Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9b4b33fc-4a7e-3283-a578-c21d78b670b9.roa
File:                     9b4b33fc-4a7e-3283-a578-c21d78b670b9.roa (raw, json)
Hash identifier:          UHIyFdND+mVRcFP1sMHbn6Pa4kXrdpmU9AknZ4UrS/E=
Subject key identifier:   BA:7F:02:D7:AD:D4:B0:C1:FC:78:3F:19:A7:7B:D7:32:AF:5B:2F:FA
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849806F2433C8C614E76FD52380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9b4b33fc-4a7e-3283-a578-c21d78b670b9.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        2606:f4c0:3000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:24:33:c8:c6:14:e7:6f:d5:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=dbb42286-c6a3-4840-8a93-92a6691b11e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:fb:8a:97:15:23:04:a0:eb:16:bd:b6:04:
                    ee:ce:e2:d4:8a:d3:4c:98:45:93:90:d3:4c:86:ae:
                    a1:cf:0c:8d:7a:cd:2a:1f:93:f4:8f:7c:25:2f:ce:
                    cb:49:32:a2:5d:26:94:c2:aa:10:3d:94:53:05:fe:
                    41:f1:b9:99:09:40:b0:98:7b:c2:03:13:20:e5:7f:
                    61:3d:4b:f7:94:ce:06:f5:57:f1:b3:20:83:a0:d9:
                    e8:93:e0:15:d9:af:78:0a:c8:94:ca:a6:2c:dc:32:
                    aa:72:a8:02:53:20:e0:f0:8a:76:67:be:e6:7e:8f:
                    55:9a:d7:fb:ef:4c:e9:34:bd:15:2e:08:b0:5f:a1:
                    8d:85:eb:8b:e6:28:e7:3a:af:80:30:d7:07:82:e6:
                    73:df:14:d7:e0:61:57:7a:9d:60:70:bb:39:8a:e1:
                    c6:e0:87:79:ca:86:e3:0f:af:9c:69:c8:47:67:96:
                    87:8b:62:88:5d:66:e5:5b:51:3f:b1:2e:8c:47:e3:
                    16:da:ac:92:b5:ee:17:8b:3d:12:c0:e7:d0:85:03:
                    dc:24:a9:81:a5:9a:0f:8d:86:73:fe:65:8b:1e:63:
                    67:1b:9e:12:2b:03:a1:99:e4:8d:c6:29:e3:4d:d3:
                    6a:92:4d:d5:82:15:9a:8d:15:ac:16:57:c9:05:74:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7F:02:D7:AD:D4:B0:C1:FC:78:3F:19:A7:7B:D7:32:AF:5B:2F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9b4b33fc-4a7e-3283-a578-c21d78b670b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b0:75:b2:bb:1e:86:10:e5:d1:c8:18:37:a6:c9:85:94:ea:
         3b:81:85:a0:8b:62:16:6a:74:68:d3:72:62:61:37:e3:b9:88:
         74:2e:27:e5:bb:a8:f3:18:06:03:f8:9e:d7:66:66:ab:02:45:
         65:36:4d:0c:8b:13:6f:1c:f8:63:8a:47:d7:4a:3e:70:22:5a:
         50:b3:2d:7a:40:0e:13:86:37:00:7d:4b:52:fa:30:b3:d1:c3:
         a7:e5:9e:b6:18:6b:6f:dd:83:e9:68:5c:e9:50:a4:28:3d:2d:
         1c:d9:41:48:74:35:56:ee:c6:ce:f0:55:58:93:a4:c0:3c:dc:
         b8:37:cf:82:0c:9e:7b:a6:ac:85:63:f8:0a:6a:15:97:46:82:
         59:3b:2b:95:74:7d:8d:db:ca:55:11:65:43:70:69:53:88:b2:
         02:ab:54:27:98:4f:ce:08:e3:14:d3:eb:6e:13:11:01:94:b2:
         69:a3:dc:be:98:15:3a:fa:56:10:60:27:6d:da:31:15:cd:44:
         d1:c9:7a:f0:47:16:e2:b1:7f:14:13:8b:07:30:69:0f:71:43:
         40:b7:ea:90:42:e0:42:33:69:fc:34:d0:ce:d1:d3:58:8c:38:
         30:29:08:bc:24:97:00:57:34:09:51:22:ca:8d:2e:75:61:ee:
         01:0d:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:00:53 2025 by rpki-client