Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c9b209-7eec-3e5a-a141-6c0d08a81bab.roa
File:                     24c9b209-7eec-3e5a-a141-6c0d08a81bab.roa (raw, json)
Hash identifier:          /7M8ndE+l/wCLJHhjV6GhnNvyF3sClLQgjXFeMx83OY=
Subject key identifier:   66:B5:CC:09:AD:56:1D:B0:3F:35:25:E2:5C:F0:41:33:8A:49:A0:25
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849DCF923575575D6F86B2F0600
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c9b209-7eec-3e5a-a141-6c0d08a81bab.roa
Signing time:             Thu 15 May 2025 16:33:39 +0000
ROA not before:           Thu 15 May 2025 16:33:39 +0000
ROA not after:            Wed 13 Aug 2025 16:33:39 +0000
asID:                     19905
IP address blocks:        2604:2d81:980::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:f9:23:57:55:75:d6:f8:6b:2f:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 15 16:33:39 2025 GMT
            Not After : Aug 13 16:33:39 2025 GMT
        Subject: CN=9f4a7961-2e61-42e6-bf0b-06d9b4c88836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:98:39:85:c7:03:6e:64:75:a5:e0:41:d5:a9:
                    80:4c:ee:4d:0c:69:7a:53:9f:a7:e7:6f:ab:67:34:
                    75:d9:36:bc:6c:c0:e9:b3:51:1f:85:d7:64:ec:e7:
                    f6:07:22:18:38:3b:2f:05:5c:92:c0:2e:b7:5c:a6:
                    3e:00:cc:f5:56:70:1c:70:8f:f8:0a:f8:90:5e:74:
                    17:00:53:bc:37:dc:4e:88:70:3c:df:ff:d7:b6:94:
                    50:4d:c0:dc:ca:f3:f5:4f:ef:79:9f:97:be:71:f2:
                    dd:3d:42:2b:7d:6c:19:6b:1d:88:7c:a1:1c:3b:4e:
                    9d:7b:26:69:af:5a:27:dc:0e:59:a3:ba:cd:6b:1b:
                    3e:a5:3b:48:3f:32:7e:be:f4:cc:f9:a2:b7:0e:31:
                    74:e9:a8:4a:02:c5:17:df:3f:c3:7b:eb:41:60:54:
                    42:25:dd:02:9f:84:42:28:69:81:f9:71:b2:73:a8:
                    7f:79:8a:52:11:6f:b3:fe:ea:98:ed:8c:45:cc:fd:
                    48:c3:02:bf:ec:fc:1a:d3:9d:d8:35:42:d5:d8:45:
                    5a:7f:81:0a:a2:27:82:92:5d:a6:8f:a7:75:2a:96:
                    a6:60:08:44:bd:5a:f5:ad:ec:9f:03:46:00:43:db:
                    7d:33:ea:56:76:ff:a0:2a:27:b2:da:4f:e6:99:e2:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B5:CC:09:AD:56:1D:B0:3F:35:25:E2:5C:F0:41:33:8A:49:A0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24c9b209-7eec-3e5a-a141-6c0d08a81bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:980::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f1:77:4e:43:02:8c:5c:a3:fb:c3:ea:4c:85:d4:90:7a:f1:
         3d:86:a7:e7:62:da:15:7e:1f:d9:7a:12:07:99:05:18:3a:f4:
         51:29:b8:c4:6b:05:de:d0:16:35:5e:66:96:9f:c0:86:87:4e:
         ee:6e:38:45:e4:dd:c3:ab:58:75:21:ab:4e:d1:c6:2f:08:bb:
         7f:c5:36:0c:ed:4f:86:de:d9:ea:11:51:52:13:c5:b8:19:b2:
         36:4a:82:35:80:d4:27:e8:a2:73:c6:09:d0:e5:ca:97:a1:04:
         68:63:38:45:62:61:7b:7f:e0:9a:9b:45:2f:08:d1:a2:44:25:
         7e:20:da:66:a1:d6:8d:f4:0a:f7:2e:fc:5e:7b:2d:12:43:72:
         1a:8f:9a:d2:8f:1a:d6:67:7b:05:d8:03:20:d9:ec:7d:c6:b0:
         a7:22:6e:73:3f:53:93:92:81:d1:d3:8b:18:21:93:ae:87:ea:
         f1:d2:23:2d:94:ae:22:99:6d:43:b9:b0:8b:9d:41:d1:d5:f7:
         e7:ae:be:78:65:e0:f7:54:b1:02:9c:4b:8a:0b:8d:e7:4f:07:
         d8:f3:72:ca:20:bb:9a:6a:bc:ea:e6:ee:df:49:f5:07:a1:26:
         d3:54:60:ba:2c:d1:b7:ca:40:e5:39:bb:55:a4:00:19:a4:6e:
         2f:5b:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:55:37 2025 by rpki-client