Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa
File:                     5cff5eba-b27d-3274-83f0-8e14a3836930.roa (raw, json)
Hash identifier:          a5RbW8ftWYC/tKKS+6wtij2l8gTw9rMVQ42/DQ0okK0=
Subject key identifier:   40:4B:CB:09:88:A4:72:F7:FF:24:56:F4:50:4D:02:42:3B:4D:ED:5C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A7BB0B1F462921A7378988DA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     19905
IP address blocks:        2604:2d80:da00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b1:f4:62:92:1a:73:78:98:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=eeb1433e-fccd-4fa5-9ec7-39ce5608ba92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:3c:ff:68:f6:0a:8b:37:fa:b8:5c:52:54:
                    d2:8b:64:77:02:ee:1b:da:77:7b:d5:86:2e:71:cb:
                    84:e1:93:72:3f:1a:71:7d:7b:20:37:7d:f1:02:42:
                    15:8e:f5:be:a2:3b:4f:a0:ba:10:8d:b3:8e:45:75:
                    eb:d1:7e:fa:1b:40:96:c5:75:45:d8:e2:72:91:53:
                    22:91:cb:46:92:7c:0e:50:0a:ce:ca:5f:dc:be:77:
                    1a:65:69:fe:ee:2f:ca:0d:af:cf:e7:f7:25:13:8d:
                    da:1d:84:11:6f:26:37:52:47:04:03:f8:ae:2d:d0:
                    b1:07:71:57:22:3b:6b:b9:b8:e3:85:c5:95:56:c4:
                    7d:20:0d:4a:84:e6:1b:98:06:a9:8c:51:55:94:51:
                    6f:15:ee:be:71:ed:b8:98:d4:22:23:f8:17:1d:86:
                    b3:32:44:4b:dd:c7:0c:fc:84:f2:eb:f4:19:ec:ab:
                    6c:8f:e0:d4:cf:07:de:ee:cb:d5:26:69:18:f2:02:
                    f2:3f:d3:a0:33:26:38:42:bc:e3:71:57:da:0a:41:
                    6e:6f:2a:3e:19:18:a4:f6:a9:28:64:91:c8:98:5b:
                    a5:f8:da:c3:45:01:65:1c:31:28:8f:49:db:c0:15:
                    56:6d:44:1a:36:18:81:5b:3a:13:e6:06:b3:1b:8d:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4B:CB:09:88:A4:72:F7:FF:24:56:F4:50:4D:02:42:3B:4D:ED:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cff5eba-b27d-3274-83f0-8e14a3836930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:da00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:97:91:e7:4f:a1:12:ba:af:de:2f:3b:4d:ca:55:bf:27:8e:
         a7:b7:68:c8:6d:4a:f2:99:e7:5a:b6:2f:72:b8:6a:dd:2d:5c:
         ce:65:40:cc:c8:da:9a:88:77:69:b3:6c:93:81:b6:1c:11:e1:
         0a:8a:e1:97:2a:8d:6e:a1:e8:d0:47:bd:a8:5e:b8:e1:5e:f9:
         7d:ff:61:2c:37:c5:6c:76:17:6b:d9:73:e4:44:66:ca:81:49:
         48:35:65:45:fa:ba:1c:99:89:b2:4a:c5:69:f7:2d:59:62:99:
         85:91:9e:a6:c9:a1:bc:a1:24:f7:3e:c2:ad:de:de:ea:0c:ab:
         29:2c:95:60:c7:ec:4b:11:d5:55:cb:17:a5:af:92:55:27:40:
         54:1a:40:e3:c1:a2:52:1f:0e:44:ff:64:f4:f1:48:12:38:c1:
         53:2e:4a:99:1b:4e:f7:33:33:a6:b7:c5:62:34:1c:1b:e6:b8:
         9e:1e:ed:2c:10:6d:92:bb:47:45:42:59:26:21:77:15:0b:57:
         ef:cf:d1:85:19:33:f8:18:ff:5e:f3:eb:2e:80:ec:cd:c8:38:
         86:ea:c3:d0:37:26:84:c1:5a:d9:4e:78:56:f8:f4:b6:da:33:
         90:41:b3:84:f8:b4:65:d2:6b:de:76:f2:d2:fb:97:43:9a:dc:
         1a:f0:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:35 2025 by rpki-client