Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/de134596-72ab-3107-a025-23d85e847fa4.roa
File:                     de134596-72ab-3107-a025-23d85e847fa4.roa (raw, json)
Hash identifier:          Z9YhYcBJ4+AG4Y5VHCsyHuKrZQBURFa9q82z5ormBwI=
Subject key identifier:   AF:32:2E:D7:08:7D:E0:C9:3C:40:2D:1E:B7:90:BD:ED:EA:45:61:44
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584A3A157192EBB1FB351D70FA00
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/de134596-72ab-3107-a025-23d85e847fa4.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     13830
IP address blocks:        2604:4d40:4000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:71:92:eb:b1:fb:35:1d:70:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=b5e8a4ea-7dda-4615-8594-ae4926528be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2d:b3:53:41:71:ae:44:f9:b0:31:af:88:e8:
                    0f:e7:9e:81:3a:03:58:d1:6f:5a:1a:53:cd:d8:56:
                    0b:59:f3:89:3f:2c:06:30:a5:a0:2c:62:d6:f6:5d:
                    4b:14:4d:07:e0:d4:e4:1d:0d:2a:49:1d:9e:59:5b:
                    4f:8a:c0:94:27:4b:b4:d1:02:ac:04:2b:2a:93:67:
                    90:4e:d4:47:27:00:a9:ea:37:c4:f0:19:d4:42:07:
                    2b:27:17:92:23:af:c1:8a:dc:7e:c2:b2:63:ec:a9:
                    c6:3a:d5:6b:2e:2a:e2:5c:51:b5:dc:59:d4:9e:e9:
                    0e:d9:f4:44:77:46:86:59:59:77:34:be:b7:c4:16:
                    4f:44:27:97:4b:15:ef:ff:e3:a1:f6:75:07:4c:7b:
                    6b:22:d3:b7:05:7e:7a:3d:82:64:a6:d4:ba:ce:05:
                    9e:7a:5c:4f:d8:28:f1:b3:32:38:69:85:e6:88:69:
                    e2:fe:06:68:2e:89:b3:a6:7b:4d:c7:bc:85:40:0e:
                    72:2d:45:8b:62:de:38:d6:6c:80:16:6b:7e:72:f4:
                    2b:42:63:5c:10:5b:d4:90:95:95:54:e8:e7:5e:b8:
                    4a:f6:19:10:d5:ca:d0:34:a1:80:6f:52:36:b3:49:
                    1d:9d:65:8b:e2:1e:c5:7d:20:81:84:81:48:f3:15:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:32:2E:D7:08:7D:E0:C9:3C:40:2D:1E:B7:90:BD:ED:EA:45:61:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/de134596-72ab-3107-a025-23d85e847fa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4d40:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:28:95:af:68:66:52:ee:4c:2e:90:41:90:27:da:6d:21:db:
         98:d7:24:a6:7f:8a:f2:4a:15:64:e3:14:10:a8:52:d5:83:9d:
         d9:14:7b:fc:fc:f5:44:a0:9b:1b:f2:88:0a:e0:fa:f5:55:e9:
         43:09:d9:62:4f:b7:8d:6d:b1:e5:3d:0b:2a:2c:57:14:8e:9f:
         d0:0e:3c:fc:31:a2:a9:50:69:ff:d3:a8:f8:de:6f:dc:35:54:
         42:4e:a3:d4:28:3a:e7:46:e0:94:78:78:ee:fb:3c:cd:65:ec:
         e1:4f:fc:bd:75:4c:c7:f5:04:23:d4:de:44:99:63:f4:b3:6a:
         45:b0:e3:35:af:54:3d:fe:cc:f9:15:6f:ab:c9:d2:49:f4:81:
         fc:33:a3:45:80:44:f0:bd:c6:be:9b:bb:d5:82:89:bc:72:9d:
         8a:2f:2d:ff:54:ff:6a:01:33:86:5d:e5:fc:ce:b2:25:31:59:
         48:2c:7e:d5:c2:5f:dc:80:06:f5:d4:c1:bc:12:f9:b4:52:17:
         a2:87:57:de:9e:50:28:3d:13:c6:5d:64:26:72:ee:04:dd:bd:
         49:4b:06:cd:a5:c3:60:62:f2:c6:c4:e5:72:63:75:4e:7b:38:
         17:47:bd:58:c4:cd:9e:6f:39:46:d5:3c:23:7b:59:1c:c8:db:
         c5:a0:5e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:04:37 2025 by rpki-client