Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8adf3074-63ff-3f38-878a-591890c3bb0c.roa
File:                     8adf3074-63ff-3f38-878a-591890c3bb0c.roa (raw, json)
Hash identifier:          FC/6yzhcLUFLHVnvINXkwRUczdF8hzXdm+zrtbrzUv0=
Subject key identifier:   A1:09:18:81:65:21:48:4E:5C:4F:76:FF:12:FB:CD:E7:A2:E5:6B:FC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C26583E0B097ABE7D27B1980
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8adf3074-63ff-3f38-878a-591890c3bb0c.roa
Signing time:             Mon 03 Feb 2025 11:18:15 +0000
ROA not before:           Mon 03 Feb 2025 11:18:15 +0000
ROA not after:            Sun 04 May 2025 10:18:15 +0000
asID:                     30036
IP address blocks:        2604:2d80:6780::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:65:83:e0:b0:97:ab:e7:d2:7b:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:18:15 2025 GMT
            Not After : May  4 10:18:15 2025 GMT
        Subject: CN=6e16eb26-7f8f-41fc-a72a-95cc2eb2642e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:3b:71:bf:4f:98:f6:43:d0:5a:1f:3b:72:
                    e3:16:a3:25:03:3c:25:d9:69:c5:34:8f:99:46:d8:
                    68:91:d1:44:16:89:50:16:b3:29:bb:a1:8e:6b:e7:
                    5f:93:1a:dd:5e:bc:f7:8b:8a:d0:16:49:a6:9f:82:
                    74:07:3b:c2:08:78:54:8d:da:5f:81:bc:50:7a:dd:
                    c9:98:75:8a:bf:fb:a2:2f:c3:55:d4:0a:5d:28:f3:
                    ba:8e:0e:ff:0d:8e:f0:43:c5:2e:c4:b2:e4:90:cf:
                    17:2f:98:a4:ed:c7:1f:58:90:2a:a9:96:9e:aa:b1:
                    d4:b5:ef:7b:18:d5:3c:69:36:30:b4:0a:0d:7a:81:
                    7f:c5:9e:70:4a:67:0e:c0:8a:0d:bd:d1:60:d0:7c:
                    ac:3d:fa:60:0b:9a:41:00:7a:36:a2:89:df:c5:67:
                    69:a5:18:7e:8c:5f:1c:62:94:d6:3c:3a:bf:41:4e:
                    17:d7:5f:34:f8:6d:40:bc:58:5d:d5:e4:9d:35:6b:
                    f6:10:17:86:31:e9:d1:d9:ea:c6:7c:f0:23:6e:0a:
                    9e:b7:d9:f8:99:33:a0:64:21:1a:40:0c:6d:24:9f:
                    5c:67:05:69:f5:83:7e:f7:12:58:9f:57:ce:c1:c8:
                    9a:ff:b9:3b:83:2e:13:ba:21:76:7d:3b:fb:65:10:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:09:18:81:65:21:48:4E:5C:4F:76:FF:12:FB:CD:E7:A2:E5:6B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8adf3074-63ff-3f38-878a-591890c3bb0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9b:54:a1:95:59:a2:c0:40:81:87:8e:88:c9:ba:39:39:a5:
         20:1c:25:59:39:cd:55:f3:8e:5c:e8:c7:7c:b2:d9:85:bc:47:
         fa:01:bd:ac:cf:df:5c:e9:b8:6b:dd:8d:92:47:06:b0:a7:ce:
         54:5c:ee:df:a5:e5:78:16:9b:fe:c6:b6:91:0d:0d:e2:62:91:
         7a:ec:ca:ad:c7:d8:96:80:e6:99:01:dd:07:54:4a:72:8d:46:
         c0:91:a0:9c:d8:20:c5:ae:40:46:2b:4d:44:00:e1:d4:59:51:
         fd:b9:f4:90:42:0d:db:30:c0:bc:15:7c:23:42:c7:99:09:94:
         eb:0e:0e:53:61:ed:13:44:30:b1:58:bf:6d:0c:16:4b:b9:f2:
         3d:fe:4e:fe:77:0d:d8:6c:a5:cb:02:fb:6e:42:db:09:1b:57:
         5d:d7:8e:87:7d:bb:49:a7:15:d9:71:1c:2b:d3:53:f8:f2:aa:
         91:0c:20:fc:78:86:11:81:6a:01:60:73:aa:9b:1e:66:77:c9:
         78:c9:7c:d7:f5:23:a0:ee:db:c5:00:65:1d:cc:df:34:61:0e:
         e9:99:07:c5:0c:4a:58:b6:73:a9:4d:95:c9:8b:74:9c:be:fb:
         69:3c:e0:bc:2a:85:9b:c0:b2:4e:9a:2a:25:68:85:9d:be:9e:
         ba:a3:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:30 2025 by rpki-client