Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8258bc29-2e4d-32cb-9441-06c3dcafa19c.roa
File:                     8258bc29-2e4d-32cb-9441-06c3dcafa19c.roa (raw, json)
Hash identifier:          bS99fwYhzJBB/y9Ys47kNkOPwR+/+wNdoJTjmmyd90A=
Subject key identifier:   C8:C0:35:0B:27:26:7D:AB:4C:0F:14:45:1D:62:30:82:0D:0A:14:AE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CE6C29A06D60B67A5E63C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8258bc29-2e4d-32cb-9441-06c3dcafa19c.roa
Signing time:             Thu 24 Apr 2025 11:54:53 +0000
ROA not before:           Thu 24 Apr 2025 11:54:53 +0000
ROA not after:            Wed 23 Jul 2025 11:54:53 +0000
asID:                     19905
IP address blocks:        2604:2d80:bf00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ce:6c:29:a0:6d:60:b6:7a:5e:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:54:53 2025 GMT
            Not After : Jul 23 11:54:53 2025 GMT
        Subject: CN=0f9bdedb-ce6f-44d5-86d8-3ed3a5e5e391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:27:e0:0b:5f:c4:1a:8c:1e:ba:64:55:f3:
                    5c:3a:71:cd:4c:9f:d3:e9:ff:69:ee:28:f0:d8:9a:
                    9e:8c:2a:f3:53:f8:df:fc:ea:f3:e3:ef:f4:f5:81:
                    4e:ee:6a:6a:dc:c2:7f:ed:e9:e1:1b:d3:be:d1:72:
                    8d:94:90:40:a0:0f:c8:8c:50:94:b9:d7:91:43:37:
                    50:0a:9c:d1:9d:0c:0d:fa:f5:fb:de:80:95:70:34:
                    24:cd:6e:ea:79:8b:9a:35:6c:87:30:76:d4:a3:32:
                    57:cd:ef:19:a0:a9:8e:56:a4:a7:31:06:ba:6b:e4:
                    df:49:87:7b:90:0f:d1:27:96:64:83:a8:f4:a1:ad:
                    7b:52:19:26:6e:de:02:cd:ad:64:82:98:08:4e:c2:
                    b3:41:64:80:28:7d:64:35:ab:b2:61:3e:bf:25:8a:
                    13:ea:ca:7c:d0:e2:96:e2:a7:b3:00:11:56:0e:25:
                    65:b4:9e:9b:b3:c2:7b:19:db:86:c4:64:81:00:21:
                    39:5a:94:8e:3e:7f:ea:01:2f:ec:49:a7:cb:79:d4:
                    40:3b:e8:be:5f:b3:75:92:47:0e:f5:b7:d0:ab:f1:
                    d8:7b:8b:fb:25:71:24:28:73:1f:f8:83:4a:99:aa:
                    7d:fe:ab:d0:ff:2b:99:d2:6c:8a:e5:95:9e:61:14:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C0:35:0B:27:26:7D:AB:4C:0F:14:45:1D:62:30:82:0D:0A:14:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8258bc29-2e4d-32cb-9441-06c3dcafa19c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:bf00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:60:6c:2b:49:e1:49:25:45:9a:6f:28:60:87:d5:3d:87:
         a6:6f:0d:3a:4d:ad:89:f2:83:75:cf:e3:fe:11:89:de:98:9c:
         da:db:a1:de:e5:c2:35:99:6f:57:79:49:04:ae:1b:72:e4:d1:
         fc:a5:8c:11:1f:68:95:c0:e3:d3:b0:73:2c:ad:9d:c8:18:eb:
         e1:16:33:22:2f:7d:19:76:ea:6c:6d:d5:45:6a:67:99:7f:12:
         bd:b4:8d:2f:dd:bb:a8:47:2a:13:d8:57:83:d1:19:48:a1:ee:
         cb:58:a9:08:21:f1:c6:5f:e5:8a:c2:97:ee:ed:55:24:96:b2:
         42:27:1b:d6:27:2d:89:76:87:19:99:19:4a:80:5e:a5:6e:58:
         dc:9f:8c:b9:a5:ad:da:93:e9:a9:3c:86:05:a7:f4:6e:32:f4:
         d6:d6:dd:cf:24:2c:11:28:32:88:30:1a:7b:93:d6:ea:f3:1e:
         a1:42:8c:75:90:1f:f4:2a:a7:79:05:51:39:cd:2f:7a:bc:59:
         75:3e:4b:9b:47:a7:17:70:c3:01:0b:33:25:56:5e:c3:9e:b3:
         15:6b:74:5d:32:50:9a:da:7c:64:6d:ec:ea:79:1d:07:85:2c:
         ec:c5:81:96:a0:f9:68:ce:bf:c5:cf:01:58:8d:21:46:20:58:
         83:01:43:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:47:27 2025 by rpki-client