Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a2f424f-98d3-3e8a-9fdb-fff1cb7abb00.roa
File:                     4a2f424f-98d3-3e8a-9fdb-fff1cb7abb00.roa (raw, json)
Hash identifier:          YOgJJ3hmcc7mxw11VTa5FLI5md/lDfdPEk1aeMTye50=
Subject key identifier:   61:EA:82:2D:F2:0B:EF:F4:4C:C6:2A:58:DD:C5:9F:5E:C6:71:31:35
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784BF458FF4ACF2C96B7200
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a2f424f-98d3-3e8a-9fdb-fff1cb7abb00.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        2604:2d80:100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:bf:45:8f:f4:ac:f2:c9:6b:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=1d79c7a3-e5d7-4702-9239-f8abc133ab19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:0c:fb:55:d5:75:3a:0d:3c:54:03:17:f9:
                    53:a8:cb:df:06:2d:79:88:77:97:2b:60:1c:36:5f:
                    95:fa:5f:f9:5a:73:19:da:ba:d5:83:02:54:36:07:
                    b1:e0:86:1a:cc:58:84:ac:71:8f:8a:0d:c3:52:34:
                    55:8a:64:ea:fb:09:c1:d9:19:44:8c:4c:eb:d1:12:
                    fd:01:ca:6a:52:52:96:39:e4:47:02:eb:6c:5d:c9:
                    5d:6b:80:e9:26:8b:bc:0d:1e:b7:66:df:71:c3:16:
                    a6:32:ff:2e:b3:e3:63:fd:2d:87:48:a3:8e:cb:ba:
                    cd:ae:da:63:ed:71:a1:0c:75:36:bd:b8:b5:9a:a2:
                    53:ba:17:c4:17:61:0c:67:a7:0b:bb:9b:79:2f:c1:
                    e9:3a:f6:0c:d5:53:5d:ee:01:3f:95:84:bb:5b:8f:
                    96:97:44:c6:06:0f:f8:c7:7a:61:7c:46:2a:af:7b:
                    ad:36:dc:72:95:bc:2c:25:e8:5e:e5:aa:92:06:fb:
                    78:4e:cd:3f:27:4f:7e:1d:60:34:d9:44:1a:63:ab:
                    41:85:3c:04:a9:e8:21:e2:d5:2f:51:8a:fc:31:86:
                    0a:a8:67:6d:e6:6c:0e:b0:0b:23:05:3b:35:2c:f9:
                    8e:0d:2f:39:0f:d9:26:5c:15:92:4b:e5:96:13:64:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:82:2D:F2:0B:EF:F4:4C:C6:2A:58:DD:C5:9F:5E:C6:71:31:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a2f424f-98d3-3e8a-9fdb-fff1cb7abb00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f9:c9:ad:a4:d1:81:a6:63:e8:09:70:49:c5:6a:00:e2:0f:
         ae:c4:22:ab:4e:bf:f4:41:78:c1:3f:85:2b:aa:3f:d7:ce:9f:
         78:97:2e:a9:4c:50:94:19:22:b5:10:d4:af:64:b6:d2:78:67:
         5c:fe:55:92:16:da:aa:70:0a:5e:41:c6:87:2b:61:ae:ec:ba:
         77:c3:ab:87:79:e8:53:e5:3d:06:43:3e:38:69:32:07:e4:4f:
         59:18:0a:00:6e:c4:1e:3a:a5:e1:07:b5:c3:bc:a0:ec:36:4a:
         5e:0d:48:17:d8:d8:7f:14:7b:52:06:91:ef:57:5b:8e:97:43:
         af:62:1b:12:99:18:7e:41:4e:ef:ce:89:a7:66:4e:be:88:63:
         15:b4:81:ea:6c:2a:39:05:1f:9e:d4:12:ef:91:08:3a:75:76:
         85:1e:c9:c2:f2:eb:da:0c:e0:ae:b0:cb:0d:68:bd:6a:d5:e5:
         91:51:81:89:0f:17:74:fa:ef:c1:eb:d4:8d:e5:6c:1d:a1:41:
         2b:9d:fa:25:cd:d9:65:75:d6:f2:77:26:78:f9:9d:51:cc:70:
         7f:ab:f3:0c:27:02:cd:7a:98:1f:19:56:fa:52:cc:8b:3c:15:
         b8:bd:21:f3:ee:70:b5:50:14:a7:1c:db:5b:fc:42:88:f5:b5:
         1b:4b:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:24:24 2025 by rpki-client