Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa
File:                     298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa (raw, json)
Hash identifier:          i4nxOw2MuvnJtvprNjlIf6zSK9LbQq+h3siYK5W9DWk=
Subject key identifier:   3D:A9:21:A9:B6:BB:F7:BE:E4:C4:FF:A2:83:4F:66:58:F0:8D:BD:D2
Certificate issuer:       /CN=b26d6b84-8a61-4533-a922-5e09436bf519
Certificate serial:       010D0C9F4328584A497063571510032F5EF56540
Authority key identifier: 64:C6:3F:3C:C1:2A:F9:FB:C9:4B:1A:5A:6B:90:92:5E:51:51:6D:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     32281
IP address blocks:        2604:2340::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/b26d6b84-8a61-4533-a922-5e09436bf519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/b26d6b84-8a61-4533-a922-5e09436bf519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:63:57:15:10:03:2f:5e:f5:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26d6b84-8a61-4533-a922-5e09436bf519
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=ef590681-0e78-42f9-a617-b90eda192b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:c8:c4:f9:cd:c2:94:a9:10:13:73:ac:65:
                    79:8f:9d:f5:d0:16:38:ea:c2:60:1e:e1:21:b7:ac:
                    b5:71:71:53:85:91:07:77:ef:7f:04:fb:2e:da:33:
                    a9:fa:81:52:bc:47:4f:34:ff:58:5d:02:b0:59:f7:
                    61:f5:af:c0:bf:a9:f2:08:28:af:7f:b4:57:b7:73:
                    06:e1:e9:d8:a5:c6:31:be:ef:b7:e0:5c:d0:51:49:
                    16:65:49:53:36:9d:69:79:35:ad:0b:f8:f0:d9:9c:
                    fb:c3:08:7f:83:3d:db:e1:cb:08:0f:f7:53:dd:5e:
                    6f:10:f4:96:b9:b6:75:24:cc:bf:4a:4b:61:15:24:
                    14:99:5c:cc:00:ef:28:4b:78:96:33:d0:0c:5f:b7:
                    ed:d0:3e:80:3d:7e:25:21:d5:21:eb:98:78:0e:34:
                    3c:4e:0f:b4:fb:5c:1f:43:86:76:2a:11:d2:c8:57:
                    9e:b6:e7:73:6d:27:c8:41:3b:36:54:aa:be:43:37:
                    d2:12:a6:cf:ce:c5:4d:bf:04:79:91:12:1d:0d:76:
                    ee:f2:e9:07:67:9d:f9:d9:36:b1:84:a7:07:e3:73:
                    0d:23:83:07:9f:ee:d8:25:f0:26:6a:f1:5a:6e:5b:
                    57:1e:ce:c5:9c:43:05:4f:62:c9:3b:2e:0d:a6:7b:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A9:21:A9:B6:BB:F7:BE:E4:C4:FF:A2:83:4F:66:58:F0:8D:BD:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/298d9e74-c1df-37ff-9d61-74c5b58c8faf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519/b26d6b84-8a61-4533-a922-5e09436bf519.crl

            X509v3 Authority Key Identifier:
                keyid:64:C6:3F:3C:C1:2A:F9:FB:C9:4B:1A:5A:6B:90:92:5E:51:51:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b26d6b84-8a61-4533-a922-5e09436bf519.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b6:e0:4c:3b:9b:02:2e:8a:e7:0b:03:91:47:cf:17:0c:a8:
         2c:6f:81:22:b6:8f:1b:b9:14:6c:aa:35:03:b1:ca:e6:94:13:
         49:5c:11:47:99:a6:14:17:c5:73:f6:77:f7:9b:d5:8c:6a:f5:
         b7:02:72:be:2e:84:17:e8:4b:a1:87:9a:f2:8a:f3:60:67:1c:
         9c:1e:2a:96:97:12:9f:bc:cb:00:c0:0a:26:5a:ab:8e:28:a5:
         59:7c:f4:25:80:aa:a2:78:54:7b:a8:79:fd:28:c9:52:6c:18:
         b1:6d:9b:a3:d2:ad:34:89:88:c1:91:e9:bd:bb:14:cb:8c:73:
         ce:ab:83:9f:2c:26:2c:68:b6:2a:2d:3d:07:a9:a4:d3:cd:99:
         f8:a0:aa:3e:69:dd:a4:e4:64:65:6d:3f:2b:9d:1b:a1:cc:95:
         0b:53:cf:49:b0:46:37:d4:bb:48:7a:10:30:31:ef:33:e8:1f:
         64:cb:d5:fc:ca:2a:f3:83:98:d5:9c:da:5e:53:6b:52:43:58:
         fb:d1:f9:b7:23:ff:bc:62:84:27:bb:57:23:68:4f:d9:13:57:
         2d:b9:37:5a:d0:de:dd:c8:c7:cd:5f:01:be:da:2d:a2:64:f2:
         94:e8:59:e7:43:46:24:54:1f:1a:95:b3:85:58:6e:93:3d:32:
         9f:e3:c7:fc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpJcGNXFRADL171ZUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI2ZDZiODQtOGE2MS00NTMzLWE5MjItNWUwOTQzNmJm
NTE5MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk
ZWY1OTA2ODEtMGU3OC00MmY5LWE2MTctYjkwZWRhMTkyYjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtbIxPnNwpSpEBNzrGV5j5310BY46sJgHuEh
t6y1cXFThZEHd+9/BPsu2jOp+oFSvEdPNP9YXQKwWfdh9a/Av6nyCCivf7RXt3MG
4enYpcYxvu+34FzQUUkWZUlTNp1peTWtC/jw2Zz7wwh/gz3b4csID/dT3V5vEPSW
ubZ1JMy/SkthFSQUmVzMAO8oS3iWM9AMX7ft0D6APX4lIdUh65h4DjQ8Tg+0+1wf
Q4Z2KhHSyFeetudzbSfIQTs2VKq+QzfSEqbPzsVNvwR5kRIdDXbu8ukHZ5352Tax
hKcH43MNI4MHn+7YJfAmavFabltXHs7FnEMFT2LJOy4Npnv9fQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD2pIam2u/e+5MT/ooNPZljwjb3SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMjZk
NmI4NC04YTYxLTQ1MzMtYTkyMi01ZTA5NDM2YmY1MTkvMjk4ZDllNzQtYzFkZi0z
N2ZmLTlkNjEtNzRjNWI1OGM4ZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjI2ZDZiODQtOGE2MS00NTMzLWE5
MjItNWUwOTQzNmJmNTE5L2IyNmQ2Yjg0LThhNjEtNDUzMy1hOTIyLTVlMDk0MzZi
ZjUxOS5jcmwwHwYDVR0jBBgwFoAUZMY/PMEq+fvJSxpaa5CSXlFRbU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMjZkNmI4NC04YTYxLTQ1MzMtYTkyMi01ZTA5
NDM2YmY1MTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQjQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCdtuBMO5sCLornCwORR88XDKgsb4Eito8buRRsqjUDscrmlBNJXBFH
maYUF8Vz9nf3m9WMavW3AnK+LoQX6Euhh5ryivNgZxycHiqWlxKfvMsAwAomWquO
KKVZfPQlgKqieFR7qHn9KMlSbBixbZuj0q00iYjBkem9uxTLjHPOq4OfLCYsaLYq
LT0HqaTTzZn4oKo+ad2k5GRlbT8rnRuhzJULU89JsEY31LtIehAwMe8z6B9ky9X8
yirzg5jVnNpeU2tSQ1j70fm3I/+8YoQnu1cjaE/ZE1ctuTda0N7dyMfNXwG+2i2i
ZPKU6FnnQ0YkVB8albOFWG6TPTKf48f8
-----END CERTIFICATE-----
Generated at Tue Jul 1 06:49:19 2025 by rpki-client