Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa
File:                     41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa (raw, json)
Hash identifier:          wVjIoAhQBC+tkeD/uBhiKrbIqNcTFEecNYmPNLg9ThU=
Subject key identifier:   1A:61:4E:1C:A5:E4:AB:39:4D:FF:B9:AC:A5:D9:74:FD:00:83:F4:C3
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F43285849A2B305D84060AC384DC69D40
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa
Signing time:             Thu 24 Apr 2025 19:35:29 +0000
ROA not before:           Thu 24 Apr 2025 19:35:29 +0000
ROA not after:            Wed 23 Jul 2025 19:35:29 +0000
asID:                     27539
IP address blocks:        2604:a900:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:b3:05:d8:40:60:ac:38:4d:c6:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Apr 24 19:35:29 2025 GMT
            Not After : Jul 23 19:35:29 2025 GMT
        Subject: CN=0865e08d-dcfb-4e0e-9e0f-be6c27c64f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:00:59:06:37:7b:f4:54:82:db:72:85:75:
                    03:d4:e7:c0:c0:09:c6:fa:aa:18:a7:3d:dc:86:f3:
                    e1:8b:0f:75:d0:b4:be:f5:d0:a1:24:66:d0:60:0d:
                    d2:1a:06:5e:5f:6f:fd:58:46:03:cc:6c:bd:7b:b4:
                    b7:b6:9a:af:fa:3f:ca:6a:fb:9f:a4:85:be:2b:e0:
                    9a:f1:b6:d1:86:80:be:d4:ff:01:03:a1:8f:f8:39:
                    a6:32:1f:e2:40:ba:20:a4:cc:84:71:d0:11:d8:dd:
                    91:5c:34:7a:1c:61:8a:9c:2c:8f:5f:72:f9:16:59:
                    94:fb:46:ac:cd:a2:70:ab:86:cb:99:17:bf:24:7e:
                    68:b7:c4:01:12:10:7a:21:af:af:e1:f1:9a:57:6b:
                    d7:00:ac:86:bf:66:30:8b:22:b7:1d:7d:ef:7c:64:
                    42:91:f6:b0:46:b8:e6:02:6e:c6:13:de:2f:20:51:
                    af:f5:10:6b:66:06:b4:e6:6e:81:81:76:64:2b:25:
                    49:6c:c2:00:a9:da:b9:74:a3:11:49:92:05:f8:cd:
                    3f:64:24:4c:b5:30:00:98:1d:09:16:f6:5a:f8:8c:
                    44:7f:93:d1:9f:e9:51:a4:20:91:82:af:55:57:3f:
                    25:48:4b:f8:39:c4:00:b7:a8:23:aa:5a:c7:9c:3e:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:61:4E:1C:A5:E4:AB:39:4D:FF:B9:AC:A5:D9:74:FD:00:83:F4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:a000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:0b:36:71:62:5a:45:f0:14:0d:5a:21:88:a7:34:43:d9:c9:
         d3:eb:c3:d1:f3:a3:84:85:d7:ec:8c:3b:c4:28:b6:0c:96:32:
         0b:8a:86:47:e2:34:44:fd:34:60:0e:1f:19:60:b9:4e:d7:50:
         b8:b7:d7:d5:68:9c:82:23:30:d7:17:a5:f3:9b:bd:b9:74:08:
         75:d0:27:57:c1:b0:b9:f9:3d:96:d3:09:92:a5:eb:61:9d:ce:
         d6:4f:68:d1:a6:f4:99:d0:ad:ec:1d:ab:ae:f4:5e:89:34:66:
         4a:dc:36:e9:eb:e2:f7:ed:fc:d1:c9:b3:20:2c:8f:0e:95:19:
         01:4b:8b:24:fa:76:50:13:99:e7:b6:cc:76:52:b8:66:80:3b:
         9b:09:83:a3:e4:8b:36:61:05:43:0c:ef:d9:cc:62:a4:72:6a:
         70:19:69:a3:36:6f:59:24:98:d0:68:3e:8a:6f:97:ac:ea:52:
         79:4c:30:d1:ab:3c:ca:e5:a6:23:92:c7:d4:c5:8b:2d:f8:f6:
         82:21:ac:6c:8d:18:b9:bd:5c:db:ff:38:cb:ae:4b:60:c7:51:
         2d:82:9c:ff:a2:dd:39:8b:1a:74:b8:be:60:1e:56:5f:fb:b5:
         13:1e:66:16:10:b4:14:fc:ec:bd:7d:03:ec:d8:9b:9b:c7:23:
         37:3d:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:47:04 2025 by rpki-client