76:
         2d:07:43:07:1f:d6:91:79:f1:57:54:68:2a:22:4c:78:27:20:
         58:43:4b:aa:1a:b8:0e:a0:dd:db:7f:21:ee:18:f2:88:c9:dd:
         e5:28:66:7d:a5:d7:7a:6e:24:7f:02:2a:27:d8:3b:fb:4f:41:
         41:37:7c:c0:5a:0f:99:fd:d6:4f:59:51:d5:db:c2:35:d9:9c:
         91:11:35:6a:53:38:95:bc:83:da:e4:28:f0:cb:32:8c:27:b3:
         ff:9e:71:56:b4:8a:df:c8:eb:5c:64:03:5d:ce:67:3c:be:f7:
         e2:4e:67:b0:ad:da:71:7f:2d:fb:9f:1f:6f:ed:5a:bf:f9:00:
         08:dc:23:dc:90:5c:40:b9:8e:ca:8d:c6:ee:5d:f0:50:33:c7:
         44:cd:f0:ae:30:25:23:4a:06:1f:85:b3:90:a3:a0:26:48:d0:
         ca:8e:59:5f:6a:2f:25:2e:c2:6e:28:ee:92:78:60:86:7a:6b:
         26:ca:77:80:05:a2:fd:0b:a6:ca:ca:79:e8:51:c8:00:f0:71:
         3a:48:ae:48:f7:0d:f6:c6:da:a3:2f:6d:d2:86:e5:21:78:a6:
         a3:be:cf:b1:09:2c:84:14:34:af:95:3a:c6:38:0b:f4:23:5e:
         c2:21:73:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:34 2025 by rpki-client