Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3f71a01-a40d-3dd8-bd40-2639f6ad6ea2.roa
File:                     e3f71a01-a40d-3dd8-bd40-2639f6ad6ea2.roa (raw, json)
Hash identifier:          U7hwEBeo8u6LLVoilXfkU2vyJ24G20mvKODYdJ0d0iA=
Subject key identifier:   66:08:A7:9D:6C:F2:05:72:F7:E3:15:BF:56:4F:60:AF:3F:CD:17:2A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849134F8B86619A370B90E20D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3f71a01-a40d-3dd8-bd40-2639f6ad6ea2.roa
Signing time:             Tue 04 Mar 2025 10:54:27 +0000
ROA not before:           Tue 04 Mar 2025 10:54:27 +0000
ROA not after:            Mon 02 Jun 2025 09:54:27 +0000
asID:                     30036
IP address blocks:        2604:2d80:7400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:4f:8b:86:61:9a:37:0b:90:e2:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  4 10:54:27 2025 GMT
            Not After : Jun  2 09:54:27 2025 GMT
        Subject: CN=43d4267f-6404-4a94-ad40-92f0fb639710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:39:df:d5:cb:da:93:1a:dc:b0:46:45:5a:
                    96:ae:6a:b8:07:87:1c:e9:3c:18:54:21:68:86:8c:
                    d0:e5:82:c4:6d:b0:3f:ec:2b:1e:ff:7a:c0:92:e1:
                    8c:af:9b:1d:1a:f1:98:cd:c8:3d:b9:44:3f:17:89:
                    7a:56:2c:dd:cf:ec:5d:cb:22:db:5a:c8:df:7a:54:
                    57:23:83:3e:d2:e4:b6:4f:38:d9:34:84:c5:3e:63:
                    d2:2e:bb:90:77:96:7b:0d:d2:6b:44:5d:aa:bb:9e:
                    3d:bd:63:70:b2:45:4f:4d:3a:32:b4:b8:25:62:c2:
                    50:f2:ea:d0:34:66:b2:e9:f1:7a:d5:9f:48:23:70:
                    7e:57:84:ff:dc:d4:6f:2e:44:16:16:03:77:b2:3e:
                    c0:9c:19:c0:4a:ba:af:74:ad:84:ee:61:44:49:a1:
                    1b:7d:e9:80:b6:67:c0:21:ba:3e:cd:5c:a6:ae:37:
                    11:d9:fd:c1:6c:88:22:b0:e3:ce:79:06:1c:61:b9:
                    09:07:38:21:7c:8e:7a:6b:90:91:f0:f3:93:ac:a4:
                    30:59:2f:10:7e:72:87:e9:c2:ff:46:79:5d:71:04:
                    3e:db:2d:66:e8:c2:d8:ab:89:a7:fc:19:ec:7a:75:
                    ae:ca:02:a9:d3:d7:0f:4f:d1:a1:75:2a:a1:9d:50:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:08:A7:9D:6C:F2:05:72:F7:E3:15:BF:56:4F:60:AF:3F:CD:17:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3f71a01-a40d-3dd8-bd40-2639f6ad6ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:72:d4:aa:09:b5:c4:a9:7c:6d:14:cb:27:99:16:ff:8b:08:
         8b:d9:17:80:4f:bc:fb:54:26:56:5b:00:36:d8:64:5b:d5:95:
         3e:34:e4:37:7d:6b:c4:08:1d:61:b7:b5:a9:6f:aa:4b:b2:9d:
         11:01:83:0c:79:ce:f2:15:e3:c3:8e:d3:37:5f:f0:c8:d7:fc:
         4d:26:30:bb:38:20:1b:03:ef:8e:d6:e4:47:e2:ad:69:25:1d:
         85:c9:93:0d:2e:96:7c:97:34:c1:02:99:8f:21:0b:8f:76:d2:
         08:3c:fb:41:d3:86:95:7e:57:f3:59:33:62:8b:61:e9:71:59:
         3c:74:c8:1e:5b:ac:03:db:de:42:a5:1e:61:e9:27:bc:67:37:
         f0:90:a2:14:c3:dd:07:7a:aa:26:9a:67:c7:3e:02:68:77:c8:
         53:ea:6e:17:44:1c:56:81:d3:05:5f:56:e3:39:cd:19:db:1a:
         7b:91:aa:4a:7f:fe:3f:c4:b5:69:c3:75:2d:55:bc:a9:1a:4d:
         13:b3:f4:07:a0:5e:9c:cd:87:b2:2a:e1:10:35:20:35:0c:0c:
         66:42:aa:f8:de:d5:02:2f:13:57:2c:88:9a:ef:05:53:f1:31:
         72:e5:89:3e:57:dc:7b:9f:f5:82:5c:13:49:1e:7d:89:b8:ea:
         a4:29:a2:c2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkTT4uGYZo3C5DiDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDMwNDEwNTQyN1oXDTI1MDYwMjA5NTQyN1owLzEtMCsGA1UEAxMk
NDNkNDI2N2YtNjQwNC00YTk0LWFkNDAtOTJmMGZiNjM5NzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUY539XL2pMa3LBGRVqWrmq4B4cc6TwYVCFo
hozQ5YLEbbA/7Cse/3rAkuGMr5sdGvGYzcg9uUQ/F4l6Vizdz+xdyyLbWsjfelRX
I4M+0uS2TzjZNITFPmPSLruQd5Z7DdJrRF2qu549vWNwskVPTToytLglYsJQ8urQ
NGay6fF61Z9II3B+V4T/3NRvLkQWFgN3sj7AnBnASrqvdK2E7mFESaEbfemAtmfA
Ibo+zVymrjcR2f3BbIgisOPOeQYcYbkJBzghfI56a5CR8POTrKQwWS8QfnKH6cL/
RnldcQQ+2y1m6MLYq4mn/BnsenWuygKp09cPT9GhdSqhnVDd8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGYIp51s8gVy9+MVv1ZPYK8/zRcqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTNmNzFhMDEtYTQwZC0z
ZGQ4LWJkNDAtMjYzOWY2YWQ2ZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgHQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAN3LUqgm1xKl8bRTLJ5kW/4sIi9kXgE+8+1QmVlsANthkW9WVPjTk
N31rxAgdYbe1qW+qS7KdEQGDDHnO8hXjw47TN1/wyNf8TSYwuzggGwPvjtbkR+Kt
aSUdhcmTDS6WfJc0wQKZjyELj3bSCDz7QdOGlX5X81kzYoth6XFZPHTIHlusA9ve
QqUeYeknvGc38JCiFMPdB3qqJppnxz4CaHfIU+puF0QcVoHTBV9W4znNGdsae5Gq
Sn/+P8S1acN1LVW8qRpNE7P0B6BenM2HsirhEDUgNQwMZkKq+N7VAi8TVyyImu8F
U/ExcuWJPlfce5/1glwTSR59ibjqpCmiwg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:20 2025 by rpki-client