Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93f4cda1-eaf4-3325-b6a9-c2f12293c5e2.roa
File:                     93f4cda1-eaf4-3325-b6a9-c2f12293c5e2.roa (raw, json)
Hash identifier:          0odxyE8NzowwIU+WF3ho/iia2ZTQh319Csfuqg9ojdo=
Subject key identifier:   69:F1:6C:A3:B7:D4:39:6F:57:36:C9:16:BA:8D:7F:DA:2A:AE:66:30
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A8E9DCF9BE295F61760F8940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93f4cda1-eaf4-3325-b6a9-c2f12293c5e2.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     30036
IP address blocks:        2604:2d81:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:dc:f9:be:29:5f:61:76:0f:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=878583dd-49a1-4687-9a30-587b72c7906e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:86:ad:56:a4:f2:a8:3f:69:86:87:32:36:
                    5b:77:2f:3e:1c:fd:a5:0c:d8:25:be:7d:d8:d7:8e:
                    c5:c8:ba:76:07:04:cd:37:c7:75:b7:22:ef:da:c1:
                    64:ec:cb:ab:1b:09:51:48:c8:8f:f0:42:e8:72:64:
                    c4:c5:55:59:b1:c7:d5:dc:b7:e4:1e:a5:fd:35:be:
                    4f:d8:71:bb:0b:4b:9f:39:9e:08:f0:79:da:c2:71:
                    01:5b:da:82:7d:27:db:59:b9:df:08:3f:1f:02:8e:
                    c7:ec:f5:de:2f:6c:c3:13:26:c2:06:20:a9:ab:39:
                    66:89:44:c3:11:5b:79:99:d3:e5:30:e7:59:7c:ef:
                    2b:68:96:5b:a6:e3:23:2b:90:8c:b0:84:17:92:3a:
                    bc:53:73:b4:42:78:43:83:e2:38:8b:43:f5:61:cb:
                    a8:0e:ed:cf:83:48:bc:eb:b2:65:dc:d9:e4:d0:7f:
                    41:23:2e:a4:45:fa:32:d2:c8:7a:2e:5d:4b:cf:93:
                    cf:ea:b6:d5:2e:cd:82:e9:14:0d:f7:73:d6:6f:f6:
                    61:f4:94:12:0e:f5:12:5d:27:15:47:1d:3b:77:e9:
                    3f:ac:9b:60:c3:29:0e:b5:6c:0f:7e:d5:de:c2:a9:
                    18:8e:9d:8b:0f:7a:95:1b:69:62:68:45:a4:91:52:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F1:6C:A3:B7:D4:39:6F:57:36:C9:16:BA:8D:7F:DA:2A:AE:66:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/93f4cda1-eaf4-3325-b6a9-c2f12293c5e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:41:9c:d0:3c:c0:d7:2b:82:45:a1:7d:09:61:e5:38:fb:
         c4:76:1a:7b:31:70:ed:91:de:57:e3:d2:ef:44:23:00:49:3d:
         9f:8d:4a:46:c9:1e:cc:aa:11:29:09:2f:36:05:e7:0d:8a:df:
         a0:d4:71:e0:30:f9:82:f4:2b:b5:61:a7:f2:90:f2:c6:e4:6f:
         61:6f:c1:d2:47:90:bd:d0:dd:c7:d1:0b:2e:d0:5b:14:a9:ac:
         13:c5:29:bd:47:68:aa:85:1a:17:fe:fd:44:82:74:d2:0e:bd:
         41:7a:65:13:be:7d:69:03:34:25:01:88:da:74:79:d6:ba:11:
         fb:81:c7:58:19:6e:5d:d4:4a:38:40:f9:df:96:64:0f:74:d4:
         82:f9:60:68:45:ed:9a:88:6a:ca:b3:c4:5a:e5:1b:e0:59:5c:
         bf:77:54:45:a7:51:80:3b:1a:a7:ef:9a:d1:86:4d:d5:e2:ec:
         00:78:18:26:05:62:c8:7e:d3:7e:ff:1d:bf:91:35:7e:39:82:
         94:d1:84:b1:47:7b:99:de:0e:34:15:23:e4:82:53:90:55:89:
         8d:c3:8c:e4:7d:3c:e4:ed:cc:d0:7a:bb:f9:63:35:3a:ab:bd:
         a8:55:ae:1a:8d:1b:3c:a0:4d:b2:9d:79:cc:8d:2a:a7:c5:5e:
         3d:d5:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:20:28 2025 by rpki-client