Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa
File:                     c3612ddb-d94b-3760-b29f-8208b6011a68.roa (raw, json)
Hash identifier:          hd0lxxNaQCLocmto8y5Jc5AQipn5rXeIUahajuTGPVM=
Subject key identifier:   5A:F6:21:DA:F2:CE:D1:6E:90:56:EA:2D:7A:2B:B7:F4:36:17:14:16
Certificate issuer:       /CN=34b1000a-ddde-44a7-ad9c-12d049acde17
Certificate serial:       010D0C9F43285849E654F3FFF3C75B8E9D24C880
Authority key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     17103
IP address blocks:        2620:1b::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f3:ff:f3:c7:5b:8e:9d:24:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b1000a-ddde-44a7-ad9c-12d049acde17
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=7d2194dd-5785-42c6-be0e-5bc38d921876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:04:9b:c4:47:23:82:61:c6:0c:ce:bc:17:2a:
                    6d:43:78:04:c4:21:b2:67:e7:d8:51:4d:70:07:1d:
                    e7:6e:57:58:66:50:71:c1:a9:0d:3c:22:08:6e:8c:
                    23:b5:c3:14:d7:70:5b:7a:72:ee:4f:3e:0b:d5:90:
                    0d:f7:9c:8d:d8:a9:63:9d:61:65:9f:2e:16:c0:3f:
                    ce:80:34:dc:fa:cc:80:98:e5:04:26:8c:68:86:73:
                    04:9e:20:60:04:27:df:e6:b4:8d:25:ed:80:74:20:
                    38:24:91:7c:bb:7d:ac:e4:25:3a:aa:da:18:0f:3b:
                    3b:89:8d:d0:c0:b9:d6:86:75:0b:b7:b6:9c:6f:c8:
                    ba:a6:11:ba:fe:34:bf:8c:36:f2:3e:48:77:85:e7:
                    cd:a0:bf:7d:6c:52:b4:d6:60:6c:b1:4b:a0:bc:61:
                    7a:0f:06:04:43:04:80:0f:da:59:9b:88:8c:1a:de:
                    f4:82:e1:e0:b4:c7:7b:ef:4a:dd:50:5c:2d:94:ff:
                    30:53:b3:6b:20:dd:05:91:cd:92:7d:2d:b8:f1:9c:
                    de:81:c1:6f:18:f5:2d:4b:12:a0:16:c7:15:6b:9f:
                    46:7e:0c:ee:7e:1e:28:2c:5b:40:d4:f6:4d:e9:6f:
                    a1:37:a8:35:20:20:b5:ee:55:16:6d:d2:e9:50:54:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F6:21:DA:F2:CE:D1:6E:90:56:EA:2D:7A:2B:B7:F4:36:17:14:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/c3612ddb-d94b-3760-b29f-8208b6011a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1b::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:ac:a3:bf:c7:28:a8:69:91:8c:10:a7:ad:78:49:82:b2:
         51:d0:37:e3:50:8f:fa:5a:bf:85:5d:1f:c4:a9:5c:26:a9:a9:
         52:5f:6d:fc:fa:ad:20:ea:1a:bd:61:ca:00:fb:4a:b8:f7:d7:
         2b:27:7e:23:fc:26:f6:b2:8c:c3:5e:ea:86:32:1e:c5:17:23:
         9a:8d:e1:a0:d9:5c:45:c0:b0:44:14:db:a1:72:13:8a:95:40:
         d7:48:25:ee:43:fc:8b:a8:22:6a:11:fd:7b:89:8d:f7:99:56:
         85:a8:46:bd:df:52:87:7f:05:3f:95:85:0b:c1:64:02:78:c1:
         d9:3a:ed:a4:8a:16:46:06:7b:e8:7a:05:a7:13:ec:4f:3e:9c:
         e6:3b:6c:07:ba:29:0e:2a:46:22:26:91:8c:68:4b:6d:19:d5:
         f2:07:47:cb:99:a8:ec:a5:a8:a2:a2:fe:9f:9f:32:82:86:21:
         8b:c0:ea:9e:b7:88:58:ec:7e:6f:ad:9d:6a:83:7f:ff:ac:25:
         cf:83:2f:23:d0:7d:45:43:a8:1b:b8:fa:ec:98:b8:62:08:88:
         85:6e:24:03:f8:87:06:07:14:be:41:53:60:30:2f:72:ad:c1:
         b2:dc:e6:e7:be:c2:c6:6b:6e:82:d9:b5:20:6d:d9:1c:f6:1f:
         f2:3a:b7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:29:21 2025 by rpki-client