Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/308101b7-4f7a-334d-a356-35db7e3db0fe.roa
File:                     308101b7-4f7a-334d-a356-35db7e3db0fe.roa (raw, json)
Hash identifier:          HilsUh97AXbx2AVmtf2wANsSJdXVSKxhfdW/BnML2M8=
Subject key identifier:   C1:0F:40:A9:5C:3C:4A:73:1B:76:82:E0:BA:EF:9D:A2:88:98:A7:3D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAFB2799FF97B977D59E80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/308101b7-4f7a-334d-a356-35db7e3db0fe.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11404
IP address blocks:        2605:2980::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:fb:27:99:ff:97:b9:77:d5:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=b42319cf-5535-4407-a86a-c0095d63c6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:8d:28:64:45:e2:d0:4e:10:91:8a:f9:bf:
                    97:e7:86:b9:df:a3:c9:5e:87:cb:5a:6f:40:6d:d6:
                    54:05:4b:7f:b8:df:fa:68:b1:85:cd:6f:4a:0a:ea:
                    6f:b6:04:6a:b2:c6:df:23:d4:20:b9:4a:bc:c8:f3:
                    3f:a0:f3:99:6c:4d:14:db:94:c0:91:4c:0c:9f:71:
                    47:91:cb:8d:eb:60:67:45:f9:7a:6e:78:c8:8c:ed:
                    72:17:bf:e0:a7:d4:ed:5d:e1:c7:b3:df:16:67:26:
                    15:e5:9f:29:d1:a4:4d:ee:64:42:4c:43:4a:2f:e8:
                    b5:81:f3:29:ca:ef:76:2e:0c:41:60:d2:94:fe:4e:
                    93:a3:3c:08:23:d3:60:d6:90:d5:c9:a5:d2:12:00:
                    e1:37:79:b0:b3:ce:e0:89:99:c7:89:ba:b3:a9:36:
                    7c:a6:8d:91:09:60:e5:65:0a:84:f0:6c:b6:23:ee:
                    0b:b4:19:b0:7a:f4:0c:53:7a:95:a7:30:5e:e5:29:
                    9a:b7:8b:fa:91:9f:87:66:06:47:ba:ad:9c:71:e6:
                    2e:50:19:1f:a5:a2:4a:03:4c:38:44:24:70:0d:14:
                    7e:ac:27:26:19:f6:a9:a4:86:37:5f:07:99:3d:de:
                    8c:9b:a8:bf:fd:f7:b3:d3:57:7e:ab:0e:52:26:70:
                    05:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0F:40:A9:5C:3C:4A:73:1B:76:82:E0:BA:EF:9D:A2:88:98:A7:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/308101b7-4f7a-334d-a356-35db7e3db0fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a7:34:c0:1f:d9:b2:c9:09:3a:89:48:9a:d0:86:bf:e6:73:
         7f:dd:37:e3:02:97:f3:d6:63:65:1e:ba:38:d3:84:2a:c1:12:
         f2:9c:ba:46:2f:f4:a8:07:6a:10:3a:d2:60:f3:8a:31:9b:29:
         7a:7b:df:7c:86:d9:a0:df:c4:40:3a:ed:1d:d9:3c:4e:70:90:
         fe:6a:fd:9e:64:a2:67:c3:e1:30:42:4d:25:b7:40:46:9f:75:
         5a:85:00:ff:81:27:93:d9:bd:63:bb:aa:79:1f:b7:00:8c:05:
         79:01:b7:16:c2:48:a2:41:79:a2:8f:83:7d:0b:ce:8c:05:df:
         d3:0d:ed:de:20:35:f3:4f:ae:a8:20:90:e4:35:ce:7e:a7:2d:
         81:ad:43:e1:2a:30:29:b2:b2:e8:1e:7c:6e:ba:8b:3d:66:69:
         39:f6:5a:98:3f:47:95:8e:17:26:06:3a:c1:f6:2f:bc:bc:13:
         f2:7a:96:da:95:4d:1b:f0:9b:ea:1c:80:5b:a4:97:99:16:82:
         b3:60:c8:f5:8e:2b:51:31:12:3b:0a:90:15:b4:13:c2:46:07:
         a2:08:47:ef:eb:99:ef:dc:20:b3:55:d6:74:22:71:9e:6b:ef:
         6b:4d:fc:35:0d:8d:c4:b1:69:d5:80:8b:a3:cd:d6:74:d4:6a:
         db:a1:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:59:00 2025 by rpki-client