Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa
File:                     7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa (raw, json)
Hash identifier:          XhtDLgFHNZqYHVkl6TeeHjqBh82IzU93pf+faMArHEM=
Subject key identifier:   25:54:2C:6C:99:B9:2D:D1:D3:37:40:CC:9F:51:62:8C:7D:A6:98:8E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858499BF55F74092BDA22C2D2E1E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa
Signing time:             Tue 22 Apr 2025 09:38:31 +0000
ROA not before:           Tue 22 Apr 2025 09:38:31 +0000
ROA not after:            Mon 21 Jul 2025 09:38:31 +0000
asID:                     19905
IP address blocks:        2604:2d80:d900::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9b:f5:5f:74:09:2b:da:22:c2:d2:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 09:38:31 2025 GMT
            Not After : Jul 21 09:38:31 2025 GMT
        Subject: CN=2f646d77-d46d-4705-972d-5fa185883f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:a2:ca:ef:d0:64:a6:f7:21:a1:ff:97:25:
                    a8:13:25:1a:64:7d:00:e2:5e:a0:29:04:79:52:1c:
                    54:a9:f4:3e:66:5b:9b:39:8d:f2:0f:6a:1b:a1:b7:
                    17:cf:11:24:1d:73:64:0c:57:57:3a:ea:30:c4:30:
                    d3:ab:17:8d:f6:ba:e8:1f:5c:15:34:5d:88:37:13:
                    15:7b:0c:bb:d7:b0:4b:25:c8:74:6a:2a:e2:ce:a8:
                    34:49:99:00:4b:e2:c5:b9:6d:eb:6c:aa:c6:18:ce:
                    72:25:2d:09:d5:62:68:2e:ca:f2:32:a0:ac:00:5d:
                    2d:9f:f3:a4:e9:15:d8:11:db:7d:9e:1c:e8:75:22:
                    07:07:e7:9b:66:5f:cc:c1:0c:6d:fb:64:63:28:82:
                    5e:aa:b1:0d:cb:58:50:ba:6c:fc:31:da:95:4d:94:
                    d5:4e:cd:e4:36:29:50:a8:78:2b:29:0a:5a:3f:43:
                    8d:58:01:79:d7:e1:5a:88:0a:cd:ca:73:ac:08:9d:
                    3b:77:83:d7:76:85:5a:df:ad:71:68:b6:75:2f:bd:
                    b2:04:e2:8f:88:b4:35:d5:da:14:c4:45:0c:3b:5e:
                    87:0f:74:9f:82:49:d8:7e:28:87:bc:14:5f:20:46:
                    76:bb:a9:3c:d5:30:2b:0e:eb:25:13:05:38:b4:11:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:54:2C:6C:99:B9:2D:D1:D3:37:40:CC:9F:51:62:8C:7D:A6:98:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7730a1ca-e343-3d5c-82eb-7284fca3efbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:d900::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:41:28:85:4f:6d:c4:2a:32:04:7f:8a:0d:1c:c1:b6:2f:8e:
         26:58:41:93:3d:3e:5c:22:ef:f4:71:4f:ac:e1:05:99:23:ba:
         01:c0:45:86:02:4a:ea:54:df:25:9d:28:31:0d:dd:1e:fb:29:
         51:ed:e3:5f:14:fb:e3:9d:3a:58:ab:53:60:d8:19:4f:6a:06:
         59:29:a3:34:f0:73:c7:02:fc:52:79:24:c8:d0:29:50:c0:0b:
         17:63:cd:86:6f:35:8f:0d:9f:ca:f1:de:f6:15:f4:1e:a1:f9:
         07:fb:2f:d4:ca:5b:25:79:c7:cd:b7:59:7f:d9:6f:d7:77:e0:
         35:e7:a3:84:33:1c:4a:f9:26:5e:65:51:9e:83:95:9f:05:d7:
         4b:46:85:ab:bc:79:e6:63:12:f7:a5:3c:e3:97:ae:d6:28:46:
         39:72:89:34:57:e4:a0:fa:f7:d7:60:d2:34:d4:9e:7d:9c:25:
         cc:af:bb:3f:8a:ee:c1:ca:3a:92:6a:6b:c5:77:d7:85:56:e1:
         3a:f5:bd:e4:ab:81:fb:b1:e8:73:be:59:db:4c:cf:81:98:81:
         c9:22:4a:92:f1:c6:93:1f:bd:f3:b9:d4:42:3d:86:1b:38:a6:
         9c:65:95:b7:e2:73:f9:eb:44:13:97:f0:92:e2:4f:59:cb:32:
         84:2e:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:58:37 2025 by rpki-client