Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa
File:                     41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa (raw, json)
Hash identifier:          Xe1GAJwSiTZUTnYiM+2T2nUX5098OzcMCn75Eu+w7rc=
Subject key identifier:   7E:4D:61:B0:41:35:E4:4F:EB:6F:7B:E2:A8:51:5B:58:E2:4F:D0:44
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584A82AB463C44A75DFC460450E0
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     27539
IP address blocks:        2604:a900:a000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:46:3c:44:a7:5d:fc:46:04:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=939a49ae-990e-40a4-9f12-0f202738fd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:b1:27:2b:57:e7:f0:15:43:4b:48:24:a2:
                    d8:0a:6e:26:e3:2e:cb:51:81:e9:c6:89:8d:02:02:
                    1a:76:d6:85:43:b2:2a:b5:78:46:a7:42:b5:c9:7a:
                    e9:c6:75:2e:c6:fd:0c:cc:89:f0:c5:8d:ee:58:9a:
                    b8:87:4c:ac:5f:72:c8:61:25:0f:8c:22:95:c8:7a:
                    40:71:a1:78:0f:89:b9:75:52:29:90:70:2d:bd:32:
                    fc:95:42:4c:0e:3d:96:49:2c:a6:16:b2:50:d5:6c:
                    2c:62:ba:35:33:dd:41:05:92:3c:cb:a3:f6:3f:40:
                    b9:80:00:3b:7b:09:06:c1:02:43:97:89:a2:81:4b:
                    65:d2:9d:64:19:75:a0:4e:71:99:a3:c5:59:c9:50:
                    15:6e:7e:95:cb:60:1a:81:5b:2c:c6:c7:1a:18:37:
                    03:bc:3b:06:d6:87:a9:d1:ed:72:2a:60:7e:2c:7f:
                    70:32:e3:64:2f:57:0b:b5:85:02:21:d6:0f:b4:73:
                    44:db:f9:60:a9:7b:45:d2:e3:4e:17:3a:52:4a:9f:
                    85:3b:cb:c2:a2:32:e2:a7:d8:54:a0:aa:ca:58:a8:
                    9f:67:ed:69:b1:ce:96:75:49:32:e7:2a:b6:03:57:
                    ad:44:66:f1:91:fd:be:e7:11:21:4d:16:cf:e2:d3:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4D:61:B0:41:35:E4:4F:EB:6F:7B:E2:A8:51:5B:58:E2:4F:D0:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/41343ed2-f8f2-3e13-87a1-f4eb30613f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:a000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b2:8b:82:cb:ab:36:d3:9a:41:6e:79:e7:e8:c2:f9:f9:6f:
         66:d7:ed:45:9e:aa:ce:7a:a2:ce:d2:6a:c0:1e:79:d8:eb:ec:
         d3:4f:6f:cb:86:f1:c4:73:8f:9f:40:40:39:45:66:a8:91:ac:
         61:2e:8f:8d:5d:12:4a:da:43:43:fd:ae:cb:4b:0a:5c:04:c9:
         6a:59:66:9c:68:4c:2a:2e:ac:4c:62:f3:3b:57:48:0f:5a:79:
         e8:94:2c:13:bc:83:25:75:0b:af:8b:42:48:f6:89:54:ba:cb:
         5a:78:cc:ad:a8:90:ca:1c:cd:74:11:ab:f2:ab:3f:f4:cb:b9:
         49:6c:ce:c9:a0:4b:77:17:21:8f:b8:34:56:e0:d9:c9:6a:25:
         4d:82:b8:a3:87:be:46:73:18:77:4e:aa:89:71:c6:c7:7b:f4:
         31:99:7e:e7:2a:a1:cc:c8:f5:33:53:98:f2:dd:19:97:81:86:
         ec:0a:fc:8c:24:c7:96:74:6b:13:bb:36:75:ef:f7:6c:b5:9c:
         23:c8:93:fb:d6:e8:0c:8a:e7:9c:a7:a6:b5:86:6e:ad:df:c3:
         64:73:d9:77:95:9e:b1:af:2b:71:6a:53:6d:99:8d:8b:e8:52:
         17:6d:4c:55:5a:3a:33:18:67:e0:f8:5f:99:e6:3e:36:ec:cc:
         8c:99:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 02:50:21 2025 by rpki-client