Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa
File:                     628a1e81-1f9a-3aa4-a9ab-b91409298406.roa (raw, json)
Hash identifier:          GR31nsIwD3rjN3MWY2fSW5zAfhooPJWqek7upVgqeUw=
Subject key identifier:   5E:F2:69:8E:77:E0:C0:7B:DA:F5:20:D7:4A:BF:3D:5A:0F:2E:3C:29
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A8146302FCF9BA96F190A4680
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        2604:2d80:2300::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:30:2f:cf:9b:a9:6f:19:0a:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=bb56e696-5bde-4a70-ac67-2c441693a402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:17:00:b0:e1:eb:ca:43:81:93:98:ea:01:
                    b0:31:a4:fe:e0:00:61:35:50:59:c9:87:dc:f4:01:
                    17:a9:5d:dd:c7:f7:f9:8d:15:6f:55:ff:0c:67:9d:
                    ee:cc:ff:eb:a2:cf:a0:93:b7:47:47:da:74:24:e2:
                    05:c8:ae:ab:d3:e8:04:4b:68:b1:5f:5d:56:88:4f:
                    fd:4c:e6:46:ff:27:43:38:87:36:9a:db:7b:91:7a:
                    28:50:f3:01:03:1d:16:3d:a2:8c:ee:53:55:10:96:
                    8d:e8:56:0e:23:12:ca:1e:7d:44:7d:99:18:50:40:
                    d2:a4:77:a3:8e:c9:7d:7f:9b:3e:42:16:07:79:b7:
                    8c:ed:49:cf:c9:72:1b:da:52:8e:17:f2:ce:3b:37:
                    f9:bd:8b:9d:b5:a9:99:75:53:68:0f:e2:c3:4b:c0:
                    7c:12:71:28:26:82:4a:8e:94:68:40:2c:ea:df:b3:
                    8a:87:c8:35:d8:01:3a:07:bc:af:1a:38:d5:9a:4c:
                    50:ce:9b:4f:73:8b:46:37:43:d8:17:c3:92:ca:c1:
                    61:f8:0a:81:fb:ac:7a:f4:55:26:1a:3c:cf:f9:83:
                    7d:0a:41:ab:bf:3f:00:ec:cb:fe:76:95:5a:a2:cd:
                    e5:58:62:81:dd:7e:85:e0:88:20:30:0b:2d:c7:8e:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F2:69:8E:77:E0:C0:7B:DA:F5:20:D7:4A:BF:3D:5A:0F:2E:3C:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/628a1e81-1f9a-3aa4-a9ab-b91409298406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:2300::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ff:84:a1:0c:ac:b9:1b:55:39:9d:cc:66:ba:2d:73:86:87:
         7d:e4:f4:93:40:6d:7f:cf:d4:79:75:cf:04:ac:39:3c:47:50:
         f3:b4:eb:83:b3:e8:92:47:30:87:0e:42:87:c0:eb:b4:c3:61:
         a0:2e:35:a0:2e:3f:59:a1:eb:4c:9f:bd:a5:01:99:0c:4c:3b:
         ad:5f:6b:6d:d9:37:e8:c6:51:e4:1e:d3:7c:39:b2:70:bc:80:
         9a:76:e2:ac:86:5b:87:39:21:53:d8:88:4d:84:47:dd:43:7f:
         75:b7:85:60:e0:d9:b5:76:62:97:3c:a9:81:11:26:dc:63:17:
         15:5d:fc:7a:6e:90:ab:24:6f:89:d7:89:a7:be:e6:0e:92:6e:
         71:08:db:fb:52:17:79:c0:6d:b7:9d:54:08:ad:67:8c:af:ff:
         c8:46:de:23:d4:5e:a5:a1:77:9f:0d:51:66:a0:66:3e:ff:12:
         24:af:b3:b0:a5:a2:09:e0:18:b7:45:35:0c:35:cb:af:6c:7e:
         70:a1:19:4a:ae:dd:90:02:d0:f6:2d:15:9f:b7:7e:e5:f0:54:
         9f:9f:ea:eb:00:93:e0:a0:8d:f6:5b:d7:8b:d0:42:e4:c6:af:
         f8:26:7d:96:e9:b3:b6:37:e9:32:5f:7f:57:23:0e:56:82:06:
         3a:ad:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:19:04 2025 by rpki-client