Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/62db9134-46d0-3d61-a624-4552ace1642d.roa
File:                     62db9134-46d0-3d61-a624-4552ace1642d.roa (raw, json)
Hash identifier:          Qds6Rp+GsM3E+GUGlAhiJZLoAVa+2NOgzDYG5MV5X60=
Subject key identifier:   58:25:C7:FD:75:C5:79:B5:EA:FB:46:57:EA:3E:31:D5:8E:A2:90:02
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849C47CBE63A2DA0634B7A9A000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/62db9134-46d0-3d61-a624-4552ace1642d.roa
Signing time:             Tue 06 May 2025 22:03:36 +0000
ROA not before:           Tue 06 May 2025 22:03:36 +0000
ROA not after:            Mon 04 Aug 2025 22:03:36 +0000
asID:                     19905
IP address blocks:        2604:2d80:e880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:7c:be:63:a2:da:06:34:b7:a9:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May  6 22:03:36 2025 GMT
            Not After : Aug  4 22:03:36 2025 GMT
        Subject: CN=fd8d8a21-3fc3-447e-8289-b9e4c7e52e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9c:c9:de:03:9c:37:59:df:ef:e3:cc:a6:28:
                    9f:b7:17:f0:18:ff:40:59:41:08:e5:1d:cc:8f:ec:
                    bf:d9:ea:fe:03:6c:51:ca:52:ff:6d:65:31:72:c7:
                    58:d8:91:e5:e9:a3:99:da:2a:78:da:65:e1:a7:54:
                    e6:bb:1c:a8:19:2a:21:ee:12:0b:72:04:4d:30:0a:
                    f2:2c:19:80:8c:5f:47:bb:80:20:8e:a9:ad:39:01:
                    83:6c:09:25:db:40:17:2e:6c:96:5c:ea:b6:e1:87:
                    79:cf:3a:bf:8e:cb:e4:c6:14:9b:2f:7f:a3:97:2c:
                    fe:cb:17:84:c2:f1:90:f1:67:ec:8f:b7:bb:2b:17:
                    5e:16:3d:2d:86:41:e3:a2:57:62:97:bb:71:a0:49:
                    d3:8f:eb:97:59:f9:93:70:d5:33:2a:18:d1:85:a1:
                    38:e7:77:63:81:81:12:2e:f6:66:86:c4:cc:a3:b2:
                    b5:4a:46:03:44:54:e3:eb:7f:79:6d:53:40:6f:57:
                    5d:7d:a8:b3:15:6c:f4:eb:34:23:95:d8:a0:1c:c0:
                    1b:08:1f:ab:d3:f5:66:7d:83:3f:e7:2c:2e:4e:e5:
                    b3:e8:7d:96:a0:7a:5b:12:70:d2:85:2f:30:dd:1c:
                    40:23:29:da:0f:c8:90:80:09:b1:70:9f:00:4f:ff:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:25:C7:FD:75:C5:79:B5:EA:FB:46:57:EA:3E:31:D5:8E:A2:90:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/62db9134-46d0-3d61-a624-4552ace1642d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:e880::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b4:ee:00:a8:cc:91:85:b4:f1:4d:ec:a0:8d:f4:f5:9e:ec:
         e4:ec:9f:78:7c:13:d1:a6:6b:ad:bb:8f:84:43:85:61:dc:cc:
         78:e1:40:63:e6:1f:3a:61:27:81:b8:27:cd:5f:2a:29:ac:8e:
         cf:99:b8:38:24:16:07:01:fa:b8:ae:2f:29:66:36:e6:14:05:
         ae:b5:f2:68:29:5f:79:f4:93:59:ca:75:2a:f2:91:03:cc:01:
         04:bf:da:8f:69:48:48:25:2e:5f:d5:21:0f:38:b4:70:e5:ee:
         9f:a3:6a:1f:cd:56:6e:9e:1c:0c:ba:76:48:73:b2:a8:17:2e:
         11:8f:28:f4:c8:64:f0:24:b5:f3:aa:61:61:89:01:7e:b3:d4:
         05:7e:c8:62:fd:06:48:bf:56:1b:04:d6:be:09:1b:63:d7:79:
         29:bb:db:d6:1b:3b:d4:43:2a:ae:29:4d:4c:7c:9f:28:44:cf:
         57:e8:f5:23:f7:81:86:26:0b:2f:10:83:2a:82:d1:ef:61:71:
         fd:cc:bd:3a:3b:34:18:7a:d7:28:5a:b4:ec:51:71:b0:74:7b:
         fc:7b:de:b5:5e:a9:f7:b9:30:7a:5f:88:cd:e2:60:b7:f4:07:
         aa:94:e6:12:05:01:3c:5e:2d:00:96:0a:94:7e:8a:2a:ca:36:
         dd:05:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:39:02 2025 by rpki-client