Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa
File:                     12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa (raw, json)
Hash identifier:          rDAvHzG5sf4P+8Zw/3E9QSrqQacbCrNa/l4QAGfGRZM=
Subject key identifier:   50:18:AD:9C:AD:29:C1:BD:B1:9E:21:5D:9B:7F:13:06:D3:A2:95:DC
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F43285849E2251A57AD327D8470AA5B40
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     30097
IP address blocks:        2604:3c00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:1a:57:ad:32:7d:84:70:aa:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=09bf9d3b-861a-4780-b32d-6a3a6ef7c635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:6c:d4:c2:0f:8d:32:73:f8:87:50:4d:88:
                    e2:06:90:4d:bf:e5:be:34:f6:92:61:bf:a4:5c:af:
                    07:d8:c3:d8:45:cd:80:0b:38:ff:51:dc:1e:13:a7:
                    c8:06:c6:d7:53:7a:83:0e:a5:43:e5:39:cb:f1:07:
                    1d:ea:ca:3e:ea:72:86:b9:8e:db:3a:9f:72:b7:6e:
                    0a:52:1f:e9:03:fd:b2:2e:ca:b2:1c:f8:4c:06:ca:
                    dc:a9:0b:e4:d5:8a:a1:00:06:7b:b7:ea:76:e7:c4:
                    92:5b:1e:19:80:51:31:0e:11:11:fc:7e:5d:b8:ed:
                    ff:a5:18:4d:1b:57:b3:ec:41:5d:95:4b:c7:72:d1:
                    af:1d:a0:bf:e8:a2:65:a9:6e:21:e9:2c:24:d1:9c:
                    c0:3d:84:59:22:cb:67:0a:77:ef:56:29:c1:49:46:
                    2c:02:93:10:7f:48:91:0a:bc:8a:06:ab:c6:2e:e0:
                    d8:ca:3d:e9:e6:f2:ca:ea:b0:5b:b9:a5:95:db:4a:
                    31:d6:b4:8f:a4:fa:30:95:d0:e4:ce:81:26:c9:3c:
                    c3:df:6f:d7:26:e4:b1:29:99:e9:e4:90:c8:39:41:
                    ee:dd:fb:35:23:78:18:e7:85:69:37:b5:60:50:f7:
                    70:df:4e:e1:b1:42:01:29:a1:4f:97:1f:16:49:c5:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:18:AD:9C:AD:29:C1:BD:B1:9E:21:5D:9B:7F:13:06:D3:A2:95:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b3:7c:5b:4e:ba:5c:c1:86:d4:6a:1b:f1:70:87:a1:cb:85:
         ae:a3:02:9d:a2:d1:dd:2b:b9:b2:61:f0:f3:7e:17:f1:3c:1d:
         04:b8:3e:4b:06:f3:9f:2e:e1:96:47:64:09:8a:d7:c2:1d:23:
         e4:99:8f:ca:5d:68:4c:7b:7d:3b:10:fd:f5:5b:4e:c2:ef:2a:
         4d:f3:0b:34:1c:b4:d1:55:0e:6f:9a:ee:2c:60:a5:60:c1:69:
         e1:6a:0c:00:c0:9c:bc:bf:24:e8:2f:9c:97:e8:c2:11:95:42:
         94:85:28:76:04:5d:91:f9:4c:e8:d6:37:18:01:19:a2:ca:be:
         4b:8c:9f:32:08:e4:54:64:18:1a:4c:07:f5:83:7c:a5:49:1e:
         d9:bd:a1:c6:62:60:21:df:15:88:2e:02:1d:7b:bd:2e:43:b7:
         cd:28:ac:ac:d5:ae:da:3e:75:8b:c5:75:1b:cc:57:a5:26:4c:
         b9:55:0a:eb:09:1e:13:5b:c5:aa:99:a1:79:93:44:c8:cb:b1:
         20:59:f5:ce:3e:71:a6:8a:4f:54:d0:f7:51:d6:10:96:78:a4:
         f4:9e:82:97:b1:71:24:21:98:01:92:d0:03:7b:94:a6:39:ce:
         ed:00:1f:ed:50:0a:59:f0:19:8d:20:f0:61:d0:0d:99:70:d1:
         e2:87:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:25:56 2025 by rpki-client