Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/570a39ed-075d-3728-b835-4d9120565cac.roa
File:                     570a39ed-075d-3728-b835-4d9120565cac.roa (raw, json)
Hash identifier:          x/jyAId8sHUDwqOpp4rDasUUr5To54vMqdaFZ05+r4M=
Subject key identifier:   68:12:FE:E1:AA:D4:0A:9E:F8:12:7D:39:9F:5C:94:C0:CB:83:0B:C7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849BF3F5D808FE60A04FAAB8000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/570a39ed-075d-3728-b835-4d9120565cac.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     30036
IP address blocks:        2604:2d80:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:5d:80:8f:e6:0a:04:fa:ab:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=ce1a5877-7042-428e-80ea-370e0e31ba9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:7b:f0:b5:2b:90:22:29:4e:7d:12:e0:3a:
                    7c:14:ea:47:7c:16:17:55:67:2c:29:de:9f:54:10:
                    a8:34:b5:8c:e1:d7:5e:cc:8d:99:52:13:d6:95:8a:
                    f9:2a:d5:a0:2a:f3:1a:94:14:e1:8f:81:e9:2f:d3:
                    4c:7b:98:5e:07:3d:75:a7:dc:a5:6b:c3:bb:da:f9:
                    a5:a6:a2:cb:cb:42:4c:9c:e8:a7:dd:c7:b0:fe:4c:
                    d7:f7:45:dd:9a:2f:f5:c9:65:e0:ab:ee:23:10:be:
                    3f:0a:51:8d:73:3e:8a:a6:ee:4a:38:eb:40:89:92:
                    cb:9c:1e:4c:2e:2e:e7:42:5e:55:f4:68:50:06:52:
                    75:4e:c9:27:86:24:a9:0e:eb:f2:ba:be:b6:9a:98:
                    e7:05:a3:bc:bb:56:16:bc:37:dd:25:d8:15:fd:91:
                    48:d7:d2:27:04:da:4f:13:ca:f3:64:09:72:45:b8:
                    07:39:14:f6:2f:f5:2b:3f:b2:33:4c:a5:00:fe:7e:
                    12:18:14:c6:f3:8c:4e:74:b3:fa:80:e6:ac:c3:5a:
                    72:90:3a:4c:b7:52:75:74:92:e6:53:b6:07:50:cc:
                    6d:6e:06:be:7a:07:61:37:12:e8:fa:cf:a0:45:8b:
                    c9:50:3f:13:68:4f:b1:e1:fc:9a:e6:42:65:46:09:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:12:FE:E1:AA:D4:0A:9E:F8:12:7D:39:9F:5C:94:C0:CB:83:0B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/570a39ed-075d-3728-b835-4d9120565cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:58:ae:fa:8b:69:23:93:4b:44:e7:41:6f:5c:ce:e5:b9:
         ef:52:21:a5:70:eb:61:b8:c7:a1:5b:1e:39:f1:ab:bc:9d:6c:
         0c:34:b5:b7:c9:a0:5d:b3:9b:06:a3:b5:e4:8f:5a:91:5b:e9:
         77:77:a2:8c:0a:fc:67:19:71:0d:4c:f3:75:a7:dd:f9:a8:d2:
         88:d7:b8:9d:5a:87:5b:28:27:8d:10:f7:42:3e:cb:59:d4:ab:
         c0:6d:9d:34:e0:e3:ac:05:d7:77:18:21:2c:ef:a4:b8:6d:2e:
         f6:a0:86:7c:16:68:c6:9d:98:7e:a3:ef:17:03:61:cf:c8:0e:
         bd:db:3c:88:35:02:4f:03:b9:15:99:16:6d:08:eb:ae:e9:d6:
         8f:92:71:6e:59:01:de:18:d9:bf:f2:26:73:15:14:d8:86:78:
         f9:20:62:89:a1:27:ac:ac:36:ae:c8:ac:f8:51:a8:e4:8f:95:
         67:83:f9:34:ea:e0:eb:6f:ac:32:51:fe:e3:9a:0a:05:3e:b5:
         ba:01:09:04:1c:b4:4a:3e:cd:56:83:8d:d1:44:de:5f:33:e7:
         a1:c8:18:04:01:70:77:56:99:ac:2c:e0:e5:32:7b:90:a8:75:
         3c:fa:7d:31:1d:96:76:92:33:45:77:4f:f8:4d:2f:f5:55:d7:
         4f:fd:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:33:31 2025 by rpki-client