Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab2a64a8-a6aa-3244-9a33-c0bc44de52c4.roa
File:                     ab2a64a8-a6aa-3244-9a33-c0bc44de52c4.roa (raw, json)
Hash identifier:          aEK13rqhhXJJZtyRZaDcdU7rcJSfCm/4xvhCCBaeG0s=
Subject key identifier:   CB:77:C8:B9:22:A8:E2:20:28:E4:88:B4:A3:F3:23:EE:9E:32:17:7F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849B0C55D6D6E7E720792C6B3C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab2a64a8-a6aa-3244-9a33-c0bc44de52c4.roa
Signing time:             Tue 29 Apr 2025 20:33:46 +0000
ROA not before:           Tue 29 Apr 2025 20:33:46 +0000
ROA not after:            Mon 28 Jul 2025 20:33:46 +0000
asID:                     19905
IP address blocks:        2604:2d81:1500::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b0:c5:5d:6d:6e:7e:72:07:92:c6:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 29 20:33:46 2025 GMT
            Not After : Jul 28 20:33:46 2025 GMT
        Subject: CN=ac6da0db-dbed-4f8a-86e0-079a7e09d26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:89:1e:92:e5:c4:64:45:c5:95:70:98:ed:
                    7c:ef:25:ce:da:2e:f6:32:ea:f4:87:08:10:31:46:
                    58:ae:2f:a7:0b:69:b6:bf:bb:62:b2:32:03:e2:90:
                    97:58:ca:3a:f4:4b:17:15:64:87:4d:25:b0:8e:fe:
                    3d:bd:8e:85:d8:b0:75:a0:eb:ca:9a:ca:14:c3:0c:
                    19:02:b7:10:4e:01:78:a6:48:9b:6f:80:d5:4d:e8:
                    e8:48:74:7d:57:1f:d3:57:c6:37:b2:6f:b2:1a:bc:
                    27:85:0b:09:59:eb:7d:ce:a0:c1:13:69:35:c9:38:
                    4c:d1:1b:13:6a:5c:80:01:c7:fd:f5:c1:4f:ed:8b:
                    57:6f:a6:59:53:14:c6:1f:30:7d:0b:ff:2d:a1:5a:
                    67:f0:9d:62:cf:5a:c6:b0:21:a4:0c:f6:f8:2a:0b:
                    d5:f0:67:ed:8e:24:e9:40:90:a0:70:6d:63:83:d0:
                    12:1e:4d:ce:c8:cf:29:44:72:d9:d2:fd:fa:77:80:
                    68:5d:37:24:2c:9d:71:e1:28:49:6e:4a:a4:94:d8:
                    b7:ad:64:1b:4b:dd:67:c1:81:27:b9:bd:cf:b1:8d:
                    2f:fc:ba:eb:c7:c8:ef:65:f2:b0:d6:b1:63:ba:c9:
                    29:e7:a2:9e:b9:e0:2d:6e:e5:a7:7b:93:2c:ff:d5:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:77:C8:B9:22:A8:E2:20:28:E4:88:B4:A3:F3:23:EE:9E:32:17:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab2a64a8-a6aa-3244-9a33-c0bc44de52c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d81:1500::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8a:63:0b:7e:70:53:9f:b3:3c:15:40:5f:cd:56:7a:d0:c8:
         57:35:ac:f1:34:c7:1b:42:4d:72:1e:22:cc:d3:1f:91:f1:6b:
         2d:78:38:60:23:82:37:27:3a:d9:74:02:6d:c4:e2:22:dd:d2:
         38:14:3f:25:80:f8:4e:ea:fe:49:5e:31:a1:c2:a4:a7:86:f3:
         b7:24:b3:98:0b:61:0b:6f:4c:0e:83:76:49:cc:ef:17:c2:fb:
         7f:8c:e3:9c:a2:db:d0:e7:f0:d9:63:ee:3e:06:33:fe:2d:a8:
         de:a6:e3:4a:08:d5:ac:7b:cc:27:dc:db:73:d5:d0:c6:26:e7:
         7c:63:42:ea:b0:77:12:b1:f9:2c:80:63:8f:32:01:6b:a8:77:
         ed:92:7b:7d:ec:f9:8c:a6:bd:34:bf:cb:a2:38:12:a0:a6:be:
         cd:8b:ad:90:a9:f4:74:e2:14:21:cc:ef:6c:19:2b:56:7d:ce:
         f2:f2:ea:2a:4b:74:6f:48:00:cb:fb:e0:18:b8:d1:30:2d:ef:
         36:2d:bd:b2:c4:b4:ad:3c:06:64:3d:21:a6:f1:8e:5a:63:c5:
         7b:2f:a6:8c:21:a8:7f:52:44:e0:82:08:96:d8:60:05:c1:bb:
         10:1c:c6:d3:2a:68:ec:bf:6c:66:ed:04:69:b5:9b:d1:17:11:
         30:87:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:47:22 2025 by rpki-client