Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0c9589c4-08c6-3124-a198-9bf001091b1b.roa
File:                     0c9589c4-08c6-3124-a198-9bf001091b1b.roa (raw, json)
Hash identifier:          e+67JGorrhchmi3PAmJbejIrTdbRiVIPh5tveAkS+7M=
Subject key identifier:   59:09:14:0B:AE:F0:1B:DB:31:38:58:C2:33:E6:4F:97:AA:52:04:96
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584950F967A9F0868D33582F8528
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0c9589c4-08c6-3124-a198-9bf001091b1b.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     36007
IP address blocks:        2606:3a80:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:67:a9:f0:86:8d:33:58:2f:85:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=29e51160-49b8-416c-b95d-4a64a4c8f349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:3c:ee:f4:07:be:0b:2d:16:92:b8:ff:73:
                    be:c9:36:a2:50:af:87:df:85:1e:de:de:a2:d9:6c:
                    be:9d:7c:b8:ab:bc:08:e4:0c:39:96:f2:eb:aa:83:
                    09:7b:06:06:47:d7:15:37:f4:a0:69:58:34:2e:a6:
                    da:7b:57:c2:ff:7d:37:2e:38:c9:61:d5:14:80:34:
                    cb:80:80:19:5f:29:85:63:82:aa:69:05:18:20:46:
                    ed:f5:94:75:d5:b4:f7:72:96:22:ba:da:d6:ba:60:
                    11:a4:a9:8b:d3:43:18:63:b4:39:17:21:3f:6b:e0:
                    cb:07:a7:3a:71:b3:7e:53:49:b0:dd:bf:7c:6a:ff:
                    0f:90:88:da:2f:70:b2:f3:a2:ff:4c:a0:49:a9:12:
                    c3:e6:36:a9:87:87:50:8f:bc:7e:79:d5:53:3e:1d:
                    05:c2:32:a3:6e:36:4a:24:f8:d1:f0:bd:ec:54:e0:
                    38:0b:12:b8:9a:d4:dc:8f:5a:5c:ca:8f:76:f5:fa:
                    2f:92:c4:50:c9:ca:8b:74:7a:9b:69:67:d9:06:af:
                    03:04:fe:b9:c4:b6:00:b3:7b:b6:82:96:35:a3:be:
                    be:c8:c6:da:08:89:f5:8e:ab:d2:a9:8e:2b:8f:fe:
                    57:a7:19:d7:ae:d8:cb:89:9c:ce:96:83:7e:d9:fa:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:09:14:0B:AE:F0:1B:DB:31:38:58:C2:33:E6:4F:97:AA:52:04:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/0c9589c4-08c6-3124-a198-9bf001091b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3a80:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:92:f9:13:ee:ef:18:e3:b7:cd:b0:07:a2:94:2c:b4:66:7b:
         d2:42:02:06:10:ec:ad:9f:e2:68:4b:db:57:79:e4:ef:19:58:
         e2:fc:6a:de:6a:0e:c7:5b:da:68:b6:2c:9f:24:6c:1c:c8:26:
         81:87:61:3f:77:66:98:09:19:bb:f1:7a:b3:a5:bb:0f:dc:2d:
         95:88:84:e9:b3:1c:2f:90:12:7d:dd:19:97:59:bb:9f:23:af:
         0d:6d:9a:db:3b:e5:18:ce:fc:d3:01:5c:0a:6e:f0:c6:12:2a:
         77:c7:d0:33:1c:15:ca:a6:5c:c9:b2:e4:23:7a:55:13:9d:f0:
         2c:ae:3b:b5:10:1c:51:74:e0:fd:6e:41:dd:65:39:ac:ba:11:
         92:a2:52:d0:10:ea:c6:dd:6b:d1:2f:1f:44:bd:24:a0:d2:9d:
         86:77:8f:bb:4f:6a:a2:b5:f1:f9:bf:6f:ba:b3:bb:fe:5a:52:
         cd:3c:ef:3a:61:d5:24:6c:14:a8:2f:51:42:f6:13:40:2d:c9:
         08:a5:1f:e5:9f:b5:7c:6b:71:65:cb:36:11:bf:0e:9d:e5:2b:
         06:57:b5:a9:95:74:42:f7:cb:39:1a:f3:52:a3:9a:ac:a4:ea:
         3c:29:9b:1f:25:98:de:83:bf:c2:65:88:6b:1f:29:7d:95:01:
         c6:f6:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:34 2025 by rpki-client