Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/3c699552-8917-32e5-abcd-caeae2d0c2cd.roa
File:                     3c699552-8917-32e5-abcd-caeae2d0c2cd.roa (raw, json)
Hash identifier:          4qDYwCqJg+fKZay3k/YJSRfaZvuiYtc7kIo6HAd6hyw=
Subject key identifier:   3D:AA:3C:7A:73:BF:6E:48:79:62:B6:0B:86:1F:CD:AC:25:26:F3:00
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584A11FB35E8EFAEB91334818100
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/3c699552-8917-32e5-abcd-caeae2d0c2cd.roa
Signing time:             Tue 03 Jun 2025 16:15:40 +0000
ROA not before:           Tue 03 Jun 2025 16:15:40 +0000
ROA not after:            Mon 01 Sep 2025 16:15:40 +0000
asID:                     32806
IP address blocks:        2604:9900:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:fb:35:e8:ef:ae:b9:13:34:81:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Jun  3 16:15:40 2025 GMT
            Not After : Sep  1 16:15:40 2025 GMT
        Subject: CN=6d1321b1-80c6-4841-9b50-c1255b54271a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ae:00:8c:95:69:9f:69:af:e0:0e:29:ed:b6:
                    f6:48:b0:69:18:52:39:c8:ab:b9:48:5a:0c:24:d8:
                    b5:b1:b1:f8:cb:1a:7b:86:ba:f6:02:52:a4:a1:49:
                    04:7a:de:99:1e:a0:32:be:a4:75:7b:47:f8:e9:76:
                    63:7b:52:80:f1:2b:bb:39:60:18:24:c1:24:56:6d:
                    be:a6:ca:bb:07:90:fa:11:39:16:dd:3d:c4:61:0b:
                    b1:c5:75:e6:b6:47:98:1b:5f:c6:bf:4f:87:98:1c:
                    12:61:be:02:d1:36:d2:f0:2b:62:54:8a:e8:ef:e5:
                    00:78:eb:df:93:65:7b:72:e9:77:77:a8:d0:66:ce:
                    3b:cf:7e:2f:58:8b:8c:b1:e0:ef:cf:df:b7:c0:dc:
                    5c:f2:ff:db:59:14:0a:90:87:04:66:b2:41:80:b7:
                    10:6b:c1:de:ec:a1:b0:de:6a:a2:05:ae:fe:ff:a8:
                    28:a8:fe:50:0c:78:00:58:ca:be:ec:17:9c:f1:ff:
                    ca:3e:67:9e:21:a4:33:fc:bc:b6:c1:f7:03:e9:b1:
                    95:08:e5:d6:8f:6e:fa:2a:01:da:31:ca:a1:bb:e5:
                    77:b4:ea:15:72:e3:ba:cc:29:ad:3b:d5:0a:1d:45:
                    b6:60:19:d8:a2:32:d9:e6:7d:67:b2:54:b6:10:df:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:3C:7A:73:BF:6E:48:79:62:B6:0B:86:1F:CD:AC:25:26:F3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/3c699552-8917-32e5-abcd-caeae2d0c2cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9900:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b0:f0:ad:eb:7e:ce:64:01:e8:07:28:fc:c4:5e:70:3a:41:
         81:18:91:1f:3e:e1:20:58:fe:42:8c:dc:73:a4:20:af:d3:27:
         7a:e5:83:18:8d:91:39:74:ab:0a:7f:2d:5d:ac:ce:0f:b3:c9:
         2d:96:fa:3c:53:f7:96:7b:53:6e:91:42:6a:a6:a4:25:df:60:
         f8:45:49:0a:10:ef:01:53:4f:b3:a0:b3:59:af:6f:53:db:41:
         ee:76:d2:06:14:fb:d2:cf:c2:fb:61:a3:ae:8d:b9:81:d0:3e:
         a2:a6:25:71:08:51:b8:24:29:2d:b1:23:d3:af:5d:16:0a:d0:
         44:a0:fd:66:89:78:38:5d:0c:3a:bd:16:88:9a:3a:50:c2:3b:
         55:09:e0:df:7c:45:a0:a6:92:fd:a5:66:a3:80:80:95:86:08:
         6b:36:1c:2c:86:f5:4b:61:22:f8:dd:2b:af:79:ff:a2:6d:7b:
         5c:a0:1f:15:ff:93:f8:e2:a8:09:64:17:4a:46:c4:c5:c8:12:
         30:e2:af:ad:bf:26:b8:52:d5:50:90:b5:5c:9d:85:d6:aa:7c:
         c8:e6:57:fb:67:62:95:d8:6e:62:56:20:7b:00:49:77:22:57:
         02:fb:2b:a6:73:e7:18:3b:42:46:a7:d9:b8:fe:63:e6:7e:29:
         63:a7:a0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:45:21 2025 by rpki-client