Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a19b5871-0b5d-3acf-ac89-f5491cdbb6e2.roa
File:                     a19b5871-0b5d-3acf-ac89-f5491cdbb6e2.roa (raw, json)
Hash identifier:          +HP54QhCrlefkRxpI+qiPi2t/qaLhizQAlZ/7a/9Wsg=
Subject key identifier:   1F:02:2B:AD:8F:3E:16:9A:B8:78:46:2D:C2:38:AE:DC:19:FD:2D:4A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA396E5F8427722C55F800
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a19b5871-0b5d-3acf-ac89-f5491cdbb6e2.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:2e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:39:6e:5f:84:27:72:2c:55:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=39127a06-75c1-47ea-be6b-57c7aa67384b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2d:d5:6f:aa:46:7b:ac:df:43:8f:3e:14:87:
                    20:e0:e3:05:24:8d:f7:ac:6b:60:d1:47:1a:d7:45:
                    79:dc:77:ec:e1:9d:30:f8:5a:2a:e6:12:cb:dc:a7:
                    ce:7d:c0:f6:e0:1c:a4:85:c0:ba:ce:32:94:a9:ba:
                    40:a8:1f:94:e9:2e:59:b4:44:8b:46:88:d0:9a:25:
                    ae:e5:13:35:00:c7:33:b3:45:3e:bb:b0:cd:93:ff:
                    91:51:1d:11:1f:53:96:58:9d:df:7b:a0:8b:63:c3:
                    3b:d9:a8:6c:2e:18:2c:20:bd:01:20:0e:90:cb:59:
                    75:a0:79:42:7d:c3:65:cd:86:03:18:a0:87:9d:ae:
                    70:6d:a0:b9:99:86:3f:cb:61:69:91:9a:36:42:bb:
                    b7:b5:e6:86:4c:b4:3a:1f:fa:8e:a3:e2:73:cf:ed:
                    ee:cf:22:26:97:6e:76:09:74:57:5c:71:d9:17:40:
                    f2:dc:fe:8f:4b:5d:a6:b6:bc:6b:18:2d:bc:aa:9c:
                    31:09:80:8c:28:95:d6:5a:f9:b0:2b:4f:54:fd:20:
                    44:b7:a1:69:4c:78:79:98:2a:e6:0b:55:93:46:07:
                    33:5b:c0:02:87:56:cc:3b:9a:fe:6d:69:f9:0b:71:
                    7d:f4:b0:34:bf:1c:bf:93:23:7e:41:4d:9b:19:86:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:02:2B:AD:8F:3E:16:9A:B8:78:46:2D:C2:38:AE:DC:19:FD:2D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a19b5871-0b5d-3acf-ac89-f5491cdbb6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b9:38:f3:05:bc:94:88:d8:90:39:d5:75:3f:e3:f9:4f:e1:
         6a:20:8d:fc:3e:4c:54:86:c9:db:b7:59:13:7f:b1:3a:9a:83:
         3a:67:26:3c:a7:24:ea:b4:50:0a:53:a4:da:20:88:78:9a:60:
         ab:25:1f:37:de:aa:d4:61:a4:69:cd:35:66:13:0a:96:48:b8:
         91:8d:53:c0:1d:e9:f3:bd:42:3d:41:95:f1:ae:e7:c3:ba:2c:
         a0:e5:46:c3:67:da:1e:64:5a:37:57:4b:a9:d7:37:f6:95:37:
         e1:cb:43:f6:a2:a5:53:36:3d:28:23:12:32:c8:cd:62:ff:6f:
         af:0a:c7:97:c4:9c:33:4d:0d:d8:eb:43:5a:4f:e4:f0:ce:ea:
         e0:b7:07:1f:ae:3e:f8:35:f1:72:6a:49:29:fd:d2:d6:b4:98:
         74:1f:cf:e5:59:b2:c2:b8:95:03:66:d2:b8:1a:48:f0:51:49:
         cd:dd:cb:8a:f8:bf:b8:5c:96:1d:d9:be:9a:23:1d:74:b3:16:
         6b:24:29:45:44:5e:ee:11:cf:76:44:2e:29:0c:4e:8e:54:b1:
         f5:95:0a:4b:00:58:96:29:52:f6:1f:ba:7a:c4:b5:c8:56:50:
         ed:c1:6d:2a:50:17:cf:fe:ed:11:aa:c6:3d:21:27:04:53:03:
         35:ca:80:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:29:09 2025 by rpki-client