Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd123836-0bbd-3210-a824-88d6c91c31da.roa
File:                     cd123836-0bbd-3210-a824-88d6c91c31da.roa (raw, json)
Hash identifier:          XwLHJu4Wd+W1SkwOVlZDED1WuAaREJJt8tPZIO+1v58=
Subject key identifier:   99:6B:00:B5:2F:1E:2C:80:D0:D5:27:25:D1:B4:5B:31:AB:63:6C:F7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849955F11CF7B7380E5C9D4C1C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd123836-0bbd-3210-a824-88d6c91c31da.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        2604:2d80:3c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:11:cf:7b:73:80:e5:c9:d4:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=7a76436b-8c05-4dc6-95b3-2bac43e5dc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:28:b0:17:50:57:d1:61:94:cf:46:39:be:
                    ad:75:e2:5c:cf:c7:d1:20:f2:e2:d0:74:47:08:77:
                    2c:24:ad:53:d2:a2:5d:8d:d0:17:13:f6:4a:b2:37:
                    63:a5:6d:75:c0:70:aa:ea:17:0c:cd:6b:9c:0d:00:
                    e9:e7:04:33:06:18:20:a2:c4:d1:92:95:89:be:cc:
                    2a:e7:15:05:7a:91:1a:ae:27:e4:9d:94:4f:1b:da:
                    a3:26:16:c9:3c:e1:6d:d3:0f:9d:30:53:d6:05:a3:
                    38:60:49:17:30:44:37:a1:06:2e:e5:4c:9e:9a:df:
                    9d:c0:b0:9d:6f:cd:e1:c1:5f:87:8a:03:88:e3:52:
                    4b:22:48:f1:64:05:b7:69:1e:e7:17:1d:e5:db:63:
                    18:ba:92:a8:96:43:e3:46:2d:d8:b1:f5:f7:43:d9:
                    14:2f:e0:f2:35:4a:7a:df:49:1f:a8:10:36:d1:19:
                    4e:1a:34:f9:eb:1d:fc:43:98:81:0e:4c:de:f4:f0:
                    fe:d1:c3:72:95:77:d1:8f:11:54:4e:23:07:e4:18:
                    77:31:87:0f:6c:10:e3:50:3b:05:f0:32:2d:6c:bc:
                    71:53:35:ae:8f:91:c4:75:0a:3b:ae:50:a9:09:78:
                    f4:c9:b1:4a:0d:c9:4c:40:f3:47:65:43:ec:3a:21:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6B:00:B5:2F:1E:2C:80:D0:D5:27:25:D1:B4:5B:31:AB:63:6C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cd123836-0bbd-3210-a824-88d6c91c31da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:3c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e1:a7:08:fb:5c:db:97:13:64:3c:aa:00:c0:ce:ea:28:92:
         cf:c1:f1:2c:93:11:8d:92:44:e4:d6:80:45:27:a9:4c:d2:3f:
         9a:57:26:07:75:df:3d:b3:75:d3:85:da:58:ba:09:09:4f:fe:
         69:87:23:d7:6d:6e:67:b4:d2:53:7a:58:fe:2a:f3:18:c1:99:
         2b:24:4a:b3:88:78:ed:b5:c9:a2:29:95:83:a4:07:d1:3d:58:
         16:67:2a:df:96:0d:55:3f:05:21:a4:5f:b3:62:a6:0d:6b:8e:
         da:71:67:35:9a:d3:c0:08:6f:26:5b:df:59:40:d4:73:66:38:
         9f:09:1a:9f:87:a1:30:e4:5a:b0:be:88:13:a8:67:09:56:af:
         51:a9:f9:a8:a5:df:bd:42:33:db:99:44:aa:e5:ed:fa:c8:dd:
         7c:d1:f3:c2:96:b4:d7:72:cb:46:a6:85:03:61:ed:bc:92:50:
         e4:1b:08:2b:6f:e2:6f:4d:e1:d7:02:b3:43:27:37:57:1d:71:
         37:be:b3:5b:53:44:0b:b4:a3:5b:82:3b:3d:e8:7d:3e:e1:3a:
         3e:b6:bd:fe:e3:ae:2f:3c:9c:70:8a:8a:6a:3b:5a:24:40:a4:
         e2:9f:64:84:f3:e5:41:7e:2f:f2:c0:27:55:7c:13:86:56:30:
         21:97:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:57:04 2025 by rpki-client