Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68b049eb-2f90-32da-9fd9-613b14eb1dbf.roa
File:                     68b049eb-2f90-32da-9fd9-613b14eb1dbf.roa (raw, json)
Hash identifier:          rjZrERv8QitAq7r07QnnlulTYyC6H9v0yODPzzgET34=
Subject key identifier:   16:40:13:C0:E5:73:F3:CE:77:3B:BC:56:24:7F:10:EE:C6:21:CD:91
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CE3917407F73035C884300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68b049eb-2f90-32da-9fd9-613b14eb1dbf.roa
Signing time:             Thu 24 Apr 2025 11:54:29 +0000
ROA not before:           Thu 24 Apr 2025 11:54:29 +0000
ROA not after:            Wed 23 Jul 2025 11:54:29 +0000
asID:                     19905
IP address blocks:        2604:2d80:d00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ce:39:17:40:7f:73:03:5c:88:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:54:29 2025 GMT
            Not After : Jul 23 11:54:29 2025 GMT
        Subject: CN=f4b71637-d64b-4b82-b2d3-95641f7a7f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c3:20:fb:2d:80:61:c0:23:f1:a5:5e:ff:aa:
                    af:1b:ce:0c:e1:56:7b:4f:6e:3d:a9:cf:9f:d2:37:
                    dc:12:17:88:8d:ab:e6:3a:91:61:f2:46:fb:95:d2:
                    cf:f5:d6:16:ec:0d:10:32:49:35:b7:15:10:09:e6:
                    a2:86:d3:cb:72:cd:03:fe:23:e5:0d:a0:f5:cf:44:
                    c8:09:12:f2:05:5f:b2:4e:34:be:60:fd:f6:37:bb:
                    f8:81:d5:07:1d:09:aa:c0:f3:02:27:f0:1b:b9:92:
                    83:5a:f3:ab:31:da:ed:fe:f2:cf:04:31:e7:54:41:
                    9d:48:4c:8e:ef:fb:ea:77:b7:2c:ae:47:aa:db:42:
                    64:ae:7d:e9:3d:2a:88:7a:bc:3d:22:74:38:69:66:
                    60:0d:51:63:1c:00:30:b1:13:e0:34:f3:28:df:03:
                    a6:a4:8c:9f:df:d9:ef:96:a9:e6:f1:cc:8d:ea:b8:
                    f9:9e:f0:02:1a:61:52:97:fc:52:35:9e:c1:a5:bf:
                    2d:45:b1:e6:84:16:a1:9a:25:8c:9b:50:ba:1a:9a:
                    10:62:63:c2:b6:95:a1:c0:cf:6e:16:55:60:ac:96:
                    19:ad:c7:47:aa:7d:86:8b:cf:8a:27:53:93:4b:61:
                    1d:77:3e:95:01:3e:64:46:bb:33:37:c3:e1:fd:e2:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:40:13:C0:E5:73:F3:CE:77:3B:BC:56:24:7F:10:EE:C6:21:CD:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/68b049eb-2f90-32da-9fd9-613b14eb1dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:cf:2c:9f:2e:84:6d:e5:5e:2a:ac:29:8b:cb:c2:34:06:
         09:98:8f:e3:66:96:6f:de:72:61:e0:0b:8b:e6:4b:ff:e5:2b:
         67:63:59:83:a1:0e:4d:c0:0d:a2:1c:a9:fe:00:2e:40:bd:a7:
         8e:ee:1f:e1:7d:3b:69:86:ea:8b:1e:d3:d1:5f:1f:79:a5:53:
         5b:b6:49:de:cd:a7:36:dd:75:bb:0b:4e:3e:69:f7:0c:4a:f6:
         07:91:65:d6:22:ef:15:ef:21:ba:ff:cc:3e:3c:96:3b:cf:87:
         64:51:0e:27:0a:ae:ec:2c:07:14:dd:28:cb:23:0a:8d:26:76:
         5b:92:84:02:69:8c:00:2b:eb:bb:f6:bb:88:12:34:5f:26:52:
         86:97:4e:a8:35:7a:a2:a0:b2:15:5c:e3:b5:90:c5:40:46:46:
         b1:f4:82:49:76:10:ad:f3:47:c9:b6:2b:56:b7:d2:21:2f:8d:
         43:fb:90:4a:2b:41:21:b1:22:46:58:35:6a:4e:e9:a0:6a:5c:
         7b:63:f2:20:18:5a:6a:82:93:77:b5:9f:2c:a9:7d:83:4a:b5:
         f8:53:19:3a:ca:29:f1:a6:72:12:a2:8f:c3:47:85:38:16:25:
         8a:73:7e:3d:48:61:a7:ff:b4:02:32:8b:1e:10:6a:3b:ee:81:
         7c:34:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:54:04 2025 by rpki-client