Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1a76d19-77f7-3c7c-bbb1-b217ccdc19d2.roa
File:                     b1a76d19-77f7-3c7c-bbb1-b217ccdc19d2.roa (raw, json)
Hash identifier:          c4EegOeH5+bvucf5Fy05spQAoOggtgoSP/viHC+NRE0=
Subject key identifier:   4F:2F:11:34:A8:B5:08:DB:D6:6C:58:CA:D0:86:C3:41:4A:8B:9F:CA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C2653FA85F65DCAFAE751200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1a76d19-77f7-3c7c-bbb1-b217ccdc19d2.roa
Signing time:             Mon 03 Feb 2025 11:17:43 +0000
ROA not before:           Mon 03 Feb 2025 11:17:43 +0000
ROA not after:            Sun 04 May 2025 10:17:43 +0000
asID:                     30036
IP address blocks:        2604:2d80:2e80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:65:3f:a8:5f:65:dc:af:ae:75:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:17:43 2025 GMT
            Not After : May  4 10:17:43 2025 GMT
        Subject: CN=b4d2af3c-c567-44a1-9615-b989d42f758b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:fc:33:72:a4:68:61:60:6b:0f:e8:02:3a:
                    8e:1d:8d:e8:0b:0e:36:77:bb:40:3c:ac:9f:dd:85:
                    74:86:69:4b:b5:7a:0b:f1:f9:1f:b1:4b:a8:5f:2b:
                    2a:02:ce:a9:1b:84:70:cf:8a:6b:19:6f:fe:be:b5:
                    21:1e:8a:fe:24:c4:fb:8b:92:d9:0d:6a:a8:13:f8:
                    c9:07:95:70:3f:3e:b2:9f:32:b7:42:c8:74:8a:29:
                    28:a7:31:27:bb:b5:98:ea:c9:42:3f:37:31:1d:29:
                    f5:04:03:ad:08:b5:f5:d7:27:16:5f:94:cb:f4:9e:
                    24:cd:d4:62:82:48:c8:d0:a8:74:6d:e0:ba:7e:59:
                    93:37:a2:bd:a8:2c:7e:8d:40:04:74:ff:b7:fb:e5:
                    dc:58:1a:57:b6:40:44:da:7f:96:51:ea:81:4e:d1:
                    e1:fa:a2:3b:29:6f:de:0b:fc:ac:40:81:b9:d2:c9:
                    47:97:e1:af:90:c1:6a:55:cd:f0:9c:08:f2:1f:1c:
                    2f:8d:21:75:1a:1a:6a:cb:37:81:14:30:3c:90:a1:
                    67:ef:cf:02:86:ea:85:3c:2c:05:75:47:9a:ac:d2:
                    98:b5:d5:47:d7:df:94:19:a1:c1:33:bb:fe:79:ac:
                    72:3b:08:28:0e:19:b8:cb:5b:18:ec:cb:66:80:67:
                    de:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2F:11:34:A8:B5:08:DB:D6:6C:58:CA:D0:86:C3:41:4A:8B:9F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1a76d19-77f7-3c7c-bbb1-b217ccdc19d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2e80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:04:a8:9c:b7:74:9b:8a:8a:fc:94:ec:05:d2:3a:90:4a:84:
         e2:52:4a:3c:9d:a9:88:c5:2d:61:b8:51:b6:79:25:73:28:e6:
         69:d3:78:99:2e:0f:7f:4b:16:fc:4a:d2:59:c2:06:7c:ea:69:
         00:43:71:1c:e4:e8:3f:2e:11:2d:fb:bd:a6:b1:33:c8:22:f9:
         42:e5:1f:5c:ce:fa:59:98:1b:59:fe:42:0b:0c:57:ed:49:cf:
         89:f2:ff:a6:22:a3:ef:5b:72:f7:b4:f7:cd:e6:82:99:e0:83:
         94:f1:e7:c0:33:6d:1e:00:9b:e4:d4:0c:a8:27:8c:49:c5:d0:
         c9:2e:2a:61:75:5c:e3:a2:91:f0:51:7b:b6:f8:08:1e:0d:8f:
         5a:08:34:a6:40:cc:5c:25:8c:ff:b4:26:7b:03:23:e0:ec:7d:
         93:f7:8f:f1:6d:7c:64:ac:96:0c:e5:49:b6:9b:58:1c:a6:d8:
         ef:b1:72:d8:d7:3c:77:54:5a:d2:de:5d:63:69:59:99:ea:ca:
         de:1a:18:a1:bf:ad:aa:08:9b:2d:f9:53:4d:71:be:92:03:8b:
         e9:f6:28:0d:9c:f6:ee:4a:86:c8:f2:f5:31:03:7a:9d:dd:4c:
         63:9b:6b:1e:10:22:6c:3f:7a:aa:e7:af:59:17:7d:bc:e5:cd:
         d2:a0:ab:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:40 2025 by rpki-client