Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3013da91-91e2-3d8c-a4d9-29216b9c05fd.roa
File:                     3013da91-91e2-3d8c-a4d9-29216b9c05fd.roa (raw, json)
Hash identifier:          AKOX7CSyQCwj1y0zR7au+4GW/hZ4RSPeR+43onbZfYk=
Subject key identifier:   F1:29:C8:5A:48:85:91:7E:95:BA:75:EB:3C:4A:41:49:B8:EF:AF:31
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858499BF55667AB69D292FD983D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3013da91-91e2-3d8c-a4d9-29216b9c05fd.roa
Signing time:             Tue 22 Apr 2025 09:38:27 +0000
ROA not before:           Tue 22 Apr 2025 09:38:27 +0000
ROA not after:            Mon 21 Jul 2025 09:38:27 +0000
asID:                     19905
IP address blocks:        2604:2d80:d600::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9b:f5:56:67:ab:69:d2:92:fd:98:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 09:38:27 2025 GMT
            Not After : Jul 21 09:38:27 2025 GMT
        Subject: CN=e2e9c1fe-72d7-43ee-8b56-6f1f5ff118e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:bc:28:ce:2e:b2:b7:43:44:06:67:27:04:
                    04:50:37:63:62:b2:32:a6:79:4f:7b:17:47:60:22:
                    63:fa:aa:44:d3:e1:8a:46:9d:27:0c:95:1b:33:d1:
                    14:13:e3:fd:66:a9:52:cd:8c:8b:3d:2c:37:7c:ae:
                    f8:f2:ea:48:d3:77:ec:98:3c:a3:82:80:0c:86:d6:
                    9f:34:6b:78:8c:10:87:f4:0a:f5:c0:19:6d:5f:14:
                    c4:f8:99:ab:c1:a4:69:d9:93:b8:49:00:ce:7c:25:
                    a0:08:88:82:e1:3e:63:30:ad:8e:e9:ac:c1:a0:ab:
                    56:34:8f:21:10:62:61:28:7c:20:f8:65:22:74:51:
                    23:17:62:98:e1:27:ad:17:97:af:56:ca:cd:7f:30:
                    3c:e3:9d:ea:1a:3d:90:a2:4c:50:e7:05:d4:dd:c0:
                    77:cb:e7:c5:27:7b:fa:f8:72:ce:27:78:8c:ed:b2:
                    ab:70:04:d0:98:28:73:75:3a:df:79:3a:04:d1:bf:
                    9e:90:7c:bf:4f:34:87:68:28:f2:e9:3b:78:68:0f:
                    47:b5:91:18:23:4a:ab:8d:d0:9f:9d:4b:11:40:4f:
                    fb:06:e6:4f:73:dc:54:c3:ee:20:ec:5f:db:14:16:
                    0e:7e:37:db:c8:25:41:32:77:84:68:64:dc:e7:92:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:29:C8:5A:48:85:91:7E:95:BA:75:EB:3C:4A:41:49:B8:EF:AF:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3013da91-91e2-3d8c-a4d9-29216b9c05fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d600::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:58:08:be:e1:dc:d4:35:93:da:c0:84:34:ea:57:35:03:15:
         52:22:b0:9f:a4:3e:ef:7a:82:5d:b3:b0:b3:7a:6d:df:f2:dd:
         0a:5b:cd:b8:7f:21:6f:fb:5a:72:d2:ef:20:e5:1d:35:08:3d:
         36:fe:39:da:f1:7b:d2:86:d3:68:1e:b8:a9:a0:36:6b:52:d2:
         37:f4:2f:ea:a2:cf:3a:70:83:fd:a9:3e:b0:39:de:00:c0:83:
         f3:89:5b:36:68:03:9f:33:ac:ee:41:e5:f2:b2:64:34:15:22:
         63:67:60:33:b3:b8:5e:9a:13:60:c6:c3:d0:52:0c:4e:f1:8e:
         70:eb:bd:f5:06:e3:c6:21:c8:2a:2e:74:f5:e2:84:e2:56:6a:
         47:21:ce:21:19:ec:60:9a:d2:4e:b0:e7:c6:45:3e:fb:d8:16:
         ed:a3:80:e3:f0:9e:3e:a0:0b:b3:f3:58:ca:8f:01:64:1a:35:
         9f:5a:c9:0d:3c:b9:10:31:4b:96:1e:40:cd:c3:4d:28:f4:67:
         9f:60:b8:a0:21:42:bd:98:1e:ce:34:3a:fe:21:48:1d:1e:84:
         ad:5c:d2:26:1d:6c:1f:17:34:1e:0d:3d:54:16:9d:ae:58:82:
         ee:8e:10:a3:1e:3d:8f:f3:5e:c7:cc:22:a2:be:88:8e:fb:8d:
         3e:26:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:19:18 2025 by rpki-client