Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45ccc17a-2d28-3669-b722-78a144d5f3cc.roa
File:                     45ccc17a-2d28-3669-b722-78a144d5f3cc.roa (raw, json)
Hash identifier:          Nf1Z/T4Bagt4ScdecqkVuBivfeAkFKCEHeCJaVqcKTE=
Subject key identifier:   C6:03:DD:68:16:DB:0A:10:75:49:D1:4C:67:C0:0A:28:ED:4E:16:B8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA39E8584C808C08415200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45ccc17a-2d28-3669-b722-78a144d5f3cc.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:7300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:39:e8:58:4c:80:8c:08:41:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=96ebae67-d02e-4029-8a5f-d6c691ca7257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8e:19:91:22:1d:45:c3:ef:d7:1e:56:6c:5a:
                    3c:95:46:20:98:14:b0:44:25:51:26:ef:9f:e0:4d:
                    ae:49:80:9d:88:ae:af:d7:28:3a:71:0e:9a:8d:89:
                    2f:52:fa:e2:6d:22:eb:d3:82:97:5f:ad:6e:c0:f3:
                    e6:87:04:3c:25:71:3d:3b:73:ee:4a:6d:4a:9f:14:
                    8a:3e:a9:69:83:8c:59:62:2c:95:2b:bb:0c:d6:c0:
                    0b:97:10:1f:51:d1:c1:9d:de:be:1b:55:5f:32:75:
                    7e:c7:a6:2e:00:47:48:21:b1:22:af:f2:f2:de:af:
                    02:8f:f7:9c:b3:e2:f6:d1:bf:63:32:d2:d8:f2:d8:
                    71:cf:11:4e:c0:94:54:04:cd:48:a4:bb:57:76:b4:
                    cf:76:02:d7:7d:8b:3e:80:ea:15:1b:b9:89:05:9b:
                    1d:00:96:62:5e:e6:00:a2:cc:b2:16:bb:73:f1:a2:
                    2c:ac:9f:5b:0b:f6:12:a4:cb:67:ce:97:f5:57:3e:
                    50:4d:54:4a:b8:82:67:5e:61:76:51:39:8c:14:61:
                    80:8b:29:63:3d:4a:ef:ce:aa:60:d5:7d:f5:d4:60:
                    3b:b0:97:2f:d2:8f:5b:62:71:b6:56:39:e7:dc:11:
                    b2:07:ef:d6:8d:ff:f0:2d:32:6f:ca:2a:e4:5a:eb:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:03:DD:68:16:DB:0A:10:75:49:D1:4C:67:C0:0A:28:ED:4E:16:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45ccc17a-2d28-3669-b722-78a144d5f3cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:7f:28:de:9e:a5:84:c3:ba:ab:8e:0c:f1:5d:01:cd:05:85:
         f2:42:59:57:f6:e0:ba:dd:4a:5e:c2:90:fd:e9:41:2d:28:db:
         41:8a:40:c1:2a:e8:6a:1e:a8:43:e3:45:d2:3e:43:06:b6:b3:
         d0:4e:68:c3:48:0e:6e:e9:db:56:07:90:00:24:ae:fb:63:d2:
         e1:e0:1a:20:ca:f5:e4:b8:cf:cf:24:02:0b:28:03:ae:51:e8:
         fd:71:df:03:18:c7:ec:94:a2:8c:91:0c:67:93:b2:06:44:db:
         f4:23:07:5b:cb:71:a1:77:46:5a:71:51:fa:60:f8:54:d7:20:
         81:9a:7f:4b:b6:42:f7:f7:39:c5:13:3d:67:b6:3e:f7:c0:a0:
         07:ef:6c:42:4a:33:2d:91:e7:54:cd:24:b9:b8:42:d8:87:6c:
         a3:ef:5e:d6:d9:65:63:59:3e:60:12:dc:b3:bc:aa:fa:13:e9:
         6c:d9:1f:e1:76:2d:d1:02:40:24:0f:02:97:d7:7e:e1:1a:99:
         c3:59:43:e4:7e:a1:03:bd:5b:7b:b4:5d:16:e7:e8:61:4e:0d:
         bb:03:5a:02:85:b8:3c:0f:37:3f:35:78:97:79:24:f1:1d:d0:
         f0:f4:a3:9d:20:06:96:92:d3:50:f9:e7:36:11:ea:b0:6e:98:
         4b:63:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:33:22 2025 by rpki-client