Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c95e5ab-3e02-3899-a114-a9a15bdb0619.roa
File:                     4c95e5ab-3e02-3899-a114-a9a15bdb0619.roa (raw, json)
Hash identifier:          XGKlGGOS6DSYDrltGJRtukvQct1oImyioRagnyeUuJs=
Subject key identifier:   9D:18:98:7B:BF:9F:56:76:04:18:F8:D9:0F:E1:4A:65:A8:0E:6F:33
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CE4AE05C696B8C1B01B000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c95e5ab-3e02-3899-a114-a9a15bdb0619.roa
Signing time:             Thu 24 Apr 2025 11:54:37 +0000
ROA not before:           Thu 24 Apr 2025 11:54:37 +0000
ROA not after:            Wed 23 Jul 2025 11:54:37 +0000
asID:                     19905
IP address blocks:        2604:2d80:7a00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ce:4a:e0:5c:69:6b:8c:1b:01:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:54:37 2025 GMT
            Not After : Jul 23 11:54:37 2025 GMT
        Subject: CN=fcdda4b5-e662-4536-8766-7fe63997ed04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:79:93:22:5e:c8:84:01:fb:a2:60:c3:03:
                    09:d6:52:4f:bc:b9:b1:d8:00:25:5c:3e:3b:0d:30:
                    4d:be:41:86:53:99:03:53:be:86:3a:02:a2:c9:c2:
                    22:60:f2:36:7d:eb:99:c6:7f:ff:b3:d2:1b:fe:48:
                    96:5d:3a:57:a3:1b:5b:31:80:de:22:62:fa:39:6b:
                    20:be:44:d1:bd:01:ef:e4:ae:41:61:4c:0a:7c:72:
                    78:90:52:03:d3:5b:3d:d0:ce:fa:91:96:6f:12:71:
                    18:43:f2:0c:63:ae:a9:37:bd:4c:d4:20:79:d4:01:
                    79:9f:50:65:39:f0:f4:f8:f4:d8:40:ef:5d:e6:2e:
                    ee:3b:aa:cd:df:c3:22:9c:54:c9:9e:d9:db:9d:0e:
                    e0:40:3d:8e:e0:87:67:6a:68:32:70:a1:7c:34:e8:
                    5e:f3:e4:33:8d:06:d2:a9:36:0e:79:06:1f:06:46:
                    c6:b6:71:88:3c:14:4c:56:82:9d:15:d1:84:b8:40:
                    79:7e:dc:43:5a:a3:bd:f6:80:6c:f0:9d:b3:83:fe:
                    a8:e9:38:58:a9:81:c3:c2:5f:55:e3:3b:d1:62:b6:
                    72:ed:05:14:cb:2d:ca:1f:5f:c1:2e:68:c5:3b:95:
                    f2:f4:ae:ad:5e:df:20:36:9e:31:29:95:1b:37:2c:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:18:98:7B:BF:9F:56:76:04:18:F8:D9:0F:E1:4A:65:A8:0E:6F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c95e5ab-3e02-3899-a114-a9a15bdb0619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7a00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:02:66:11:86:cc:1a:3a:33:23:ae:a8:f2:3c:f8:ce:35:
         91:ed:26:fa:9e:0b:4c:d3:f8:2d:9a:e2:90:1e:a1:e3:2a:67:
         c2:af:7f:8a:8c:f0:ef:bd:6f:7c:36:d2:cb:ee:9a:81:a9:57:
         63:42:83:a4:70:e5:79:f4:34:3f:66:25:72:da:4c:3e:08:49:
         35:bf:06:45:51:ce:96:00:12:0f:b1:c9:d3:5b:a4:c3:a1:57:
         19:e5:fc:b2:50:1e:f8:51:2c:5c:4f:c8:11:b9:97:bb:d0:6d:
         80:c5:2d:1a:fe:fe:6a:55:cd:07:f6:33:6b:44:d2:f2:c8:aa:
         b3:d6:9a:8a:9f:55:d1:5f:72:9d:3b:2e:06:7c:81:ac:9f:80:
         6a:05:7b:20:f3:10:2f:01:a3:d8:e9:3c:3d:31:fd:39:a4:f3:
         a1:db:90:49:1e:9a:e3:8c:52:47:17:1e:5f:94:1b:27:d2:05:
         68:89:01:db:3f:57:9e:c9:51:c8:45:09:a7:4f:f7:19:98:b9:
         2a:e0:e8:09:77:0f:36:d8:f2:63:3c:a5:20:e4:ef:88:21:4f:
         6e:64:1e:8c:69:f8:d4:a6:51:97:d1:98:58:9d:d8:da:f6:1d:
         83:0a:74:57:c2:b9:ef:ec:fb:58:2d:13:9b:6c:2e:c1:2e:a9:
         34:41:1e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:19:17 2025 by rpki-client