Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa
File:                     f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa (raw, json)
Hash identifier:          77/LLFuAnlewSEoAqF0W/s0LOdSQYd/3Pq8H+13IOgI=
Subject key identifier:   BD:21:26:57:D9:86:76:94:EE:A2:B8:94:D7:E3:F3:3D:BD:DB:66:E1
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C534A4E8B11E8037AB3A0180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa
Signing time:             Tue 04 Feb 2025 11:27:12 +0000
ROA not before:           Tue 04 Feb 2025 11:27:12 +0000
ROA not after:            Mon 05 May 2025 10:27:12 +0000
asID:                     30036
IP address blocks:        2604:2d80:1800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:34:a4:e8:b1:1e:80:37:ab:3a:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 11:27:12 2025 GMT
            Not After : May  5 10:27:12 2025 GMT
        Subject: CN=bfa31297-e825-4b20-9225-4293f670a41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:d4:a0:8b:67:b7:a4:f5:48:8b:9d:a9:ad:
                    6f:33:12:15:b8:8f:80:01:4e:e7:e5:87:69:ab:8d:
                    a5:d3:ed:2e:6f:c3:55:ac:a6:f7:05:99:66:7e:12:
                    10:7e:b7:90:bc:da:d7:0c:45:8f:9c:36:de:97:f6:
                    6f:f7:b1:7a:42:0b:5f:96:e5:d7:38:77:cb:f5:a9:
                    ce:a9:67:31:64:62:d5:14:6e:68:b2:88:c1:3a:fa:
                    f9:b7:b8:dd:78:1b:be:ee:88:6a:ab:6c:0e:ba:c9:
                    4f:63:85:ce:2b:62:2a:e2:01:9b:35:a4:e7:5f:8a:
                    3f:2b:c3:51:e2:0e:a7:fe:67:8f:e8:5c:61:31:0f:
                    83:68:34:a7:45:20:7f:64:d3:51:c3:d8:9a:64:e1:
                    3f:f7:e3:1f:1a:df:b5:3a:cc:97:e1:9c:72:f7:bf:
                    fe:f9:9a:85:09:bd:ae:65:02:9d:eb:39:e7:c0:bd:
                    f3:0a:66:43:6a:67:2b:d5:e4:3a:60:40:0a:77:e9:
                    c2:4e:55:89:2d:e1:83:36:8f:52:17:f6:18:a7:42:
                    c8:04:f0:2b:2f:7a:4b:92:83:e7:5d:eb:b7:0b:03:
                    93:17:32:6a:cc:02:b7:d0:3a:e8:b6:82:f0:98:dd:
                    31:08:00:4d:75:78:52:13:ff:99:43:1c:de:ad:84:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:21:26:57:D9:86:76:94:EE:A2:B8:94:D7:E3:F3:3D:BD:DB:66:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f5c12d51-458a-3f38-aed6-e9a12a4cfadd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:1800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:1f:3b:ff:29:7b:0a:a1:94:9f:00:08:3f:8c:21:79:20:
         3c:24:c8:d4:41:ac:70:a9:75:f4:83:e4:3f:0b:1a:bf:44:94:
         20:2d:a7:f0:23:ca:28:6a:04:bb:99:8b:f9:ed:ae:73:31:d0:
         a2:6d:e3:b4:90:8f:9b:bb:17:dd:ad:09:84:59:b7:ca:c3:63:
         91:93:3b:57:d3:08:ab:9d:71:f9:73:4f:62:cb:a9:81:31:46:
         b2:eb:89:05:14:99:8d:8b:6c:bf:93:ae:bf:fe:c1:2f:02:63:
         78:ee:d3:3c:0e:28:88:07:48:a0:7e:04:3b:b1:2c:eb:04:0e:
         1f:ec:38:95:5b:91:eb:2e:a9:c5:62:19:89:90:7d:78:ea:9e:
         43:ca:ac:89:99:15:48:4b:dc:ba:19:01:f1:b0:ac:c7:b6:63:
         f2:76:bf:a1:30:f5:20:c0:02:a1:d5:c9:b9:3f:e5:cc:2d:25:
         e0:f1:72:fb:62:87:f2:c9:f0:47:c4:1c:b7:50:73:92:96:9a:
         12:77:a3:82:51:a1:e1:9f:ac:56:63:00:8a:43:2c:d1:60:7b:
         68:a8:7c:ad:91:1b:b5:6c:e6:81:0f:c4:04:45:85:a1:bb:23:
         e6:38:0f:2b:f8:17:34:fb:53:f0:a5:6d:bd:08:38:83:af:0c:
         55:b4:7a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:55:09 2025 by rpki-client