Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9566cf39-f779-3c2f-b70e-2e14de576061.roa
File:                     9566cf39-f779-3c2f-b70e-2e14de576061.roa (raw, json)
Hash identifier:          ER8PAQtna3lmUHgzRPIXj6mL5D3nJk2z75PRM2iJYcI=
Subject key identifier:   F7:FB:19:9C:CD:64:6E:CE:2B:BC:13:49:51:D0:22:92:3F:D5:4B:90
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848E1D587D3EA29C40ED4B11BC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9566cf39-f779-3c2f-b70e-2e14de576061.roa
Signing time:             Fri 14 Feb 2025 17:34:00 +0000
ROA not before:           Fri 14 Feb 2025 17:34:00 +0000
ROA not after:            Thu 15 May 2025 16:34:00 +0000
asID:                     30036
IP address blocks:        2604:2d80::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:d5:87:d3:ea:29:c4:0e:d4:b1:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 14 17:34:00 2025 GMT
            Not After : May 15 16:34:00 2025 GMT
        Subject: CN=c1ae2ace-c1fa-4a72-a5ea-19384db4e66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:b0:eb:c1:a5:94:d4:4f:a4:49:19:5d:ba:
                    f2:d3:69:90:30:c8:11:c2:4e:ee:00:f9:3f:09:7a:
                    1c:41:b1:a3:3e:2b:07:8e:2f:72:90:ba:9e:0a:19:
                    e3:ce:28:8a:96:1d:7b:89:59:aa:8b:e4:33:bf:aa:
                    30:22:a8:fc:3a:b2:87:38:2a:4a:2d:30:cd:46:85:
                    5d:8a:1a:64:06:90:8e:cd:c0:21:ec:bc:3c:44:9c:
                    de:a0:6a:df:67:6b:d5:05:c8:61:58:a0:ac:7f:81:
                    6d:67:50:46:11:75:b7:01:a5:59:cf:a7:18:bf:d9:
                    69:e2:58:31:4f:83:ca:df:c1:8a:76:2e:94:18:f7:
                    e9:b8:02:45:11:c4:d9:53:0c:7c:f2:a9:77:64:3f:
                    51:1c:63:dc:e0:23:fe:81:12:9e:3f:d8:f6:c2:2d:
                    e5:bb:81:8b:53:fd:af:9e:bd:73:8a:0a:5f:78:9c:
                    cd:14:58:f0:27:13:e9:4d:47:b0:46:0c:78:b0:a3:
                    b9:cc:8c:bf:b8:e9:50:fa:22:0e:27:c2:36:6a:62:
                    95:7d:c6:83:ed:f6:08:9b:8d:f5:14:ad:16:03:3e:
                    bc:7c:7f:0a:00:8f:20:48:30:05:50:55:c8:41:07:
                    a2:9c:fd:f4:82:26:d8:d1:97:d0:08:cb:d7:33:b8:
                    bf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FB:19:9C:CD:64:6E:CE:2B:BC:13:49:51:D0:22:92:3F:D5:4B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9566cf39-f779-3c2f-b70e-2e14de576061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c3:54:58:d2:d0:f8:e8:20:27:f6:bf:aa:6d:5a:b6:b1:78:
         8d:9d:48:bf:d6:a1:b5:20:db:c4:66:3d:59:d9:53:3a:8d:79:
         ba:12:40:15:b8:ff:31:77:56:c3:c1:02:40:27:7c:a4:37:d6:
         05:d3:78:9f:0f:fd:2a:76:24:62:a8:68:fd:16:79:5d:ad:ca:
         e4:1f:0e:6d:a9:52:26:02:6f:49:c2:32:36:d7:56:a5:bc:b1:
         23:76:75:d3:c4:d4:ca:2f:19:27:16:b2:c8:4a:c3:d6:51:ae:
         2e:bc:1a:37:7e:63:6c:a1:59:72:f6:0a:99:19:6d:f3:79:1e:
         b5:f9:b0:da:43:b9:f3:5e:df:db:64:e3:e7:81:d3:a4:60:7f:
         a8:c6:81:95:93:94:98:ca:5d:01:d2:a8:52:4b:3e:50:dd:46:
         b4:09:f0:b7:dd:af:e6:38:42:5f:77:5e:72:d8:27:d8:d1:ae:
         d1:ef:90:02:30:a0:3a:c5:b8:d2:a4:23:b3:d9:bb:a9:b7:b8:
         ce:15:21:83:98:2c:03:c0:6c:9a:23:db:0f:af:98:f6:a1:f0:
         96:8a:f7:57:eb:b5:06:8b:cd:5f:d8:51:11:a0:58:be:b3:cb:
         98:65:f7:ab:58:55:f7:11:58:97:5f:84:27:b6:21:28:23:12:
         e3:1a:80:8e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjh1YfT6inEDtSxG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIxNDE3MzQwMFoXDTI1MDUxNTE2MzQwMFowLzEtMCsGA1UEAxMk
YzFhZTJhY2UtYzFmYS00YTcyLWE1ZWEtMTkzODRkYjRlNjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmiw68GllNRPpEkZXbry02mQMMgRwk7uAPk/
CXocQbGjPisHji9ykLqeChnjziiKlh17iVmqi+Qzv6owIqj8OrKHOCpKLTDNRoVd
ihpkBpCOzcAh7Lw8RJzeoGrfZ2vVBchhWKCsf4FtZ1BGEXW3AaVZz6cYv9lp4lgx
T4PK38GKdi6UGPfpuAJFEcTZUwx88ql3ZD9RHGPc4CP+gRKeP9j2wi3lu4GLU/2v
nr1zigpfeJzNFFjwJxPpTUewRgx4sKO5zIy/uOlQ+iIOJ8I2amKVfcaD7fYIm431
FK0WAz68fH8KAI8gSDAFUFXIQQeinP30gibY0ZfQCMvXM7i/EQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPf7GZzNZG7OK7wTSVHQIpI/1UuQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTU2NmNmMzktZjc3OS0z
YzJmLWI3MGUtMmUxNGRlNTc2MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMsNUWNLQ+OggJ/a/qm1atrF4jZ1Iv9ahtSDbxGY9WdlTOo15uhJA
Fbj/MXdWw8ECQCd8pDfWBdN4nw/9KnYkYqho/RZ5Xa3K5B8ObalSJgJvScIyNtdW
pbyxI3Z108TUyi8ZJxayyErD1lGuLrwaN35jbKFZcvYKmRlt83ketfmw2kO5817f
22Tj54HTpGB/qMaBlZOUmMpdAdKoUks+UN1GtAnwt92v5jhCX3dectgn2NGu0e+Q
AjCgOsW40qQjs9m7qbe4zhUhg5gsA8BsmiPbD6+Y9qHwlor3V+u1BovNX9hREaBY
vrPLmGX3q1hV9xFYl1+EJ7YhKCMS4xqAjg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:09 2025 by rpki-client