Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e011884-2e66-3655-9b22-ab5c6720baac.roa
File:                     7e011884-2e66-3655-9b22-ab5c6720baac.roa (raw, json)
Hash identifier:          bC8Siuz8qLDcrBdADVxwVtjmDVBZ7G+VxEFO80g9T9U=
Subject key identifier:   C7:7C:B5:53:CB:14:E6:89:B4:5B:6A:F7:64:3D:71:49:E0:86:B5:49
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849F050A8754AAE126E4D275A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e011884-2e66-3655-9b22-ab5c6720baac.roa
Signing time:             Thu 22 May 2025 14:50:21 +0000
ROA not before:           Thu 22 May 2025 14:50:21 +0000
ROA not after:            Wed 20 Aug 2025 14:50:21 +0000
asID:                     19905
IP address blocks:        2604:2d81:1e00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:50:a8:75:4a:ae:12:6e:4d:27:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 22 14:50:21 2025 GMT
            Not After : Aug 20 14:50:21 2025 GMT
        Subject: CN=d494e215-a041-4ebf-946d-65942b2be156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:47:b8:2c:3b:91:3b:8d:94:ab:6b:81:af:
                    5f:68:69:1a:9e:fd:e0:25:a5:c7:c8:85:a7:44:b1:
                    f4:dd:bb:83:81:66:b6:95:ec:7d:28:a9:d9:55:ec:
                    c2:ff:57:45:8b:b8:0b:16:ac:d2:43:9a:38:56:3f:
                    d7:ca:ea:d0:3a:83:4a:b3:b2:dc:fe:21:c5:e7:fb:
                    7c:08:00:c6:60:2a:55:7d:2b:4f:36:11:c1:42:d2:
                    73:ab:11:96:06:63:32:1a:fc:d3:56:33:f6:95:93:
                    e9:15:00:a6:97:ee:9f:57:8b:94:b7:e7:02:26:6b:
                    b5:57:01:da:e7:14:1e:35:fb:0b:97:e6:fe:c8:20:
                    43:6a:ed:bf:93:27:39:dd:33:be:46:54:12:5f:30:
                    5f:d0:50:f2:40:60:a3:1c:ea:de:2b:ec:20:9e:19:
                    99:30:aa:0e:9f:f6:ee:d6:63:2b:a2:b6:9e:53:53:
                    fd:fe:09:89:f5:18:c3:08:40:d8:8f:0b:4b:c9:5a:
                    4d:6a:fc:b4:21:28:1a:1c:18:12:04:11:2c:ec:e2:
                    da:e0:d3:d3:37:ae:6c:51:15:31:25:4c:56:b8:da:
                    0e:c9:59:ff:ec:2c:63:41:d7:dc:fc:63:b3:6e:97:
                    40:39:75:f2:2e:32:74:f2:30:de:8c:78:e7:cc:e3:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7C:B5:53:CB:14:E6:89:B4:5B:6A:F7:64:3D:71:49:E0:86:B5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e011884-2e66-3655-9b22-ab5c6720baac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1e00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:72:e2:9c:75:25:e8:67:d6:5c:4e:2a:f2:73:96:91:84:
         c6:e3:97:38:68:4e:2b:96:19:e8:b7:d7:2a:32:78:c1:e4:4d:
         a3:13:2d:87:c0:90:26:cc:d1:be:aa:86:b1:6e:f6:ac:10:9e:
         07:13:c2:f3:5e:83:79:73:12:8b:d6:59:c3:e1:a1:4e:3e:e6:
         4e:1c:54:46:65:b7:31:82:fd:95:1c:c6:c7:bf:ba:4c:3d:6b:
         07:d3:a0:29:47:c5:2c:a2:79:64:9b:2e:35:d3:b5:4e:51:a0:
         12:34:1d:40:81:3e:f4:48:9b:5e:2c:77:58:4e:1d:e5:37:34:
         b1:1a:2d:a7:fe:7b:2c:05:69:b3:aa:1a:43:ff:8b:c5:4b:6c:
         fe:b2:e3:ea:0e:2a:a1:42:97:29:d0:a3:27:22:f8:e3:31:10:
         52:54:06:22:d3:cc:23:01:72:5d:92:9d:12:ee:0f:a5:fa:a9:
         e9:a7:de:24:64:b1:3c:9b:08:e7:c4:b3:ac:4d:df:f7:b1:ac:
         7f:f7:de:04:0b:71:ab:6e:28:0b:fc:34:86:de:45:35:09:d4:
         30:10:24:d1:78:61:99:f1:7f:75:f9:d7:c6:a6:ec:00:ad:ca:
         58:a8:ee:df:4c:3d:e2:bc:d3:4f:82:33:74:fe:65:b8:c6:f1:
         97:ee:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:33:26 2025 by rpki-client