Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa
File:                     a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa (raw, json)
Hash identifier:          LoGHeKKTTDj0Hc2+sBLvzUXjaUMkbvHxfs1gSLcw8Qg=
Subject key identifier:   C5:A1:41:F4:23:E5:FB:11:AC:9C:41:41:EB:C1:1A:AE:DD:7A:63:1D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA23ACCF9C1E71DCA8A940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:bc00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:23:ac:cf:9c:1e:71:dc:a8:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=f16a33a7-be12-415e-82fe-2c09b1176f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:08:da:02:1f:f5:fa:db:57:96:95:bd:ac:
                    1e:d6:81:ad:3e:ed:15:61:d9:68:74:dd:08:d4:10:
                    58:f4:fc:49:f7:d3:0f:be:c7:c1:36:77:6d:88:91:
                    bb:d0:34:04:a8:0d:99:b4:e3:e5:50:d3:45:36:e1:
                    7c:53:45:72:da:83:83:51:60:79:62:5b:cb:09:f2:
                    9f:40:c0:bc:54:78:0a:9b:7d:5b:97:09:de:ff:18:
                    85:c0:93:13:0a:5b:f5:e8:3c:06:79:92:ec:9a:ba:
                    45:17:c3:e9:2e:50:17:9f:a9:a5:86:b4:a7:f7:d3:
                    2b:d9:e6:eb:43:84:a5:bc:a5:8d:4d:a6:9e:32:c8:
                    1f:d7:9e:25:b0:7b:96:4a:45:d5:7d:4b:11:f6:34:
                    c5:4e:9e:42:cb:eb:8e:8e:1c:76:55:3e:26:2f:69:
                    42:70:60:5e:54:7c:dc:b8:73:b0:a7:66:35:2c:3b:
                    91:6c:05:8d:c3:62:42:7c:3d:29:5c:a4:ac:97:44:
                    b7:6b:f3:f3:bf:f2:f4:1c:03:a9:4a:ba:96:d3:1a:
                    05:d7:d8:05:12:b4:16:7c:50:e2:48:85:d5:31:e3:
                    0c:6c:d9:ef:84:b8:03:31:a9:8e:42:a4:fd:5c:75:
                    4d:2a:93:ef:2b:e4:50:c3:3d:03:d8:e6:7c:75:c5:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A1:41:F4:23:E5:FB:11:AC:9C:41:41:EB:C1:1A:AE:DD:7A:63:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a74ba2db-ac8b-3056-993e-e2081fb5cd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:bc00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1c:72:02:eb:74:6a:e2:4c:6b:0c:8d:94:41:e0:6c:08:84:
         52:1b:e0:ff:9c:d1:80:b5:14:4f:54:f9:81:18:b4:a2:01:04:
         42:7e:d1:e2:d4:00:97:26:4a:9c:73:5d:3f:73:fe:36:7e:58:
         91:1e:7a:13:39:8e:7e:f4:48:a4:d3:3c:85:13:6c:17:c8:19:
         af:c6:54:58:a8:27:0e:d6:23:93:82:f0:da:ff:f2:7d:6d:d7:
         4a:5f:87:43:ee:e5:0e:1f:ee:d4:84:83:3a:2e:47:f7:50:65:
         5c:f2:66:34:d2:fc:9b:c6:9b:d2:67:0c:b7:20:2c:dd:c6:66:
         8a:c9:aa:f4:20:fb:6d:44:1c:da:80:2c:71:85:a4:1f:d6:7f:
         9d:1d:19:4c:f9:49:76:96:bb:8e:1a:0b:79:13:c2:35:f3:08:
         3e:43:c4:ce:ef:fa:5f:92:65:f5:f1:2b:38:27:86:88:91:0c:
         74:1c:27:b2:25:99:9e:0a:b2:a3:1c:a9:49:4d:b0:42:a5:3f:
         0b:99:59:8d:8f:3d:da:13:1f:36:95:f8:97:d7:79:b6:41:16:
         97:a3:a5:87:1a:c7:8b:1e:d4:ed:71:71:d4:a2:37:64:d4:c5:
         8e:7f:2e:b2:9c:99:04:fa:f4:25:c7:c3:52:ab:dd:81:03:69:
         ed:5f:d6:32
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuiOsz5wecdyoqUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZjE2YTMzYTctYmUxMi00MTVlLTgyZmUtMmMwOWIxMTc2ZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYgI2gIf9frbV5aVvawe1oGtPu0VYdlodN0I
1BBY9PxJ99MPvsfBNndtiJG70DQEqA2ZtOPlUNNFNuF8U0Vy2oODUWB5YlvLCfKf
QMC8VHgKm31blwne/xiFwJMTClv16DwGeZLsmrpFF8PpLlAXn6mlhrSn99Mr2ebr
Q4SlvKWNTaaeMsgf154lsHuWSkXVfUsR9jTFTp5Cy+uOjhx2VT4mL2lCcGBeVHzc
uHOwp2Y1LDuRbAWNw2JCfD0pXKSsl0S3a/Pzv/L0HAOpSrqW0xoF19gFErQWfFDi
SIXVMeMMbNnvhLgDMamOQqT9XHVNKpPvK+RQwz0D2OZ8dcX91QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMWhQfQj5fsRrJxBQevBGq7demMdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTc0YmEyZGItYWM4Yi0z
MDU2LTk5M2UtZTIwODFmYjVjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG4ccgLrdGriTGsMjZRB4GwIhFIb4P+c0YC1FE9U+YEYtKIBBEJ+
0eLUAJcmSpxzXT9z/jZ+WJEeehM5jn70SKTTPIUTbBfIGa/GVFioJw7WI5OC8Nr/
8n1t10pfh0Pu5Q4f7tSEgzouR/dQZVzyZjTS/JvGm9JnDLcgLN3GZorJqvQg+21E
HNqALHGFpB/Wf50dGUz5SXaWu44aC3kTwjXzCD5DxM7v+l+SZfXxKzgnhoiRDHQc
J7IlmZ4KsqMcqUlNsEKlPwuZWY2PPdoTHzaV+JfXebZBFpejpYcax4se1O1xcdSi
N2TUxY5/LrKcmQT69CXHw1Kr3YEDae1f1jI=
-----END CERTIFICATE-----
Generated at Fri May 9 08:37:16 2025 by rpki-client