Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/ac875a1c-9281-3995-b271-cdb8f627c087.roa
File:                     ac875a1c-9281-3995-b271-cdb8f627c087.roa (raw, json)
Hash identifier:          Ziah5Mb9F2lfXh+7Hd1jH1gmSoVSv8nFnVJF6Of8Jjc=
Subject key identifier:   99:47:47:7F:AA:40:BE:EB:E2:4E:07:E6:F9:AC:C0:68:81:C9:C3:4D
Certificate issuer:       /CN=1e83a5f9-fa06-43d8-bc5f-e73b67992160
Certificate serial:       010D0C9F43285849C0A4D90682B5563C4BF8BC40
Authority key identifier: 43:FA:C3:B7:1D:27:C1:94:C9:FC:76:50:A8:E1:97:99:C8:E3:3A:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/ac875a1c-9281-3995-b271-cdb8f627c087.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     2552
IP address blocks:        2604:3e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d9:06:82:b5:56:3c:4b:f8:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e83a5f9-fa06-43d8-bc5f-e73b67992160
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=85352e50-7ba5-44c1-a317-baaba7c726c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:a6:61:47:c2:33:e6:4f:cf:13:f1:a6:47:
                    79:08:ad:e8:8f:29:07:19:70:9c:ae:f6:bf:1b:24:
                    72:f2:7a:12:cd:41:aa:88:09:de:b3:a3:d6:f3:f8:
                    66:8a:ae:78:df:54:15:d9:16:46:42:39:69:1d:24:
                    45:de:35:7f:dd:7d:e7:01:4a:e9:7e:7a:e1:0b:fe:
                    f3:4a:f0:7c:23:f2:55:ec:bd:1f:44:55:6f:31:24:
                    e8:80:35:5f:ba:4c:5e:63:c5:a3:78:19:66:4b:e9:
                    7b:4e:13:00:49:2d:4b:2e:a5:e5:f6:37:c9:25:04:
                    71:d9:c0:1f:0d:43:82:7c:32:07:cc:2b:9d:1b:ad:
                    21:5e:6f:1c:2e:5a:2b:32:72:74:8c:a7:e6:70:25:
                    9a:05:39:b6:ff:f5:f9:2b:73:45:ea:3a:31:63:7c:
                    ac:ea:46:d1:99:5a:bb:88:a8:40:48:1e:35:60:0e:
                    24:4a:0f:51:c9:3f:9a:45:22:93:e5:80:f8:1a:be:
                    24:bc:d4:67:ec:f5:ff:3d:05:05:72:50:f2:e5:ee:
                    22:6e:6e:11:48:8b:12:bc:d4:6d:ca:59:31:76:05:
                    40:f1:cb:01:61:18:7b:7a:c4:80:74:96:88:be:81:
                    2f:0b:b4:b9:6d:3c:2b:fa:3b:2a:85:67:e7:75:19:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:47:47:7F:AA:40:BE:EB:E2:4E:07:E6:F9:AC:C0:68:81:C9:C3:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/ac875a1c-9281-3995-b271-cdb8f627c087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160/1e83a5f9-fa06-43d8-bc5f-e73b67992160.crl

            X509v3 Authority Key Identifier:
                keyid:43:FA:C3:B7:1D:27:C1:94:C9:FC:76:50:A8:E1:97:99:C8:E3:3A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e83a5f9-fa06-43d8-bc5f-e73b67992160.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:03:91:91:65:a4:73:39:c4:1f:07:e2:8e:4e:d3:8e:e7:89:
         b7:ab:0b:49:80:54:57:fa:be:9c:fa:c0:36:26:b0:31:d0:e4:
         86:03:7b:d1:0f:82:60:a0:92:7c:dd:2b:51:8b:42:19:08:5e:
         8a:b6:3f:81:5e:8e:e8:44:0a:f5:c6:4a:7f:90:f5:af:68:16:
         52:49:1e:65:9c:c9:66:ca:9c:0b:d4:b2:31:fe:b6:a6:b1:bc:
         c4:c8:a4:52:8a:75:6c:7f:f0:35:27:d5:ea:39:a9:05:91:4e:
         1b:6c:30:90:14:23:52:0e:51:27:63:23:c9:79:54:0b:b8:a9:
         68:21:d9:ef:0f:d9:05:a4:5f:c0:c1:e0:c4:fb:1b:dd:9c:e1:
         39:c7:bc:31:e1:63:ee:0c:6e:b2:c3:5d:96:9e:fb:81:25:fb:
         11:2d:de:61:65:ca:ba:b2:57:64:52:45:cd:68:2c:4a:fe:a2:
         9e:f9:f1:28:32:f0:e9:95:7d:85:9b:76:84:dd:ca:ce:65:6f:
         37:b0:54:c8:71:89:31:e4:d8:d5:b7:d6:a4:eb:44:9b:30:16:
         7a:ba:05:25:27:54:90:5c:ca:59:b5:d5:50:f9:87:6a:e7:c0:
         09:08:30:19:7d:cf:b3:40:b3:2b:82:86:75:d8:ef:87:df:da:
         c7:98:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:25 2025 by rpki-client