Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa
File:                     d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa (raw, json)
Hash identifier:          PIhTEfRzyhYSK1IYRTYW3/5hTjnLeG1FRc6xUowNBlU=
Subject key identifier:   DB:8E:3C:29:FC:F3:BB:A1:A1:08:80:86:94:58:9B:07:63:F1:77:8C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A1CE48A3DEE297674561D914
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa
Signing time:             Thu 24 Apr 2025 11:54:36 +0000
ROA not before:           Thu 24 Apr 2025 11:54:36 +0000
ROA not after:            Wed 23 Jul 2025 11:54:36 +0000
asID:                     19905
IP address blocks:        2604:2d80:7880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ce:48:a3:de:e2:97:67:45:61:d9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 24 11:54:36 2025 GMT
            Not After : Jul 23 11:54:36 2025 GMT
        Subject: CN=fa4053a6-4451-42ea-a7aa-97487036269d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:04:20:b0:33:5c:ac:44:21:f3:f7:18:1d:
                    c1:2d:ed:5b:49:00:eb:4c:f6:66:ab:26:2c:bf:bc:
                    ec:26:cd:eb:63:9a:85:71:94:c0:4a:d0:f7:c8:de:
                    b4:32:be:27:ef:0b:ed:60:20:72:e2:06:92:d5:18:
                    25:b9:3e:63:48:8e:0d:ca:64:56:0c:a0:4f:79:b3:
                    91:9f:62:9f:03:0d:96:57:fb:7b:bb:95:aa:d7:0e:
                    f1:48:af:61:c4:9f:37:8b:8d:d2:8e:fe:0d:a1:f6:
                    df:c0:bc:86:ca:67:92:4a:0c:b0:9c:b5:1c:f0:66:
                    e2:d1:cb:4b:4a:77:be:74:e4:9e:89:9e:54:3c:f9:
                    36:1b:4b:1d:7d:7e:aa:c0:53:5a:e8:a9:49:e7:a4:
                    25:80:b9:ab:f3:17:01:e6:61:00:f2:8a:f6:33:29:
                    ff:ef:2a:57:fd:85:af:a0:a7:74:16:8a:43:68:3a:
                    0c:ea:1e:32:68:85:f2:35:a1:34:34:18:e2:c2:be:
                    34:63:8d:1d:dc:78:a0:c8:43:cd:2d:bd:1b:7d:8a:
                    a3:b8:fc:fe:26:e0:aa:f6:dd:91:f2:29:ac:39:a2:
                    f4:13:ff:a6:a1:95:87:90:e2:97:78:a1:71:66:45:
                    e9:8b:cd:a6:6f:16:42:4a:56:0c:93:d8:01:69:e2:
                    90:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8E:3C:29:FC:F3:BB:A1:A1:08:80:86:94:58:9B:07:63:F1:77:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d438b872-f8d7-30b6-a2f2-91cecf24a1d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:7880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:c6:99:ba:42:d8:6f:0b:81:fb:6c:80:a8:12:ae:3f:e8:
         e6:ca:63:0a:64:55:d6:30:c5:76:94:b8:02:24:7d:02:b8:13:
         de:0e:05:fb:ad:d2:58:48:ec:bf:4f:16:c0:0f:c2:f3:67:97:
         cc:b2:2c:a4:f6:61:34:22:92:fb:bf:4b:ff:fd:e1:e2:84:bd:
         ca:0e:dd:b8:db:82:ba:42:01:a3:b2:1a:55:ca:ff:c9:91:72:
         08:6c:39:2b:d6:07:08:5e:20:9b:4e:a4:98:46:55:0b:84:3a:
         6d:2a:ac:ba:a1:18:da:03:cf:4f:8d:01:30:65:5d:7e:ca:c4:
         42:70:c5:3a:6e:8a:dd:22:30:be:14:b0:f9:8a:71:5a:8d:b1:
         20:4b:62:69:d6:4b:f1:30:a6:7d:ee:b5:2f:92:5a:0a:41:f4:
         2d:5e:a9:52:6f:3a:b4:f6:08:85:99:71:b6:19:83:45:45:ce:
         f8:cf:0f:4a:04:83:da:79:38:6f:56:1e:10:2a:f5:93:43:5f:
         4f:48:d9:10:7f:05:5f:6c:23:42:c0:7e:41:f7:3d:d4:07:8d:
         7d:16:fe:6d:ed:50:e7:72:e2:39:e6:3f:9c:3b:c6:54:be:2f:
         b1:f9:8c:68:6b:5e:c1:cf:6e:7f:f3:dd:60:5c:57:1f:ac:56:
         d7:f8:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:31:48 2025 by rpki-client