Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4ce4a92-632a-38f1-b052-8bb88222707f.roa
File:                     c4ce4a92-632a-38f1-b052-8bb88222707f.roa (raw, json)
Hash identifier:          xz7qsEwnjCdZ574b2gTe3mFr3Xlh06w+LFITV75+cUk=
Subject key identifier:   0F:05:5D:36:37:7B:63:E1:21:BC:49:8C:CD:2A:B1:48:2A:EF:9F:5B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5811D189732FA25F19C1680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4ce4a92-632a-38f1-b052-8bb88222707f.roa
Signing time:             Tue 04 Feb 2025 14:01:17 +0000
ROA not before:           Tue 04 Feb 2025 14:01:17 +0000
ROA not after:            Mon 05 May 2025 13:01:17 +0000
asID:                     30036
IP address blocks:        2604:2d80:f480::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:1d:18:97:32:fa:25:f1:9c:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 14:01:17 2025 GMT
            Not After : May  5 13:01:17 2025 GMT
        Subject: CN=854ff0ef-0c52-42b2-9ce9-960408be7902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:16:3f:9f:1a:c7:c7:ba:11:a5:79:76:b7:
                    69:00:2a:27:11:1e:30:03:49:c8:0b:ea:f5:cb:b8:
                    3e:54:e2:80:cc:25:55:e3:58:02:b2:37:04:53:91:
                    a4:b0:1a:60:b2:cf:78:70:72:1c:63:f2:be:74:cf:
                    31:0c:7b:bc:88:c5:d5:e2:e0:48:c4:18:0c:83:26:
                    5c:03:36:b1:fa:19:57:11:5d:a1:7f:6f:11:68:f1:
                    68:fd:26:7d:08:05:ef:26:29:fd:6c:25:c6:05:5e:
                    09:df:78:39:96:80:27:53:0b:c8:f6:b3:6c:4b:73:
                    56:09:f2:7e:9f:27:0b:71:7b:72:cc:e8:a7:44:c6:
                    18:8f:88:94:cd:cf:30:1c:74:de:dc:09:cf:e9:cc:
                    5c:87:cd:ff:f0:73:1a:1a:94:95:38:ad:7f:39:d6:
                    e5:74:32:42:98:fd:1d:0f:3c:18:d4:53:8c:cb:dd:
                    a0:e0:54:55:37:94:2b:12:50:bc:e5:eb:7a:98:c1:
                    b8:01:e9:3f:53:8b:bc:8d:9a:4b:b5:20:4b:df:f7:
                    2d:b1:ce:44:f5:dd:a0:55:2c:b2:38:ed:84:3f:2f:
                    28:4b:36:99:35:45:73:52:a1:26:dc:3f:c3:29:b3:
                    49:ff:69:41:e5:f8:09:10:9b:18:ae:0c:60:f2:fe:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:05:5D:36:37:7B:63:E1:21:BC:49:8C:CD:2A:B1:48:2A:EF:9F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c4ce4a92-632a-38f1-b052-8bb88222707f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f480::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:03:76:f1:66:f4:a3:d6:97:bd:ed:2a:68:8b:e0:0b:9b:23:
         6c:55:a3:aa:25:1e:3c:fa:26:30:e3:4d:fd:f8:00:31:28:6c:
         10:ef:f8:b8:4d:3f:ef:b1:b8:39:d3:c4:20:46:15:8c:ab:ae:
         2c:13:2d:51:be:5c:5f:30:7b:cc:34:cd:a7:14:6e:66:85:8a:
         15:de:26:e4:da:5c:e5:d8:ab:5b:c3:dd:c0:8e:99:ae:94:4e:
         24:56:b8:74:29:97:ff:b8:6f:27:18:e6:2d:34:31:4f:c7:10:
         4f:06:fa:99:97:4a:6c:49:2d:cb:47:71:18:63:8c:f9:8d:5c:
         30:19:a7:ef:a0:21:55:36:b2:6b:94:93:26:ba:ba:5c:33:bb:
         a8:2f:35:59:08:68:02:1d:b6:a0:61:10:86:70:58:2d:20:87:
         d8:a2:73:f5:f2:30:bc:ff:0d:d5:41:b7:27:f6:39:94:af:44:
         85:6b:07:19:ca:0b:15:c2:23:7d:e7:06:18:e1:45:6e:8f:b3:
         a6:1c:e8:05:21:18:9f:e0:32:d0:37:47:1f:1d:2e:2c:41:cb:
         81:ab:6d:16:69:8a:a3:38:4a:48:9e:3a:4f:14:d2:e9:83:65:
         5f:a6:03:43:d9:14:6c:c4:4d:c1:14:45:9d:7b:76:ba:ad:6a:
         4c:dd:0e:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgR0YlzL6JfGcFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDE0MDExN1oXDTI1MDUwNTEzMDExN1owLzEtMCsGA1UEAxMk
ODU0ZmYwZWYtMGM1Mi00MmIyLTljZTktOTYwNDA4YmU3OTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquEWP58ax8e6EaV5drdpAConER4wA0nIC+r1
y7g+VOKAzCVV41gCsjcEU5GksBpgss94cHIcY/K+dM8xDHu8iMXV4uBIxBgMgyZc
Azax+hlXEV2hf28RaPFo/SZ9CAXvJin9bCXGBV4J33g5loAnUwvI9rNsS3NWCfJ+
nycLcXtyzOinRMYYj4iUzc8wHHTe3AnP6cxch83/8HMaGpSVOK1/OdbldDJCmP0d
DzwY1FOMy92g4FRVN5QrElC85et6mMG4Aek/U4u8jZpLtSBL3/ctsc5E9d2gVSyy
OO2EPy8oSzaZNUVzUqEm3D/DKbNJ/2lB5fgJEJsYrgxg8v6KeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA8FXTY3e2PhIbxJjM0qsUgq759bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzRjZTRhOTItNjMyYS0z
OGYxLWIwNTItOGJiODgyMjI3MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPSA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHYDdvFm9KPWl73tKmiL4AubI2xVo6olHjz6JjDjTf34ADEobBDv
+LhNP++xuDnTxCBGFYyrriwTLVG+XF8we8w0zacUbmaFihXeJuTaXOXYq1vD3cCO
ma6UTiRWuHQpl/+4bycY5i00MU/HEE8G+pmXSmxJLctHcRhjjPmNXDAZp++gIVU2
smuUkya6ulwzu6gvNVkIaAIdtqBhEIZwWC0gh9iic/XyMLz/DdVBtyf2OZSvRIVr
BxnKCxXCI33nBhjhRW6Ps6Yc6AUhGJ/gMtA3Rx8dLixBy4GrbRZpiqM4SkieOk8U
0umDZV+mA0PZFGzETcEURZ17drqtakzdDhU=
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:50:32 2025 by rpki-client