Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa
File:                     aaac33d9-9851-3e29-a8fb-c6896545a96d.roa (raw, json)
Hash identifier:          GLCidFLFBkAE3CBNOUpAthTy7rf0wCLZBwV8vfczP5c=
Subject key identifier:   37:1A:91:53:E2:63:6B:8C:00:01:7B:3B:87:AB:83:B8:4A:9F:46:EF
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA1AE90B9368559CD69A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        2604:2d80:d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:1a:e9:0b:93:68:55:9c:d6:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8667f1f3-73e3-493c-8220-e4256d5cf58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:8a:6a:44:e9:b5:0e:e3:07:fc:2c:1e:7a:
                    b6:c8:63:f1:e6:0a:16:86:9d:77:23:ce:ca:2f:8b:
                    4a:c6:49:93:4c:4b:c6:46:57:10:71:f1:f9:0c:72:
                    9c:79:a4:2a:0e:73:59:58:b9:af:08:9c:c1:b8:40:
                    1e:3a:25:cf:47:7c:50:0a:66:92:b2:e3:3e:a6:e2:
                    47:68:0f:bb:89:03:10:7d:35:45:c5:79:df:55:83:
                    ea:d2:d1:65:c3:0f:61:5e:8b:db:ed:20:9b:3c:5a:
                    47:e3:d5:e0:28:11:49:c0:8e:ba:54:e8:d1:cf:e8:
                    d6:7c:7b:a2:17:e6:48:cb:d5:ed:7c:a1:a1:4d:b3:
                    2c:e1:e6:7f:fd:ea:8e:a2:a3:44:9d:37:69:ca:d0:
                    f9:b5:23:54:cf:0d:75:46:23:f9:45:4a:8d:dc:45:
                    7b:c8:e2:12:ae:23:f6:f4:5c:3f:e2:e6:ac:5b:6d:
                    bf:67:52:eb:09:56:c1:78:4d:82:fb:8a:f3:29:af:
                    65:aa:21:9b:29:02:11:c3:1d:fe:8a:ab:1e:c5:5a:
                    3d:4a:f3:04:34:de:d6:07:b4:a9:31:16:b9:b5:68:
                    09:f8:13:3d:58:a1:44:53:86:60:84:2b:6a:19:c8:
                    64:66:bf:c1:b7:b7:e5:04:8f:f9:74:8e:26:81:c3:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1A:91:53:E2:63:6B:8C:00:01:7B:3B:87:AB:83:B8:4A:9F:46:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaac33d9-9851-3e29-a8fb-c6896545a96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2b:60:53:4a:18:b8:d6:91:42:6a:58:b3:41:be:09:90:54:
         81:4c:dc:65:bb:79:9a:d7:ab:58:13:04:ff:e1:48:1f:02:3d:
         fc:de:17:bd:69:b3:fc:1a:bf:14:44:aa:e2:8d:82:a9:cc:33:
         d4:40:f2:0e:59:4d:86:f7:05:4c:ea:14:9b:fc:92:5c:a7:62:
         74:b7:eb:d9:6f:7d:36:28:82:ff:54:c6:9e:21:25:5d:9b:fd:
         05:24:ab:4e:98:65:76:8b:91:d3:2a:c2:ee:b2:f5:a6:67:f5:
         52:14:22:85:34:2d:10:d0:76:86:96:2f:13:5a:cc:ff:f9:31:
         c8:88:9a:88:4f:9f:8e:0c:d2:9e:45:07:0d:e5:41:39:e5:92:
         01:7c:9d:c6:e0:57:e9:a9:16:71:cb:75:c7:62:cc:60:9e:16:
         ed:f7:d0:e1:ed:c3:48:d3:64:57:01:ed:82:3b:0b:b5:02:5d:
         2d:94:79:3a:84:29:f6:8a:a0:fe:0e:15:f5:99:23:b9:17:85:
         09:8f:af:96:8a:b7:6f:fa:65:cd:9c:30:44:d7:3d:4d:fa:c9:
         14:e3:4e:b3:ab:93:3b:44:0d:b9:a4:7c:aa:77:7e:a0:a7:ea:
         9a:7a:15:e8:17:e1:48:ae:e3:8f:22:e3:42:01:49:55:76:be:
         4d:d9:b0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:25:29 2025 by rpki-client