Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40632924-d2c6-3776-b198-401eaa82937c.roa
File:                     40632924-d2c6-3776-b198-401eaa82937c.roa (raw, json)
Hash identifier:          UR2CmK7YalwlYYVF1Oqp0oo9o8jDh3o81aAFHHklHbI=
Subject key identifier:   25:6F:01:F0:85:EE:6E:BE:C1:BF:34:5E:EE:35:C7:F5:23:9B:B4:5E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CE537461FD9F10278047A8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40632924-d2c6-3776-b198-401eaa82937c.roa
Signing time:             Thu 24 Apr 2025 11:54:41 +0000
ROA not before:           Thu 24 Apr 2025 11:54:41 +0000
ROA not after:            Wed 23 Jul 2025 11:54:41 +0000
asID:                     19905
IP address blocks:        2604:2d80:b100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ce:53:74:61:fd:9f:10:27:80:47:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:54:41 2025 GMT
            Not After : Jul 23 11:54:41 2025 GMT
        Subject: CN=26f3e556-3dc2-4e0e-afaf-83a4c987582a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:78:50:ee:34:c8:38:4c:52:f1:c6:c2:6a:
                    85:fd:1a:b0:19:05:1e:8b:35:ef:28:44:72:a9:8f:
                    ba:c8:0d:38:36:e8:20:a3:0d:18:3c:f8:15:58:44:
                    a5:bf:1d:62:89:2e:c1:9a:a8:59:47:cc:17:c3:84:
                    c6:10:a7:2f:67:d4:5f:09:89:c4:90:2c:63:b7:d5:
                    e9:60:80:1c:ec:09:6b:d8:54:68:a7:d9:e5:8a:97:
                    3b:3e:70:fa:04:e1:40:eb:5d:aa:02:53:bd:fd:a1:
                    46:1d:81:4a:02:7c:6f:6f:31:71:9b:fc:70:21:db:
                    cd:f6:b0:19:0e:f3:14:c5:85:eb:f9:c0:ad:10:48:
                    a8:1a:17:2d:3c:fb:6d:a8:1d:07:20:64:d3:c0:56:
                    5d:f5:60:9d:90:fe:4c:f6:03:2f:82:36:c6:97:c2:
                    08:c8:cc:2c:63:09:27:14:63:be:17:46:2c:da:72:
                    4d:97:bb:2e:19:8b:fe:18:27:a6:ff:f2:38:9c:31:
                    2c:c0:6b:24:7b:f7:06:6e:6a:58:ec:79:8f:5f:3a:
                    fc:d1:1d:c9:1c:a0:03:25:fb:f3:fa:8e:37:a8:94:
                    fe:42:ea:75:30:40:d2:8d:71:c4:7b:2a:69:f0:5c:
                    22:ac:16:b2:9c:de:25:69:d2:23:35:7a:12:e8:51:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6F:01:F0:85:EE:6E:BE:C1:BF:34:5E:EE:35:C7:F5:23:9B:B4:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40632924-d2c6-3776-b198-401eaa82937c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b100::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:53:48:fd:a9:e1:d6:d2:93:93:28:85:3a:b3:4d:ae:5b:
         60:8c:9c:aa:f9:51:be:95:a6:4f:8a:42:e0:be:c0:9e:d4:b4:
         fb:66:a0:b1:41:91:46:17:32:eb:30:0b:d7:85:5b:65:8b:ab:
         6f:02:39:33:f4:38:36:85:ef:9c:8b:f6:e4:ca:ef:6d:00:2a:
         21:58:c8:a0:09:63:ea:a6:83:8a:6f:e1:14:46:de:7e:68:97:
         c8:e5:a7:b0:8a:52:42:af:40:0d:02:5c:83:0f:f0:76:b0:e2:
         37:96:24:75:81:9d:98:1a:c4:14:f6:12:c6:c7:fd:3a:0e:9b:
         46:58:8d:97:6f:cf:3d:21:b3:9f:de:de:a4:d8:ae:dd:09:4d:
         ff:a4:72:df:13:f0:ee:ed:ec:83:42:99:9a:7f:62:07:8e:8d:
         6b:ab:52:65:25:3a:72:6d:7c:4d:ea:86:74:b4:d0:22:42:df:
         15:a0:47:45:6c:59:19:39:3c:27:5d:4a:75:ac:d1:91:66:e7:
         cf:bc:d3:11:91:14:ff:1d:08:6e:34:04:a5:4a:81:7b:fb:c6:
         77:6e:a8:99:f2:46:ab:29:d5:50:bc:8a:58:0d:79:0c:6b:0d:
         27:74:c3:ba:40:8a:2a:97:ba:98:6e:45:56:6f:c7:e9:cc:59:
         4b:ad:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:55:41 2025 by rpki-client