Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f161614a-9777-3973-a18f-0c63187faf19.roa
File:                     f161614a-9777-3973-a18f-0c63187faf19.roa (raw, json)
Hash identifier:          JcWjYULGkYa84YoDC1D06iaxSEOUC3TGicDQRZywTrk=
Subject key identifier:   C9:1B:E0:AA:24:41:36:53:87:E4:40:E6:42:9E:18:31:60:71:51:A4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5350A1278DED890E225BBA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f161614a-9777-3973-a18f-0c63187faf19.roa
Signing time:             Tue 04 Feb 2025 11:28:00 +0000
ROA not before:           Tue 04 Feb 2025 11:28:00 +0000
ROA not after:            Mon 05 May 2025 10:28:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:e980::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:35:0a:12:78:de:d8:90:e2:25:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:28:00 2025 GMT
            Not After : May  5 10:28:00 2025 GMT
        Subject: CN=a578ff0d-0038-4e59-a2f2-b218ad8fa0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:10:86:6a:5e:a0:9a:9b:f9:2b:8e:ea:7b:
                    66:76:ec:32:df:5c:61:6e:2a:1e:07:95:38:74:93:
                    c9:76:9a:ce:a6:34:2e:5a:56:28:b4:b0:1c:ca:4a:
                    a8:86:08:e6:60:66:af:31:4a:d4:50:32:75:47:c0:
                    e1:c9:db:ff:64:90:ae:89:64:dc:fb:9a:c0:0d:e9:
                    59:46:f2:5b:a7:c9:29:db:0f:a4:2e:25:b5:5e:fc:
                    c3:7d:0c:fd:ff:70:fc:3e:9e:61:94:28:19:f5:f1:
                    2e:96:a6:9d:dc:01:1c:fe:04:16:95:58:d9:2b:74:
                    05:1e:81:df:25:7e:39:c1:45:70:33:3f:38:8d:6a:
                    22:ff:fe:6b:aa:54:50:ae:d6:01:a4:07:1d:e5:29:
                    9e:d3:56:f8:b9:ec:0a:c2:4f:d8:d7:de:6e:b8:6e:
                    42:a4:98:38:32:53:59:26:a6:44:51:aa:bb:62:d2:
                    f5:c2:af:79:8a:08:73:03:e8:bb:42:d5:38:31:4b:
                    da:af:b4:8a:eb:4a:62:e3:1d:21:02:a2:ca:37:87:
                    29:7a:e3:87:bf:ac:b8:2f:22:14:6d:21:07:06:1d:
                    26:f2:cf:89:17:05:ab:52:31:f2:3b:22:f3:c7:cb:
                    08:0a:6e:de:b9:41:2d:ab:be:a5:34:c5:f4:8d:8c:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1B:E0:AA:24:41:36:53:87:E4:40:E6:42:9E:18:31:60:71:51:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f161614a-9777-3973-a18f-0c63187faf19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ca:10:1e:30:91:0c:bd:aa:26:d8:53:19:c7:c0:9d:02:22:
         21:77:4a:41:fc:b7:e9:44:55:9d:ff:92:a6:4c:42:17:25:6d:
         db:5e:47:69:b5:d2:15:dc:98:8c:27:b4:30:f3:be:e8:64:e8:
         4c:c2:7f:66:ac:af:5a:b1:86:b1:1b:ba:e2:90:30:61:a7:ef:
         c7:f6:fe:75:60:90:b1:67:39:53:cf:15:63:66:86:96:55:91:
         0f:c5:94:8a:5a:58:11:a8:46:6d:a0:88:13:03:84:6e:05:4f:
         5d:e0:90:8d:4a:3b:de:41:72:23:01:b0:6c:92:80:5b:30:30:
         3c:18:d3:88:ab:18:8c:4d:27:60:b0:f2:61:49:6c:8b:ef:c6:
         c3:2f:da:60:eb:39:d7:68:2b:a1:48:25:b1:eb:62:25:e0:dd:
         be:76:33:f0:19:f0:7b:f4:6b:5e:6c:fe:1a:18:8f:32:41:c5:
         d6:14:2a:9f:57:bb:a2:22:47:cd:de:81:9d:c4:ce:58:e6:57:
         e9:f2:d2:fa:0f:b3:0a:3c:47:61:74:b9:fd:da:96:a2:e8:45:
         b1:1d:f3:8c:82:98:2d:2d:fc:f1:95:b6:61:50:24:b9:c2:7b:
         63:95:44:d9:d7:53:ad:aa:80:08:7a:f8:1b:43:3f:fb:e6:c2:
         79:81:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:25 2025 by rpki-client