Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/266d5c6e-82a1-3503-b103-062052e6633b.roa
File:                     266d5c6e-82a1-3503-b103-062052e6633b.roa (raw, json)
Hash identifier:          5APcQQuThZ/otL72E7ucs0XYW5Sv/LBJCjEYTfzuGTc=
Subject key identifier:   D8:84:E5:1C:96:2F:2B:AA:2D:4C:95:97:DE:8C:1A:BE:6A:2C:20:F4
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849955F122F73ECBAACC8AF0700
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/266d5c6e-82a1-3503-b103-062052e6633b.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        2604:2d80:3c00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:12:2f:73:ec:ba:ac:c8:af:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=e81735e9-0202-4e64-805f-fab7a76c1f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d2:02:ab:15:68:fe:bb:74:56:ca:24:99:8d:
                    10:f0:a3:80:1e:bf:e8:28:20:93:4e:31:1e:b1:b9:
                    83:d1:22:bd:88:1f:56:96:c3:1b:9b:b1:13:3a:61:
                    0b:9d:ab:a8:c9:0d:ac:ac:38:2c:a8:54:6d:15:46:
                    93:d2:6a:c3:6f:be:73:e4:c9:fe:7b:40:a4:00:d0:
                    f5:c6:ba:21:96:60:81:1d:a4:9e:cc:b8:da:d0:78:
                    6e:49:3e:15:80:a9:0e:d6:ce:3c:6f:b1:86:1f:ea:
                    dd:c5:c6:57:9c:7f:97:0f:37:9b:2f:66:ed:b1:0f:
                    2b:ca:fa:ac:4a:f8:fc:44:1b:5c:34:b1:e8:e9:c2:
                    a5:29:05:ff:e4:20:7d:18:97:b8:68:36:d5:4c:a0:
                    66:0d:b2:87:6f:3e:be:af:bb:50:b2:8e:54:75:2b:
                    9b:71:65:56:19:fa:ba:02:ac:1f:d0:b2:ff:a3:89:
                    ef:58:e0:70:62:49:79:d1:72:a8:4e:e5:5e:a0:8d:
                    f4:d6:d2:d1:33:ea:9e:d5:fc:c4:3e:3f:35:9c:10:
                    b4:17:54:a4:5b:64:19:e5:d6:3b:9f:54:f6:a7:2e:
                    97:d6:49:e5:20:2d:9a:c0:9a:64:7e:8d:03:f7:c6:
                    47:35:a8:57:e1:e4:01:55:6e:40:ce:b8:d3:00:bb:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:84:E5:1C:96:2F:2B:AA:2D:4C:95:97:DE:8C:1A:BE:6A:2C:20:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/266d5c6e-82a1-3503-b103-062052e6633b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3c00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:f4:69:d8:93:96:c2:4a:fd:6a:72:3a:18:0b:a2:2b:cd:
         1f:2c:7a:59:a6:0f:10:1f:0c:d4:09:f3:b8:6e:8e:d6:2e:c3:
         da:1c:43:a2:6d:72:41:f4:6a:53:4e:11:cd:32:81:f8:9e:cd:
         a6:cb:9a:c0:3f:61:a2:d7:43:cd:ac:0d:10:71:02:48:bd:80:
         2c:8e:33:96:ac:f2:6c:70:56:53:c6:67:84:ff:41:02:45:8f:
         3e:92:af:3a:60:4b:35:82:6c:e4:8c:4e:9a:3d:db:e6:96:aa:
         a6:d0:17:d1:bb:96:c2:a8:8a:04:0e:9e:4f:3d:85:08:fa:66:
         1d:c5:53:07:ea:2d:d4:c0:8e:02:a2:d3:70:c0:13:79:25:7f:
         d0:65:a6:2c:6c:1a:7d:b5:11:72:92:ee:0c:3b:09:52:1e:f9:
         15:60:7c:1e:b0:35:8b:83:f0:d9:75:2b:cc:55:8a:9a:1a:ce:
         6b:32:7d:37:23:05:1d:47:8b:b0:63:32:49:75:29:ca:87:fe:
         7c:18:fd:d7:4b:93:1d:01:ee:d3:75:9a:69:58:47:fa:09:eb:
         7b:4c:51:d3:4d:26:88:fc:b1:89:ca:2b:95:ac:a3:c9:2f:63:
         e2:96:e8:5f:88:5d:98:e4:70:51:e4:c5:ab:eb:7e:7b:fe:ca:
         06:5a:d2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:25:28 2025 by rpki-client