Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa
File:                     379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa (raw, json)
Hash identifier:          Ni/U38Llhs48FjO2KkNOy8yFADzkH96rbCS0xIdrX9I=
Subject key identifier:   5B:E5:50:B9:5B:D5:48:58:07:EE:ED:1C:03:40:EF:11:AF:CD:97:5C
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F43285849CBCF84413903570F50D1E680
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        2604:ba80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:84:41:39:03:57:0f:50:d1:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=f0bb24b9-07ff-4f68-8d46-70249df047c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:f8:5d:f4:f2:28:52:a2:d3:bc:38:73:0a:
                    1c:31:7a:3e:4c:97:e3:bc:53:41:ef:aa:22:97:99:
                    6e:68:db:1b:ac:8d:8f:75:3a:ad:10:77:49:1d:4e:
                    f3:65:01:25:a5:8a:a7:3b:43:50:94:b5:7a:73:b6:
                    3c:75:64:b7:ca:f2:49:f0:6e:89:85:6a:54:2a:c7:
                    fb:7f:44:eb:46:4b:10:d3:84:03:94:00:21:7f:1c:
                    a5:1e:e4:b1:8c:a5:23:fb:ab:81:c3:e7:5d:9e:e6:
                    0d:2c:c6:2b:f0:ac:df:71:fb:f4:ce:08:40:a7:c1:
                    74:2e:dd:38:de:dd:35:23:45:c0:85:ac:c3:e0:90:
                    88:34:22:05:39:ed:44:c6:6a:ef:30:10:d4:1f:81:
                    a7:cf:13:16:fc:34:33:c1:a6:55:9b:3b:78:64:4b:
                    7f:96:da:a7:cb:d5:19:c7:f5:3f:d7:46:de:ec:86:
                    e7:2d:67:4b:1d:e4:1a:c0:ad:66:bd:b9:3f:b6:d9:
                    14:b0:b1:0f:46:e6:44:7a:99:c5:a4:b5:8f:8e:f9:
                    52:4b:1b:d5:da:b2:3e:2e:63:63:76:6a:1c:16:f0:
                    40:69:f9:6b:5b:d9:05:e3:2a:be:7d:06:77:b7:0c:
                    54:18:29:c4:f1:f0:20:da:c5:2f:c1:82:92:61:62:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E5:50:B9:5B:D5:48:58:07:EE:ED:1C:03:40:EF:11:AF:CD:97:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:44:d4:b8:06:17:2b:47:9e:e0:09:3b:f5:a0:b9:a2:d8:
         b0:4a:d7:36:e1:eb:df:45:3f:4b:17:6e:44:a4:5f:e0:d6:bb:
         b2:c0:5f:8d:71:96:ef:2d:05:3a:3f:f1:c0:c2:57:13:87:01:
         da:e3:51:c5:0a:d8:24:28:dc:ed:25:8a:4a:c0:e6:8d:cf:9e:
         52:c8:e3:48:e0:da:8f:58:04:75:21:1b:1d:35:1d:d9:04:c2:
         1a:68:52:44:7a:df:df:f8:ce:98:0d:a9:43:cf:2b:11:b3:ff:
         cd:f1:1c:d2:e3:a3:27:2f:6f:59:ca:0e:9e:c7:02:82:f5:f6:
         e0:7b:7b:05:b0:cd:b0:a2:aa:f8:59:8b:c1:5f:b6:ce:25:a3:
         02:9d:4c:3f:ec:88:e1:ed:db:d2:58:7c:b1:9f:fe:42:57:9f:
         40:22:38:73:a1:14:8f:3a:e2:cc:2f:24:bc:50:1b:a9:9d:ff:
         c4:31:c4:70:de:b6:3a:65:0b:ba:e3:61:2b:d5:d5:f5:e4:59:
         6a:7c:80:df:46:fe:b7:f4:e3:dd:cc:70:a2:5b:51:ff:5e:c0:
         79:15:b7:6d:39:70:bd:bc:05:ec:d1:f0:f4:6f:fb:c0:c0:c0:
         68:69:3b:4a:a3:9d:d8:84:f1:37:28:4d:5f:63:0f:df:6a:81:
         52:65:4b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:27:09 2025 by rpki-client