Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ad5db08-2f41-3d76-bd6a-b31c3aa7ffa1.roa
File:                     8ad5db08-2f41-3d76-bd6a-b31c3aa7ffa1.roa (raw, json)
Hash identifier:          3ordbOtHyZYKnCIArdn26e/xDn5qyquzpc3D212VCOE=
Subject key identifier:   AE:BE:98:9C:77:74:75:4F:1E:D1:0C:6C:29:F5:95:6E:49:43:ED:E3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A156931EFEE418ED587A302E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ad5db08-2f41-3d76-bd6a-b31c3aa7ffa1.roa
Signing time:             Wed 04 Jun 2025 21:44:42 +0000
ROA not before:           Wed 04 Jun 2025 21:44:42 +0000
ROA not after:            Tue 02 Sep 2025 21:44:42 +0000
asID:                     19905
IP address blocks:        2604:2d81:a80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:15:69:31:ef:ee:41:8e:d5:87:a3:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  4 21:44:42 2025 GMT
            Not After : Sep  2 21:44:42 2025 GMT
        Subject: CN=43b43267-2273-44e0-b8d6-8bd442f3ff98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a4:0e:b2:f5:b3:04:55:c5:e0:27:8c:6c:85:
                    60:35:1d:71:bc:2f:74:70:0e:9b:06:03:d2:f9:56:
                    7d:81:99:70:23:4b:1a:26:f9:c7:03:6b:0f:89:05:
                    79:3e:46:6f:3d:3d:fa:f1:c5:c1:c2:c9:fe:c2:b7:
                    82:0b:7d:1c:7a:c0:5a:84:b6:c1:e4:e0:4d:e7:d2:
                    9d:8e:4d:cc:d4:aa:a0:ad:c6:1a:57:7c:07:3f:dd:
                    22:60:5c:ea:72:e6:30:6d:c6:20:2e:5f:29:26:6f:
                    13:d9:48:09:c5:51:ca:04:7b:e8:dc:ec:b4:7b:bf:
                    9f:4e:54:33:ca:ee:ea:c2:2e:b2:01:5d:db:fd:16:
                    8c:ce:e8:f3:d7:63:57:a5:9d:02:d5:a0:52:d8:e5:
                    bc:ca:87:d7:2c:12:97:74:95:51:76:a0:88:d4:5f:
                    5a:d9:f5:e0:2d:e9:2e:35:28:4a:cf:5e:03:24:ec:
                    59:15:0b:ca:5d:11:28:7a:48:e7:1d:47:72:71:29:
                    bf:2f:f7:d6:01:31:38:7b:3f:91:ae:70:fb:72:f6:
                    fe:c9:4c:b2:8e:eb:fc:13:e7:e2:98:23:0b:73:43:
                    73:b5:00:c6:88:1c:7b:32:9a:54:01:c6:29:90:36:
                    b0:80:e9:df:d9:da:47:cd:ca:07:eb:b1:87:4d:6a:
                    52:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BE:98:9C:77:74:75:4F:1E:D1:0C:6C:29:F5:95:6E:49:43:ED:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ad5db08-2f41-3d76-bd6a-b31c3aa7ffa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:a80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:08:d3:0d:71:13:a9:33:63:45:1f:0d:dd:ba:63:1c:ef:
         e8:1c:d2:da:41:14:1f:07:a8:6c:d4:2a:47:0b:99:a1:8a:d8:
         89:a4:2a:59:a9:aa:84:65:70:f2:d2:1d:b0:25:2a:91:51:00:
         62:31:79:f2:7c:c3:00:f1:9e:1d:c0:99:30:18:31:b5:d4:43:
         da:26:14:c2:19:da:4c:3b:67:81:c3:81:a9:27:7d:01:77:a0:
         12:40:13:6b:7a:4a:c6:9a:62:4f:b5:d6:ba:46:33:3c:55:8c:
         7f:4f:6f:7c:3d:14:48:11:25:45:76:ed:f5:98:26:3e:96:a6:
         33:bd:14:c6:34:90:e4:c4:67:a3:62:99:b2:9a:42:ae:0d:0f:
         ef:82:90:4e:01:50:ab:9f:43:b3:a3:4b:bf:91:b7:16:4b:9c:
         f3:be:c3:ea:e5:74:9e:1c:a3:ee:d7:51:7d:55:c2:ba:12:05:
         f1:80:1b:10:41:30:1e:50:8f:55:d1:5b:ca:57:b0:00:3d:b6:
         41:b2:f1:ad:05:0c:94:57:1f:7a:fa:1d:92:19:10:ad:97:62:
         76:04:c5:22:88:36:b7:22:ce:7b:29:5d:f9:c9:b0:06:67:ae:
         86:5c:17:12:f7:04:19:cc:c4:a1:87:a8:1a:3e:06:9c:36:70:
         0c:43:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:41:38 2025 by rpki-client