Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cc4867a-3356-37a6-bf75-69b60313f5bb.roa
File:                     5cc4867a-3356-37a6-bf75-69b60313f5bb.roa (raw, json)
Hash identifier:          bhzE+N5SE0Nvq7BKhsnbGM2h8bnIvQzuuF3zqYKLQCQ=
Subject key identifier:   39:8C:7B:24:AB:87:16:82:98:41:C6:5D:4B:DB:AA:D2:EC:65:E2:4C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849819127CFAFA23E512D74D280
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cc4867a-3356-37a6-bf75-69b60313f5bb.roa
Signing time:             Sat 12 Apr 2025 22:45:34 +0000
ROA not before:           Sat 12 Apr 2025 22:45:34 +0000
ROA not after:            Fri 11 Jul 2025 22:45:34 +0000
asID:                     19905
IP address blocks:        2604:2d81:1800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:91:27:cf:af:a2:3e:51:2d:74:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 12 22:45:34 2025 GMT
            Not After : Jul 11 22:45:34 2025 GMT
        Subject: CN=b5957850-37d6-4c25-a86c-fa9660082d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0d:79:3d:7e:b9:f7:85:9d:61:54:e6:2e:47:
                    aa:08:e0:d4:c7:47:4d:de:09:a7:ce:c0:98:6a:2a:
                    8c:46:e4:77:53:9d:5c:73:ae:81:12:db:a1:3e:b5:
                    6a:f1:2e:a0:ae:ba:44:12:c8:f9:ca:9c:ef:2d:72:
                    29:4a:de:ea:2d:3c:3e:b6:aa:5d:7e:49:62:47:e0:
                    67:1a:e0:06:09:2c:0e:82:98:01:e3:9e:61:03:cf:
                    6f:a6:df:de:aa:37:be:02:5f:c4:c3:f4:37:52:5d:
                    45:5c:b3:65:ef:4a:7f:a4:ff:35:76:cb:f9:40:97:
                    26:b9:9b:c0:49:2e:3e:a5:1c:c3:9e:30:65:f3:b4:
                    ec:2a:54:e5:fa:a8:5c:0c:45:79:a7:68:7c:5d:e2:
                    30:81:f9:4c:51:13:19:20:8a:cc:99:02:fa:90:ac:
                    eb:fe:eb:4b:d9:0d:55:1f:18:00:46:71:34:1e:30:
                    ef:7e:bd:b1:3f:42:91:5e:43:3d:18:82:0b:48:1f:
                    1c:8b:96:55:f1:6a:db:c2:b5:4e:8c:51:d6:ab:6b:
                    a3:8b:d1:eb:95:5c:75:8f:7b:28:65:3b:c6:f4:be:
                    ad:f7:1e:0f:d4:c8:1a:11:f3:0a:dd:b8:4e:d5:64:
                    a0:71:4a:f9:8c:dd:80:e3:c8:90:91:30:b3:85:03:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8C:7B:24:AB:87:16:82:98:41:C6:5D:4B:DB:AA:D2:EC:65:E2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cc4867a-3356-37a6-bf75-69b60313f5bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f6:bf:95:75:e1:83:74:cf:b2:2a:0c:f4:d1:7d:1e:ba:e9:
         e8:6c:70:b0:4c:fc:c0:e9:3f:70:7d:71:0d:f9:4c:12:6a:9f:
         c0:fc:c3:1c:39:40:8a:a5:94:70:54:ac:f3:db:4e:03:ee:ae:
         68:a2:2f:85:0a:ec:d6:97:0f:c8:5c:e3:58:9e:f2:6c:45:be:
         31:41:0f:ab:4e:3a:12:26:1b:c0:58:0e:c6:bf:93:6c:a9:9e:
         d1:ff:bb:f3:a7:bd:9a:c5:8a:60:60:19:62:2b:59:ff:7b:55:
         f5:e4:a5:b9:7c:25:ff:23:fc:8d:f0:f1:03:66:a7:b6:47:8c:
         46:1e:11:73:a7:0a:a2:76:9a:f3:3e:f1:05:64:7a:87:1b:c5:
         01:b3:cc:d4:cc:54:e5:fb:f1:13:47:e2:2c:ed:3c:af:4e:6c:
         dd:0f:33:bf:79:69:20:58:ab:ef:08:e7:f2:40:60:23:eb:5a:
         12:10:67:61:3e:93:84:cd:bd:e0:53:73:77:94:f0:04:fc:8f:
         d4:f8:87:18:f1:be:ca:a2:eb:8a:0e:59:73:d7:38:ed:13:d6:
         18:02:03:26:4f:29:b3:3c:62:09:13:16:76:df:60:74:95:13:
         41:45:fa:78:cd:b3:47:77:53:45:98:07:a8:5b:e0:8c:47:f0:
         35:34:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:24:09 2025 by rpki-client