Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f01ac93e-2e9e-38ab-8b47-6ccc1be203e6.roa
File:                     f01ac93e-2e9e-38ab-8b47-6ccc1be203e6.roa (raw, json)
Hash identifier:          7nED75pdfIup3/0MM5Ob4CfTtylrDtj5CUFxdH/SxlY=
Subject key identifier:   DF:CE:7A:7B:6B:0B:CC:F6:12:C5:D5:8D:75:4E:F5:30:7A:A4:00:BC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858494BADC0182DE4AE30D8C16500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f01ac93e-2e9e-38ab-8b47-6ccc1be203e6.roa
Signing time:             Mon 24 Mar 2025 15:29:32 +0000
ROA not before:           Mon 24 Mar 2025 15:29:32 +0000
ROA not after:            Sun 22 Jun 2025 15:29:32 +0000
asID:                     30036
IP address blocks:        2604:2d80:e000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:ad:c0:18:2d:e4:ae:30:d8:c1:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 24 15:29:32 2025 GMT
            Not After : Jun 22 15:29:32 2025 GMT
        Subject: CN=794b4247-e22c-49df-a3d9-5351e033c0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:44:b6:7e:33:bb:14:80:ff:7d:ed:e3:18:
                    d9:ed:1c:65:87:dc:ec:86:c4:88:71:07:c0:45:b3:
                    60:b5:03:d9:4f:3b:4f:40:68:ba:57:ba:26:8b:75:
                    57:59:05:25:90:df:e1:62:4d:93:c1:59:9d:6e:54:
                    7b:14:ba:3a:a2:a7:0e:ef:f4:e0:1f:c2:a8:4e:af:
                    02:c8:4d:2e:9e:c4:34:14:0e:e1:1a:8f:d1:33:c7:
                    b1:64:b7:31:54:f6:09:34:46:fc:20:5a:7f:c5:c1:
                    68:1e:b1:c9:11:e8:0e:94:2f:fe:2a:c3:d5:1a:a1:
                    95:3a:b2:f9:6d:1a:99:07:48:c7:c6:76:a3:8d:9d:
                    53:9d:98:05:98:d3:ce:da:46:0f:19:92:98:fd:b3:
                    57:ef:81:7f:d2:aa:e7:38:b1:55:1e:96:0c:a1:b5:
                    45:68:f2:6c:3e:df:e1:99:6e:22:b3:a0:14:c4:fc:
                    79:35:f1:3b:f6:fe:c2:73:b8:5a:80:ee:53:f3:cb:
                    8b:2f:b0:ac:b8:10:91:d2:60:f5:e5:95:ae:55:a4:
                    66:10:1c:71:de:7e:62:bf:4c:c9:76:42:48:a3:ad:
                    fe:c3:cb:9c:18:55:bf:ff:e7:2b:0d:ba:dd:1e:12:
                    ad:10:02:7a:cc:b0:80:f8:99:97:ed:79:0f:6c:57:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CE:7A:7B:6B:0B:CC:F6:12:C5:D5:8D:75:4E:F5:30:7A:A4:00:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f01ac93e-2e9e-38ab-8b47-6ccc1be203e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6f:f6:5b:ef:30:07:fa:95:92:41:87:00:65:62:b4:8b:89:
         fa:fc:3d:d8:20:fe:c0:85:cb:f1:94:b6:10:1e:1b:ab:2c:a4:
         7f:0f:42:2f:9c:60:ef:2a:83:85:ce:13:81:8e:c8:3c:bb:be:
         58:8a:3e:c2:a2:8e:c5:64:c2:b6:d3:9e:5a:42:57:1e:82:fb:
         e3:72:20:e6:71:76:c9:47:9f:03:67:3b:6a:75:26:67:a8:58:
         7e:48:17:6c:de:8f:84:6b:9c:13:cf:be:72:9f:0d:fe:84:d9:
         38:97:46:ea:63:1c:59:78:1e:70:76:89:52:3c:6c:f2:dc:74:
         13:26:2b:43:c8:87:12:da:49:e5:c1:da:e8:4e:9e:2e:bf:bd:
         e6:be:ea:00:f3:6e:d8:6a:58:84:dd:b4:c7:ca:7a:b7:f1:02:
         37:65:df:03:7c:e8:61:ba:e4:cf:25:79:5a:95:4a:a2:42:14:
         30:ba:fb:23:a7:5b:04:27:c5:62:57:8a:7b:43:c6:fb:fb:28:
         67:17:39:b3:8f:af:e7:3d:5c:57:a4:d3:f5:47:da:47:e7:c2:
         28:a8:97:f2:9f:d9:d2:31:2f:54:83:ba:ac:05:80:d6:2c:71:
         1a:b5:df:7c:8d:d5:d7:8b:3a:49:a3:0d:1f:56:04:1f:56:07:
         7c:15:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:29 2025 by rpki-client