Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2288a65b-8997-3334-ad1f-8f6eb9cce018.roa
File:                     2288a65b-8997-3334-ad1f-8f6eb9cce018.roa (raw, json)
Hash identifier:          YpV8pAWdcd2zXR/rkoVcjgjyKKOUb6sAxytQyI/UDZM=
Subject key identifier:   03:B2:51:4B:25:13:A8:F4:11:DC:5B:73:3D:9F:EE:3A:2A:44:EB:D4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1EF64C02ECAFF7882DA9800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2288a65b-8997-3334-ad1f-8f6eb9cce018.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:3800::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:64:c0:2e:ca:ff:78:82:da:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=71f17c36-cb81-4b73-9216-78cc82dda981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:04:7c:98:87:4d:77:36:f4:17:3e:f7:a6:
                    ea:e8:10:7e:18:16:8d:71:60:99:54:d7:07:91:c7:
                    9a:56:26:5f:5c:c0:f3:74:69:e4:1e:4b:7d:35:08:
                    a7:aa:36:e3:99:d3:0d:4b:7f:f4:42:52:e8:30:74:
                    dc:e3:ab:17:11:67:2e:45:fc:2d:0c:64:9d:bb:51:
                    54:ab:91:34:8d:b4:6e:84:d5:c5:92:a2:b8:fa:48:
                    5a:6c:54:b9:b5:ca:8e:82:d1:c0:18:ce:ec:5b:f5:
                    99:f9:0c:d7:c4:b8:df:92:28:4e:8b:0b:08:b0:ec:
                    3c:31:7b:ea:99:e4:01:42:b6:17:24:a4:5c:d7:74:
                    99:de:62:68:54:fe:d3:38:93:94:82:58:68:3a:ea:
                    0b:24:ed:7f:60:1b:4b:19:14:e2:ff:78:d7:7e:d6:
                    75:c5:c0:91:37:a9:99:1d:1e:fb:00:7b:4b:48:40:
                    3c:a3:30:6b:cf:84:1c:f4:b2:19:04:20:53:58:17:
                    74:e4:78:cf:ad:7e:59:75:97:90:86:1d:bf:9a:ef:
                    8a:7e:7b:91:d5:32:5e:45:b4:1d:56:ce:50:d8:3d:
                    9f:4c:1c:6c:a8:f6:51:2e:2a:c9:38:d3:cf:25:6e:
                    40:5f:c0:2c:61:1a:df:05:83:1a:20:dc:48:96:ac:
                    ab:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B2:51:4B:25:13:A8:F4:11:DC:5B:73:3D:9F:EE:3A:2A:44:EB:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2288a65b-8997-3334-ad1f-8f6eb9cce018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3800::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:cc:f5:cb:6f:dc:4a:f1:dc:77:58:44:2f:de:3e:03:12:c4:
         f8:c6:45:95:81:5b:40:b3:76:c8:e9:aa:d0:8c:bb:9f:bf:45:
         c4:85:fa:72:53:05:33:51:97:fa:41:27:fc:1f:e1:e7:a3:e0:
         1e:43:69:cf:26:0e:f5:3f:28:bf:40:7f:b9:60:1d:6e:c1:d6:
         44:38:f0:ce:4e:57:3a:b2:7c:c0:05:12:9f:12:ca:fb:9b:3a:
         b0:9d:f0:fd:3d:f0:d6:43:e7:67:7e:79:2f:9e:a0:22:08:d3:
         92:c3:00:45:a6:23:f8:dd:e5:01:9b:19:91:77:9e:b0:4e:8c:
         67:89:53:c6:96:3e:75:66:c3:cf:0a:ae:20:71:cb:e0:55:3e:
         c4:eb:19:cc:22:f5:54:4d:0d:56:05:85:e2:91:2a:01:89:d7:
         72:c4:6c:15:1c:6e:01:1b:5f:82:b5:fa:0e:22:2b:73:c5:e4:
         13:ed:82:9e:b0:8a:91:82:fd:97:54:97:cf:e9:d7:06:fe:0a:
         16:ce:a0:68:54:c6:02:62:a1:3f:21:f0:35:72:fd:c5:91:cd:
         48:cc:40:22:6e:ee:07:69:60:34:cf:52:fa:54:70:51:29:cf:
         7a:f2:f5:e5:df:58:40:bf:8a:90:c2:87:48:a8:be:2e:15:da:
         0a:a0:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:36:00 2025 by rpki-client