Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bee56e3f-a533-30b8-aa13-9fbeab18c069.roa
File:                     bee56e3f-a533-30b8-aa13-9fbeab18c069.roa (raw, json)
Hash identifier:          XKYREGy+V3M7LSafZzVT2B/7vNGGWB5pRl9RJ3qPtmw=
Subject key identifier:   CA:F9:FB:0F:08:E1:50:B8:9D:39:15:6F:4E:27:A3:FA:7D:93:3E:CF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848B737C256D839A9F82B0A5900
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bee56e3f-a533-30b8-aa13-9fbeab18c069.roa
Signing time:             Thu 30 Jan 2025 11:12:10 +0000
ROA not before:           Thu 30 Jan 2025 11:12:10 +0000
ROA not after:            Wed 30 Apr 2025 10:12:10 +0000
asID:                     30036
IP address blocks:        2604:2d80:1080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:37:c2:56:d8:39:a9:f8:2b:0a:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jan 30 11:12:10 2025 GMT
            Not After : Apr 30 10:12:10 2025 GMT
        Subject: CN=d6cd6f34-5c92-4a42-9f8f-9768ff137ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9a:39:19:ea:a4:38:d2:b0:e1:05:83:1d:0f:
                    a1:a3:d3:cc:98:27:3a:41:ce:5a:7a:95:dd:b8:4a:
                    08:d9:68:0a:5f:18:da:31:42:5e:2e:95:6b:f2:88:
                    48:ea:ab:6c:e2:66:b2:b1:7d:40:84:8e:2d:15:ea:
                    17:90:2e:3b:b7:44:23:63:8c:98:4d:fd:45:02:15:
                    28:22:aa:1e:2c:70:06:ac:9f:5e:ad:1b:1e:6e:82:
                    6b:94:f2:df:0a:9b:74:03:60:67:8f:09:3d:15:5b:
                    25:9a:0e:de:05:c7:c0:7e:f7:0e:16:4e:2a:c9:50:
                    bb:20:32:9d:1a:4f:a9:cc:78:37:03:07:51:20:fa:
                    33:04:de:30:99:70:a8:4b:45:fb:10:34:c8:41:7a:
                    67:80:73:84:0a:22:55:e4:82:d2:d8:b5:55:d3:d4:
                    89:7b:1c:eb:c5:26:8d:17:18:15:c9:1e:00:d4:06:
                    4c:13:ee:8a:ca:47:81:43:2a:97:ae:84:c6:7a:5b:
                    e2:77:d1:e3:c2:39:ac:ff:02:41:54:e0:de:6a:b9:
                    6a:90:e2:02:8a:01:b6:26:ca:3a:bc:51:1a:07:4f:
                    a5:d4:39:ed:13:62:0e:82:5b:6d:c1:d6:99:bf:36:
                    30:93:40:53:19:9b:95:7b:58:20:28:5f:40:ad:d7:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F9:FB:0F:08:E1:50:B8:9D:39:15:6F:4E:27:A3:FA:7D:93:3E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bee56e3f-a533-30b8-aa13-9fbeab18c069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:e3:d6:7c:62:cc:f4:3c:b2:a0:96:c8:b6:51:e9:59:23:69:
         7f:5a:ef:0d:a7:63:b7:ac:55:10:c2:25:c3:d3:1e:07:49:06:
         19:6f:7f:fb:35:28:c2:da:82:d4:2c:42:02:16:c8:f6:37:00:
         4d:ed:08:1e:55:0e:35:c0:d3:44:c8:75:6a:8c:80:a5:c2:f6:
         cd:ef:0b:fa:3c:3a:91:37:f2:7d:9d:20:13:1b:31:d1:bb:16:
         70:da:78:21:48:89:56:39:74:68:4d:de:62:e6:75:27:1a:85:
         67:61:82:b0:1c:53:f3:f3:ea:41:ca:00:0d:cc:e8:4f:d3:7e:
         5d:7d:64:b4:d7:c9:02:6f:9a:4f:91:05:d8:39:4c:1f:f8:1d:
         54:9e:48:41:a1:66:c1:18:75:2c:d0:2a:38:1c:47:71:cd:b4:
         85:2e:50:86:b7:e5:77:67:ed:d4:af:7e:3c:4c:be:52:86:73:
         30:34:4e:84:58:6d:a2:89:f9:10:37:66:cc:c1:d8:53:1e:0a:
         c0:ca:7f:63:a1:c4:f3:39:bf:18:56:8f:bc:c5:c1:62:69:a8:
         58:09:e0:1f:49:de:8c:f8:a6:f2:59:1d:c7:18:5b:2b:81:0a:
         85:b1:6b:14:7b:29:a3:2d:ec:ae:05:f2:4b:ee:a4:68:df:5f:
         66:00:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:10 2025 by rpki-client