Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c81fb4a-3641-3b2a-8fa4-dd791b2e06ff.roa
File:                     4c81fb4a-3641-3b2a-8fa4-dd791b2e06ff.roa (raw, json)
Hash identifier:          nMFcNdcC8k2zZyk4cmcScGRLAOddBrBtFBuZmVBbAHk=
Subject key identifier:   87:9C:20:20:90:E2:25:E8:3D:44:A4:8E:4D:45:F4:79:6A:8A:5B:F8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA1B8A9C60FB8F2B804080
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c81fb4a-3641-3b2a-8fa4-dd791b2e06ff.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:8d80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:1b:8a:9c:60:fb:8f:2b:80:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=76727017-8598-4bef-b40e-4b4faaed007c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:07:47:69:53:2f:72:71:2c:c0:8b:5e:5e:55:
                    34:b5:2a:ed:7c:d6:85:8f:cc:e8:3d:6e:80:29:8f:
                    e1:22:a2:f4:b8:14:5e:54:04:56:e6:5f:6e:b7:0d:
                    d7:ea:70:8b:32:13:41:97:b7:63:ba:09:8b:34:4b:
                    35:83:e2:65:8b:9b:6a:88:17:42:85:ef:3e:3e:68:
                    49:6b:a0:d6:85:73:03:ad:bf:a1:a2:50:37:b8:2b:
                    c0:fb:38:94:51:c4:e2:a1:9b:f0:94:df:4e:83:3f:
                    41:c7:27:26:1b:18:c2:5f:b7:3e:44:9b:0f:de:68:
                    b0:d1:a0:ce:09:0d:2e:3d:e8:82:77:5b:f1:34:8b:
                    95:55:d9:09:ad:b5:e1:0d:0d:f1:53:aa:65:e9:a4:
                    38:1f:93:a4:cd:96:f0:c4:d7:e7:fc:66:62:ab:ee:
                    c4:83:29:28:6a:89:16:9a:c7:73:62:07:e1:50:9a:
                    bf:c2:76:eb:36:1a:f4:7d:39:37:5c:70:13:cf:f1:
                    1a:bc:51:fb:da:5d:15:d8:5f:64:7c:70:16:ac:1c:
                    da:20:4d:21:a1:e5:c8:b6:d4:29:d5:37:7e:89:e8:
                    5a:d1:a3:ad:52:bc:d6:d4:59:df:4f:47:9b:5e:14:
                    01:42:89:d1:fd:3d:02:77:12:f8:af:b8:ed:e1:d6:
                    25:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9C:20:20:90:E2:25:E8:3D:44:A4:8E:4D:45:F4:79:6A:8A:5B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c81fb4a-3641-3b2a-8fa4-dd791b2e06ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:8d80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5c:db:eb:fd:85:09:3c:62:54:2e:90:d7:f1:9a:89:43:5c:
         81:6b:43:91:a8:34:f2:00:78:32:5a:25:45:7c:41:74:5b:29:
         3c:46:77:5b:db:51:17:f5:29:33:1d:ba:74:b0:8c:a8:ff:40:
         ca:9d:e4:04:17:ca:8d:f2:3f:2c:3f:81:51:26:51:b0:60:5d:
         3f:6f:35:08:ac:8d:b6:16:81:ce:7c:38:52:e2:c3:c9:76:28:
         3e:9b:43:41:99:d8:bd:6c:a2:62:1b:68:b2:0f:6e:a7:4c:b6:
         92:6c:c8:01:e2:23:19:e3:f6:c8:a7:ae:06:e8:5b:90:70:38:
         f2:84:1e:46:76:86:c9:a3:cf:4d:09:a7:be:2f:16:63:dc:b2:
         9b:e1:de:c1:c1:fc:53:8a:5f:e7:20:e3:9c:9c:d2:66:e2:96:
         9c:10:d5:5c:7d:e0:c8:60:a0:c6:15:93:b2:d5:a5:20:35:85:
         7d:e3:8d:3e:25:26:b1:56:d8:8e:06:2c:7d:ea:d9:dc:8c:3b:
         23:db:85:6a:1b:29:f1:68:f4:9a:0c:66:bf:54:ec:49:a8:e2:
         62:c6:ab:1d:e6:c4:a8:50:07:da:15:26:d4:ef:5b:8c:4a:68:
         42:36:79:6d:d7:0f:31:cf:07:24:11:8c:89:eb:36:36:88:c1:
         78:c0:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:06:36 2025 by rpki-client