Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cd4611c-62b8-3a0b-ad07-c0c5b9bbf7ce.roa
File:                     8cd4611c-62b8-3a0b-ad07-c0c5b9bbf7ce.roa (raw, json)
Hash identifier:          /ntEtai8v2ZLpg/V94S6/uDcqE4iGH+h9qcFPB2ebyQ=
Subject key identifier:   10:C6:3F:89:37:8F:F6:D6:40:02:E1:F5:8F:BE:90:CF:B5:47:10:AA
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849C20A049CBCA7A2C2AFA0D500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cd4611c-62b8-3a0b-ad07-c0c5b9bbf7ce.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        2604:2d80:280::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:04:9c:bc:a7:a2:c2:af:a0:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=780aa788-50ee-4133-a761-08e25682d0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:d0:bd:71:4f:f6:1d:c2:01:40:3b:4d:ed:
                    d9:34:9c:46:b9:64:55:b9:ad:3b:e4:0e:96:df:7d:
                    fc:2a:70:a2:c0:cb:11:b1:b8:90:f1:63:3b:4a:e0:
                    4c:0c:d6:7a:31:c7:c1:ef:10:10:52:ef:b6:08:44:
                    2d:39:4d:9f:ee:1c:98:3c:48:60:d2:b7:2a:b8:b0:
                    57:9c:e2:62:94:91:5e:2f:b0:95:2d:1e:7a:e1:16:
                    8d:3b:e4:3e:9e:cb:79:16:ad:90:70:83:65:59:ad:
                    89:f2:0f:6e:5e:79:a9:10:b5:59:d3:a1:f5:b4:49:
                    5d:0c:e9:98:a4:72:b8:48:dd:2a:1b:16:ba:af:08:
                    38:e8:f2:23:98:c5:f1:2d:d8:57:18:80:b0:8c:70:
                    e5:54:b9:9a:3f:a5:0e:dc:2b:c0:dc:7c:84:af:85:
                    f5:ab:54:0f:77:32:10:46:c3:f1:fe:ca:e9:24:b6:
                    0e:12:0b:cf:0e:4a:23:90:40:74:86:14:83:57:a0:
                    cf:0d:c4:56:7f:8c:a0:fe:24:cc:0b:d6:14:c6:48:
                    52:c4:93:0f:9f:0a:6f:92:9e:f1:9f:2a:9f:30:fe:
                    3b:b1:e2:79:b4:0f:6c:8a:cd:03:53:4b:09:9f:d6:
                    9d:bc:e0:a9:01:ce:10:fb:cd:25:bb:ea:cc:70:ac:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C6:3F:89:37:8F:F6:D6:40:02:E1:F5:8F:BE:90:CF:B5:47:10:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cd4611c-62b8-3a0b-ad07-c0c5b9bbf7ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b6:20:a3:2d:d1:62:57:ee:bc:05:87:3b:0f:6c:bb:22:c4:
         9f:78:b3:45:db:2c:da:ab:e4:62:28:7b:39:63:95:31:a1:b5:
         55:f9:6f:fa:b1:70:99:8c:71:49:f0:5f:92:78:9f:de:0d:11:
         74:69:b7:ea:ce:21:99:ac:ed:f0:54:de:bb:30:bd:ab:d2:15:
         3c:c5:d0:a4:4b:09:12:2f:c5:c7:9b:a3:bb:1f:38:29:02:98:
         37:f4:2c:23:e6:ae:4e:6c:ad:7a:fd:68:54:d2:36:84:81:c8:
         51:44:c9:67:45:7d:ca:60:9e:88:f8:e2:cc:17:aa:0e:0b:57:
         d6:7b:ee:6f:b2:af:f4:ca:96:fc:5a:cc:eb:d5:e7:b1:5e:89:
         e8:68:1f:d5:71:a9:44:14:27:15:03:28:9d:b3:e4:e5:32:2c:
         99:f3:af:f6:cd:b2:63:29:af:54:6a:00:74:45:db:b2:93:c4:
         70:88:49:c2:cf:b7:0b:b5:08:22:ee:aa:a0:3a:bd:96:54:fd:
         39:5a:8e:ec:f9:7b:80:bd:c3:25:aa:7a:37:6b:61:3b:88:b4:
         dc:cf:2a:c5:1a:7a:ec:0a:ed:b2:d6:ff:03:45:aa:05:bd:ec:
         d2:a1:4b:f2:2d:06:94:86:51:ac:09:c4:53:7d:0e:a3:ae:56:
         2a:4d:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:28:03 2025 by rpki-client