Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/1349700a-65fd-3753-b082-6f19445dffd4.roa
File:                     1349700a-65fd-3753-b082-6f19445dffd4.roa (raw, json)
Hash identifier:          7LTrMkJw/k00jxkqWfIQ92JztpmduNCp5tPsz/ms5s0=
Subject key identifier:   1B:D2:25:02:54:69:80:D4:63:C5:22:2C:00:5B:00:84:62:AC:D1:49
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F43285849EBEA56D3F99A96372995A3C0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/1349700a-65fd-3753-b082-6f19445dffd4.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     4186
IP address blocks:        2620:bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:56:d3:f9:9a:96:37:29:95:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=79144931-20d5-4ef5-8f46-8a7715d50db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2e:56:f6:00:5b:a6:af:b5:c8:39:06:c9:b0:
                    49:1b:9b:f4:57:76:0b:49:8c:c2:7e:ae:3c:c5:b4:
                    35:3f:cc:22:a3:23:e9:7c:f8:c5:cb:bb:c6:1b:0e:
                    c2:37:af:03:11:d1:22:b7:2f:0f:98:3d:c3:23:6c:
                    e5:f8:d5:5e:0f:e5:f2:d8:1d:31:62:af:1a:01:b4:
                    8d:3f:c5:d3:0d:74:f0:a7:92:3a:09:81:58:12:b2:
                    b5:02:d3:fa:34:53:f5:4a:fc:d1:bb:f3:1c:5a:33:
                    a1:c4:2a:19:7d:a3:c2:16:66:97:cf:62:b0:15:d5:
                    85:c7:1b:9a:17:89:09:70:73:fa:96:8b:d5:47:20:
                    18:41:45:20:bf:28:39:de:ad:b0:5b:df:4a:2e:98:
                    b1:20:19:52:a4:4c:ae:5a:50:3f:05:03:5e:d1:ef:
                    2f:3a:7a:46:a4:f1:4b:8a:24:b3:f9:a1:8e:3a:f2:
                    f9:3c:19:30:b1:8f:3e:96:51:ae:3d:44:ac:cb:19:
                    ce:c5:14:92:06:fe:a3:5b:90:c2:2d:13:6f:9c:53:
                    9a:01:d4:6e:46:28:4f:a2:c0:54:99:6e:29:ae:fd:
                    02:f6:20:b1:2e:b5:93:bc:59:8d:91:02:1f:3a:15:
                    fc:cb:87:d2:a0:6e:fe:87:a0:77:80:7d:aa:17:bf:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D2:25:02:54:69:80:D4:63:C5:22:2C:00:5B:00:84:62:AC:D1:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/1349700a-65fd-3753-b082-6f19445dffd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:df:76:d5:63:b9:82:5f:0f:83:dd:9e:43:e0:5a:96:7d:fe:
         97:1f:40:f5:87:39:8f:f9:f2:88:2c:6e:ce:83:39:0f:39:8a:
         de:c1:60:29:67:ae:df:d8:5b:85:39:84:fe:98:1a:48:1c:5d:
         09:06:3f:84:95:88:4b:a8:8a:01:38:bf:33:89:ca:ae:12:b5:
         6e:32:63:10:04:1f:c3:7a:2d:7c:da:70:35:6a:d4:9b:92:b1:
         49:c1:f6:d7:b8:c0:77:d4:2d:d7:91:6f:e8:dd:db:64:55:16:
         a9:1f:1b:c6:86:e4:99:93:ad:34:1e:71:3e:29:ee:0a:e2:9e:
         97:77:82:e8:b5:f1:dd:bf:9d:5a:84:e2:cc:89:ca:20:d5:5e:
         9a:e2:4d:9e:5a:cb:e8:c7:ce:07:6b:1a:bb:1f:42:88:41:69:
         b0:d1:ba:1a:ef:45:81:c2:0b:91:4e:02:57:8b:08:63:03:bb:
         d6:29:80:97:b5:6a:ae:ea:08:7c:66:55:28:db:77:ed:80:62:
         a6:1c:8c:47:ae:85:38:6a:ce:dd:e9:82:1c:c8:cf:04:c1:2b:
         a7:e3:98:e0:36:de:69:12:07:51:06:44:a4:67:e2:b7:e3:dd:
         ed:19:33:6a:0e:10:c5:26:0d:80:84:03:bf:d5:bf:0e:b1:b1:
         35:3d:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:15:31 2025 by rpki-client