Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbfded7d-8483-3c8f-90c7-055e325e3c7a.roa
File:                     dbfded7d-8483-3c8f-90c7-055e325e3c7a.roa (raw, json)
Hash identifier:          bqWO4GCCiZhH7pajwOwYnpZu9UM43yXVgjHIUIbQmhs=
Subject key identifier:   FD:5A:41:18:09:CA:56:0F:67:4B:FD:52:D6:94:32:18:38:25:48:09
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A288450BFE1DC2A8835611A80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbfded7d-8483-3c8f-90c7-055e325e3c7a.roa
Signing time:             Wed 11 Jun 2025 17:59:42 +0000
ROA not before:           Wed 11 Jun 2025 17:59:42 +0000
ROA not after:            Tue 09 Sep 2025 17:59:42 +0000
asID:                     19905
IP address blocks:        2604:2d81:1f00::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:28:84:50:bf:e1:dc:2a:88:35:61:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 11 17:59:42 2025 GMT
            Not After : Sep  9 17:59:42 2025 GMT
        Subject: CN=d01003ec-f3f6-4563-8573-6c5ffb1d1634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:23:c2:28:f3:aa:48:d9:a9:3e:96:67:f4:
                    b5:b2:66:e1:a5:11:10:74:cf:d8:8e:bb:e6:e0:44:
                    37:74:8c:8b:54:fe:44:d2:02:63:f0:39:9f:d8:ba:
                    b9:fc:bc:62:9f:5a:4b:e7:d0:f5:7f:8d:12:fa:ec:
                    f7:44:db:21:59:e4:25:ac:f0:d6:7d:9b:d9:99:fa:
                    2e:37:48:9d:fe:2f:e3:e1:2e:4e:ad:1c:9e:c5:6f:
                    0c:7c:a2:38:81:91:12:7c:33:4b:16:2c:b0:03:c0:
                    bc:59:ac:ff:a7:f6:81:7d:f3:90:cb:ab:bf:f4:2a:
                    35:0a:b6:e3:01:95:f7:4e:bf:ad:7e:5a:7f:aa:ee:
                    6b:56:e8:d3:d1:54:dd:ab:fb:80:06:0e:89:2a:14:
                    71:37:76:8b:e0:e6:2b:e6:46:3c:a8:33:30:f2:3f:
                    25:98:bf:70:1a:70:40:e1:d8:d4:14:24:3e:10:21:
                    3c:3b:b6:85:5e:d8:ab:47:5e:41:4c:44:af:70:5b:
                    62:99:a0:c7:31:4b:4b:84:6f:e2:58:86:b3:58:c3:
                    8e:44:35:2e:85:a7:5d:b5:38:1d:c1:53:ba:86:0e:
                    8a:c8:c9:ac:57:61:b5:58:65:31:48:fa:1a:12:54:
                    f1:25:9f:37:17:2b:fc:61:33:73:82:b2:8c:19:d5:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5A:41:18:09:CA:56:0F:67:4B:FD:52:D6:94:32:18:38:25:48:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbfded7d-8483-3c8f-90c7-055e325e3c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1f00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:9a:9a:ae:2a:63:62:1f:81:82:65:9a:74:50:76:7d:5d:1e:
         b9:31:ae:35:db:e8:6b:53:0f:78:6f:97:7d:7d:f8:30:f2:04:
         25:26:85:7c:1c:e5:57:06:af:62:d3:ff:a1:ea:1e:c4:ff:b0:
         3a:4c:0d:35:57:5b:17:68:65:f3:ea:01:c6:ca:8f:dc:50:3f:
         5a:a8:97:ba:37:ec:e0:17:ef:88:e2:00:a8:19:15:62:21:e4:
         a6:b2:f2:09:54:10:59:c4:22:c7:03:31:69:25:18:71:53:12:
         94:31:81:65:03:50:30:72:3b:73:46:b7:46:72:1f:4a:7d:80:
         94:54:64:73:26:20:9f:6b:8d:9a:a1:75:5f:92:37:6b:c6:c5:
         61:e8:df:8e:3b:c1:15:0d:66:ad:8e:f3:89:bc:34:8f:d5:39:
         79:4e:ac:d1:77:a5:9a:db:8d:ad:79:b0:34:f9:b6:ff:52:24:
         e9:01:fd:21:2e:7b:16:95:61:f2:13:e7:52:ec:fc:6b:dd:4a:
         51:e5:da:97:62:f0:96:23:e1:46:18:e4:2b:18:ed:a9:91:ea:
         99:55:6c:a5:27:72:56:a1:d0:c1:6b:d9:6d:6e:85:25:a0:4e:
         4b:10:8d:30:4e:e9:bf:c4:f3:e0:ca:38:34:ca:1f:8a:a7:9a:
         85:07:a0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:57:10 2025 by rpki-client