Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/4bf0d06d-afda-368d-937f-3921475b508b.roa
File:                     4bf0d06d-afda-368d-937f-3921475b508b.roa (raw, json)
Hash identifier:          5yI9DkqENKn43fzwEKREd2QW0Ea3yTVviCSxsznbv5I=
Subject key identifier:   55:A3:EC:8F:8D:4F:8F:4C:C2:B0:58:33:85:CF:62:F7:51:D5:7F:44
Certificate issuer:       /CN=541b7255-dab8-4786-bbe3-843423870307
Certificate serial:       010D0C9F4328584A373397F918F82D280880E4C0
Authority key identifier: 85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/4bf0d06d-afda-368d-937f-3921475b508b.roa
Signing time:             Tue 17 Jun 2025 00:14:11 +0000
ROA not before:           Tue 17 Jun 2025 00:14:11 +0000
ROA not after:            Mon 15 Sep 2025 00:14:11 +0000
asID:                     400956
IP address blocks:        2604:1460:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:33:97:f9:18:f8:2d:28:08:80:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541b7255-dab8-4786-bbe3-843423870307
        Validity
            Not Before: Jun 17 00:14:11 2025 GMT
            Not After : Sep 15 00:14:11 2025 GMT
        Subject: CN=08b3ab10-77ec-4d14-b46b-efc371d49396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:c1:33:a6:02:3e:78:5d:d4:13:48:7e:2d:
                    32:f5:10:c9:de:9c:ba:18:84:96:c5:bf:68:c6:90:
                    fe:e1:a6:f3:c7:05:87:b6:a9:1d:7f:6b:04:8e:57:
                    47:63:4e:1f:8f:3b:26:64:f9:af:11:07:03:d3:66:
                    35:08:72:a5:9c:10:3d:77:af:6d:33:0f:69:71:bf:
                    c1:77:f7:0b:6a:c7:af:02:d0:9c:ac:d9:b8:e2:c3:
                    e9:69:b2:ab:aa:64:ce:4f:6b:40:c1:df:2c:63:8e:
                    5d:7c:90:b8:ba:0c:9c:ea:1d:61:e1:60:76:37:c6:
                    1a:ac:7c:9e:4d:01:06:1e:68:3d:08:85:00:7d:0d:
                    3e:88:23:d8:87:cc:5e:2d:0e:f0:d4:36:71:3d:10:
                    47:8d:d6:44:38:2c:01:5e:ad:c8:c5:bc:82:bd:14:
                    cc:78:af:98:57:da:99:3d:e1:9c:b2:6d:f6:4f:e5:
                    21:d6:ce:0f:e6:6f:6d:23:f6:7c:a0:ac:92:51:d3:
                    49:b1:c0:d7:b4:68:89:96:9b:6c:5a:d3:bd:cd:c5:
                    df:33:e8:ef:3d:76:ca:66:b1:1a:0a:0f:ea:06:7a:
                    be:88:d7:5b:cd:12:45:aa:a9:75:3b:a2:3d:61:6f:
                    6e:b6:a2:ec:03:a3:52:41:a9:34:1e:d9:8e:6e:a3:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A3:EC:8F:8D:4F:8F:4C:C2:B0:58:33:85:CF:62:F7:51:D5:7F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/4bf0d06d-afda-368d-937f-3921475b508b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307/541b7255-dab8-4786-bbe3-843423870307.crl

            X509v3 Authority Key Identifier:
                keyid:85:FF:E3:42:77:91:43:69:FF:ED:3B:44:02:A3:D0:04:52:68:27:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/541b7255-dab8-4786-bbe3-843423870307.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1460:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:12:ed:ea:16:55:f0:bb:f0:d8:3d:d1:8d:56:8c:6d:f4:5d:
         30:01:65:9d:10:b2:76:92:a5:28:a9:b3:bc:e4:dd:14:f9:a7:
         66:ff:85:9c:ad:54:ba:cb:1e:3c:7e:97:66:9c:c0:2f:8c:92:
         85:a8:4e:f6:ac:a6:e8:d4:28:94:b9:8f:b2:4e:b9:27:a5:a6:
         8f:c5:46:1f:8f:e7:4a:71:e4:77:3d:11:20:70:71:10:7f:bf:
         10:91:11:88:bb:bd:85:d5:ab:23:50:f9:cb:b2:e5:3a:34:ad:
         40:98:fd:e9:05:22:e3:81:13:d8:97:70:16:95:a4:a7:60:7d:
         a2:be:ec:13:ab:21:38:36:34:10:61:01:cd:a5:e8:5d:44:68:
         5b:c9:d0:20:ab:a1:80:38:ed:13:f0:e8:2e:38:72:4e:b6:00:
         4a:18:f2:a8:31:76:3f:3d:8e:fb:2f:af:15:d1:ec:7e:38:b4:
         d8:06:76:72:04:91:af:e3:de:c8:2b:56:6b:85:18:c4:78:ba:
         40:96:a4:01:d0:58:a9:b7:5f:11:db:c3:f7:f7:45:7e:bb:4c:
         e2:d2:bc:56:71:0f:1f:5b:a1:4b:4e:42:f9:59:de:6f:19:e3:
         cc:82:95:2f:40:ce:7d:48:9f:1e:1c:99:44:57:b9:ef:8d:75:
         db:58:a1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:00:54 2025 by rpki-client