Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa
File:                     730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa (raw, json)
Hash identifier:          o5GGsccm5QMk0OqI6mP8+sU9WAjPLx7kiOYmotcYjAI=
Subject key identifier:   D3:CE:29:99:ED:F2:C9:4E:DE:03:31:C0:DA:47:FE:54:C8:F8:A8:D1
Certificate issuer:       /CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa
Certificate serial:       010D0C9F4328584A331AEB552B9CEA76391DD8C0
Authority key identifier: 31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     396298
IP address blocks:        2604:3cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:eb:55:2b:9c:ea:76:39:1d:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=3315e88d-42c4-4345-852b-266d708aed08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:72:90:20:0e:ee:5c:7a:54:76:99:10:f4:d5:
                    9f:8c:35:8d:29:6a:3d:af:25:95:7a:0c:76:d7:ce:
                    e4:70:56:d2:21:3e:de:89:e5:30:8c:69:ce:18:19:
                    dc:34:13:62:54:ae:92:9f:46:3c:48:30:49:4f:7b:
                    da:cc:34:f1:ac:22:89:27:66:ab:54:46:dd:03:be:
                    ff:db:37:86:d6:8c:d9:11:56:39:90:ee:91:e6:20:
                    51:96:4c:72:60:36:0a:c2:3c:24:7a:7f:7a:b3:9e:
                    6e:b0:be:07:8d:09:14:56:4a:c9:eb:69:47:e5:15:
                    b3:18:ce:0b:9d:58:c6:f5:17:28:00:f3:72:33:83:
                    80:f4:6e:eb:8c:73:a6:df:67:67:43:f6:f2:5e:96:
                    9d:cb:3f:fa:a9:12:a7:84:b0:2c:15:ff:7b:92:e8:
                    9a:54:c4:30:c0:85:52:6a:38:85:80:a1:3c:dc:2e:
                    98:ec:95:4e:6c:32:6d:18:06:92:a3:bd:65:4c:45:
                    3c:bd:f5:f1:c6:89:32:8f:ad:b1:5f:21:bd:2a:c2:
                    04:fc:3e:bc:84:c9:55:0c:40:f1:71:72:49:f8:2b:
                    10:14:cf:eb:a0:99:e2:89:b8:6b:59:fb:d0:e6:07:
                    61:04:88:14:45:00:6d:6b:4f:9f:01:ce:ec:47:e4:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CE:29:99:ED:F2:C9:4E:DE:03:31:C0:DA:47:FE:54:C8:F8:A8:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl

            X509v3 Authority Key Identifier:
                keyid:31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:82:61:4d:55:7d:fe:5c:01:03:3a:29:73:62:e2:6e:d3:f5:
         86:48:19:79:da:24:84:13:c1:02:74:82:f2:89:19:e1:7d:18:
         1b:01:cd:85:41:51:27:96:45:07:5f:48:f4:49:01:2a:29:3b:
         fc:4e:7a:ed:12:61:41:47:57:6b:41:dc:0c:dc:62:52:28:42:
         d0:45:47:35:1b:74:9c:14:59:b0:fb:3e:38:30:dd:98:2d:9d:
         88:06:5e:f6:98:99:57:08:e2:9d:68:d3:fe:06:54:9d:31:a5:
         91:37:03:e8:7c:51:3d:5b:f9:76:a6:a4:ee:4b:39:95:39:90:
         ae:28:44:e7:61:33:61:9a:c5:0c:ec:20:00:80:c1:a3:c5:76:
         0b:6b:67:6d:99:74:98:9f:f0:f2:a8:f3:41:9d:ca:e7:c3:1f:
         76:fe:58:7c:4c:6d:31:97:84:b9:d8:b1:a3:03:d8:55:a5:5c:
         5f:06:bc:77:c4:11:eb:2e:1b:5a:3b:be:39:0b:ed:37:42:a6:
         f3:0f:61:3a:d9:3f:4b:01:4a:00:d7:84:5c:ff:e8:ea:7b:82:
         60:cc:dd:bf:b1:1b:2e:5b:42:74:4e:f8:1a:f1:fb:04:7a:52:
         d2:7f:76:6e:ff:07:46:91:5c:4a:76:22:65:ba:d3:96:2b:46:
         21:51:1e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:37:11 2025 by rpki-client