Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/adefb7ec-87a9-30ae-8f53-98d829d91024.roa
File:                     adefb7ec-87a9-30ae-8f53-98d829d91024.roa (raw, json)
Hash identifier:          Vx6yYeEOXKp0iWacfAxCExAZyb79pjVlPI2VBulvUiw=
Subject key identifier:   EC:63:AA:BB:86:A9:24:7B:23:67:1A:FB:EC:7F:E0:D4:C3:EF:1E:7E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848B7382E82FEF116B3DE790F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/adefb7ec-87a9-30ae-8f53-98d829d91024.roa
Signing time:             Thu 30 Jan 2025 11:13:01 +0000
ROA not before:           Thu 30 Jan 2025 11:13:01 +0000
ROA not after:            Wed 30 Apr 2025 10:13:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:6e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:38:2e:82:fe:f1:16:b3:de:79:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 11:13:01 2025 GMT
            Not After : Apr 30 10:13:01 2025 GMT
        Subject: CN=4d652772-da58-4630-882c-3705fead0682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f7:43:94:f4:fd:28:50:d2:66:ed:ae:65:c3:
                    b6:66:77:de:cf:7a:80:41:43:6a:17:df:67:9a:1a:
                    0f:65:4b:8b:db:9f:20:88:1e:75:40:0a:ae:ae:9e:
                    50:76:b7:9f:82:64:f1:3f:cb:bf:9d:11:21:e1:f6:
                    0a:51:51:2f:36:c0:38:25:e8:b4:ac:11:ef:55:67:
                    d6:08:5d:e1:46:39:43:a8:56:12:b0:25:b3:8d:ea:
                    a2:04:9e:6f:a2:ec:f7:e0:25:72:60:d8:29:9f:0b:
                    77:14:f4:67:50:f4:a2:85:ba:6a:37:9a:cb:15:fe:
                    1b:06:50:55:6a:f4:71:a5:9e:43:b6:2d:2b:c5:ca:
                    c3:24:1a:19:a9:af:df:6a:70:d0:85:bb:b4:cf:14:
                    e3:9c:a7:3f:13:4b:62:5b:1a:6c:c5:51:d0:23:04:
                    f7:34:2c:b9:4a:ff:09:e4:6c:1f:19:1d:ee:90:83:
                    c5:4e:42:9c:65:07:0d:5b:48:d2:48:ac:b9:53:52:
                    e5:c9:a8:d3:4d:49:32:d2:5b:08:26:32:cf:1b:ef:
                    15:b4:ab:98:73:c1:17:fd:cc:35:3b:9d:59:ee:ab:
                    f2:92:79:3f:0c:44:83:a5:51:33:a3:d6:17:e5:f6:
                    19:6c:cf:7a:72:a9:80:4b:d9:d9:6a:25:60:f7:11:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:63:AA:BB:86:A9:24:7B:23:67:1A:FB:EC:7F:E0:D4:C3:EF:1E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/adefb7ec-87a9-30ae-8f53-98d829d91024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:6e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:35:68:22:94:72:b1:57:46:27:4f:74:a5:d0:b9:a3:56:08:
         8a:f2:ee:cf:bb:48:b9:1b:ea:35:b9:7e:81:fa:7c:2c:af:ff:
         79:ab:ee:f0:d5:08:bf:3b:aa:bf:73:5a:2e:8f:fa:0a:b1:96:
         cf:1d:d8:b4:97:6e:d1:48:96:97:46:a1:62:29:8e:58:bf:88:
         bc:5a:5e:46:1f:90:19:92:70:0b:5c:0d:36:21:41:d9:af:04:
         9f:04:96:ef:ac:c9:90:42:d9:2e:66:8b:f5:c7:98:d2:de:07:
         d2:ca:bf:9e:9a:5b:86:7b:0f:75:fe:1f:e8:5f:d3:1f:a5:56:
         9d:79:40:15:d6:c9:3e:08:b9:11:73:7a:26:1b:d4:79:ef:f7:
         0e:06:33:b7:c2:4d:d4:0d:60:e7:58:43:d6:65:a1:21:cd:34:
         95:1e:c8:97:c7:97:7c:81:f9:af:9a:8a:50:05:b5:d1:99:14:
         40:72:98:33:b4:25:9e:82:bf:79:45:03:75:1a:7f:27:70:81:
         89:d4:00:82:49:dd:92:d4:8b:1e:2c:7a:fc:d5:c3:84:8c:64:
         36:d8:b5:e2:f7:b2:8f:40:de:18:78:2d:0c:2c:aa:f4:a0:65:
         fb:e8:0a:18:d5:2b:61:47:7b:b8:d4:01:a0:93:cc:6b:06:4e:
         d1:1e:fd:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi3OC6C/vEWs955DwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDEzMDExMTMwMVoXDTI1MDQzMDEwMTMwMVowLzEtMCsGA1UEAxMk
NGQ2NTI3NzItZGE1OC00NjMwLTg4MmMtMzcwNWZlYWQwNjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/dDlPT9KFDSZu2uZcO2Znfez3qAQUNqF99n
mhoPZUuL258giB51QAqurp5QdrefgmTxP8u/nREh4fYKUVEvNsA4Jei0rBHvVWfW
CF3hRjlDqFYSsCWzjeqiBJ5vouz34CVyYNgpnwt3FPRnUPSihbpqN5rLFf4bBlBV
avRxpZ5Dti0rxcrDJBoZqa/fanDQhbu0zxTjnKc/E0tiWxpsxVHQIwT3NCy5Sv8J
5GwfGR3ukIPFTkKcZQcNW0jSSKy5U1LlyajTTUky0lsIJjLPG+8VtKuYc8EX/cw1
O51Z7qvyknk/DESDpVEzo9YX5fYZbM96cqmAS9nZaiVg9xFYNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOxjqruGqSR7I2ca++x/4NTD7x5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWRlZmI3ZWMtODdhOS0z
MGFlLThmNTMtOThkODI5ZDkxMDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgG6A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAU1aCKUcrFXRidPdKXQuaNWCIry7s+7SLkb6jW5foH6fCyv/3mr
7vDVCL87qr9zWi6P+gqxls8d2LSXbtFIlpdGoWIpjli/iLxaXkYfkBmScAtcDTYh
QdmvBJ8Elu+syZBC2S5mi/XHmNLeB9LKv56aW4Z7D3X+H+hf0x+lVp15QBXWyT4I
uRFzeiYb1Hnv9w4GM7fCTdQNYOdYQ9ZloSHNNJUeyJfHl3yB+a+ailAFtdGZFEBy
mDO0JZ6Cv3lFA3UafydwgYnUAIJJ3ZLUix4sevzVw4SMZDbYteL3so9A3hh4LQws
qvSgZfvoChjVK2FHe7jUAaCTzGsGTtEe/YI=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:58 2025 by rpki-client