Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f12744a-c38d-3447-b6d7-504c02cfddcd.roa
File:                     7f12744a-c38d-3447-b6d7-504c02cfddcd.roa (raw, json)
Hash identifier:          lqHNDNPeRcQv3WzKTHH4z2CZLqQof1SDj6j5TwTaG9c=
Subject key identifier:   D3:9C:BD:DB:C4:54:D4:90:6C:19:37:59:88:5F:4A:EC:32:13:F1:71
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AAE9E40E3201303F6E0DE1440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f12744a-c38d-3447-b6d7-504c02cfddcd.roa
Signing time:             Tue 29 Jul 2025 18:50:17 +0000
ROA not before:           Tue 29 Jul 2025 18:50:17 +0000
ROA not after:            Mon 27 Oct 2025 18:50:17 +0000
asID:                     19905
IP address blocks:        2604:2d81:2080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:9e:40:e3:20:13:03:f6:e0:de:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 18:50:17 2025 GMT
            Not After : Oct 27 18:50:17 2025 GMT
        Subject: CN=15090c47-9eb7-4730-83a9-70bda9c98991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:ac:14:39:b5:05:ac:42:49:f7:29:6c:b0:
                    c4:ba:e7:f5:91:e0:af:46:33:8c:76:75:27:0a:04:
                    b5:08:ff:64:c7:4a:43:40:c9:1f:5d:04:8d:8f:f3:
                    17:83:49:fe:1e:37:65:9b:39:31:c5:6d:e3:67:cf:
                    62:e2:46:af:5b:07:ed:5d:9f:a2:1e:40:a8:db:d3:
                    34:e4:37:22:2e:90:2a:6d:56:28:3c:7c:0c:e5:e6:
                    9d:aa:b4:ad:8a:cb:cf:6b:70:2c:93:ba:cb:1f:30:
                    74:79:d5:30:2c:19:0c:97:b1:c9:9c:30:b8:e3:ba:
                    01:8f:78:2a:f3:90:7c:7e:99:be:44:f0:dc:3a:f0:
                    0e:95:ec:71:a0:b1:8e:5a:bc:d6:34:c6:b0:32:bf:
                    a3:ad:b2:77:31:7e:f2:ab:7b:9e:aa:a2:cd:c7:da:
                    b7:38:41:b0:6f:e5:32:66:ce:4d:c2:a6:2f:dd:d2:
                    f9:0c:c9:3a:33:19:46:4b:f1:86:85:63:42:b6:65:
                    fb:91:6b:06:c2:58:34:77:48:54:42:35:0f:be:e6:
                    49:29:85:8e:ed:8e:ed:49:a1:d1:aa:13:94:83:4d:
                    82:96:84:c3:55:7c:72:2a:d3:ce:8e:45:e7:a3:a2:
                    52:95:e4:a5:e1:e5:c3:e2:f9:02:1f:e9:6e:91:df:
                    d0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9C:BD:DB:C4:54:D4:90:6C:19:37:59:88:5F:4A:EC:32:13:F1:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f12744a-c38d-3447-b6d7-504c02cfddcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:2080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:86:a2:0b:bd:22:cf:0c:df:d5:58:81:fb:93:1c:b6:74:
         e9:0c:04:5d:26:de:4e:25:e4:7d:d1:d8:3d:ad:d7:ba:e8:72:
         cb:fa:b9:4a:39:46:2c:77:5a:47:61:1f:e0:8d:e3:a2:56:e5:
         16:bc:33:23:ab:ff:8e:6a:45:15:22:34:3d:8e:6f:49:f9:a0:
         84:85:87:69:b9:fa:f0:ce:ab:31:a5:6b:e5:ea:d0:b6:e7:40:
         a3:b7:8c:c3:e8:d2:52:be:79:36:bd:e3:e5:a1:51:94:63:51:
         78:a1:51:33:46:ee:b8:4e:01:67:b2:8d:04:ed:06:5d:4e:4e:
         5f:80:2e:ba:44:fd:35:c3:31:42:fb:07:ce:6a:dd:0d:4c:37:
         3b:f8:7f:e5:15:33:ab:6e:97:ac:68:c3:2c:48:83:ec:cf:c3:
         f5:01:40:da:49:7e:14:fa:b8:be:39:92:d4:91:72:e9:91:ca:
         8e:28:1a:84:d3:22:da:53:60:9b:b0:34:d6:35:77:a5:0b:06:
         44:75:3a:0b:b1:ec:0b:4c:a7:77:bc:0f:5a:ca:6d:a2:24:99:
         a1:29:f4:44:d6:10:aa:70:f2:44:97:72:0b:89:f3:d0:0a:aa:
         9b:99:58:a1:a6:c7:87:82:1d:80:ac:55:42:01:1f:96:26:d2:
         70:94:66:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:04:14 2025 by rpki-client