Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/982c5795-fe93-3ebb-93ac-4d66ccba12aa.roa
File:                     982c5795-fe93-3ebb-93ac-4d66ccba12aa.roa (raw, json)
Hash identifier:          DWIcjwAHsxncN1jjOPBjY2woVl2TEUX2h4EHK5IWnuQ=
Subject key identifier:   9B:43:29:78:2E:61:38:B1:55:2F:F4:8A:7F:E9:50:D4:19:C5:A3:D6
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584988CF22B1F7012AA072B58D40
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/982c5795-fe93-3ebb-93ac-4d66ccba12aa.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     9009
IP address blocks:        2607:740:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:22:b1:f7:01:2a:a0:72:b5:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=9188a935-22ae-4276-8b89-bce68f557d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:40:75:8d:7d:06:12:a3:8a:c9:cd:ae:0b:
                    93:f7:18:c2:c3:e6:27:93:fa:bc:fd:8b:a9:f5:a1:
                    44:b7:3a:31:5d:63:14:fd:6f:90:c4:67:e3:be:2d:
                    99:e0:3d:51:95:28:6c:01:9f:3e:a7:5a:2e:36:39:
                    3d:8c:ee:f1:a4:45:9a:d0:1d:2a:3c:3a:d0:b7:4a:
                    bc:64:07:f4:1f:a4:d3:2d:c3:24:08:74:e9:47:f4:
                    eb:2b:ff:16:e3:68:a6:e2:fa:84:d6:12:a4:31:6c:
                    6e:49:17:40:18:c7:74:be:39:86:c7:e1:e2:85:a0:
                    71:41:23:0f:74:3a:49:e6:ab:ff:a5:a4:0e:a9:da:
                    e9:7b:48:87:eb:da:63:03:fd:c0:7c:2d:8e:ed:fc:
                    91:26:11:13:31:dc:ac:ef:ad:8f:b0:3c:55:df:fb:
                    b5:a4:5d:9c:5d:f6:a6:0e:e3:29:22:40:ee:d5:c3:
                    8b:2b:7b:6b:d2:a0:5b:09:86:78:4c:ef:1e:9e:f8:
                    bc:cc:65:ae:20:18:8b:b0:fc:09:c6:d6:28:60:81:
                    7e:4e:96:86:03:2c:11:85:a3:91:5b:73:37:4f:c7:
                    da:76:d3:8b:13:20:7a:04:76:53:67:9b:09:a6:2c:
                    3c:f9:ba:8c:78:65:29:76:aa:9d:fa:cf:15:26:f5:
                    ef:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:29:78:2E:61:38:B1:55:2F:F4:8A:7F:E9:50:D4:19:C5:A3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/982c5795-fe93-3ebb-93ac-4d66ccba12aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:38:ed:a0:2b:f5:78:a5:5e:da:c1:ab:6e:98:db:3f:32:19:
         3f:85:ac:78:03:6a:e9:38:e0:76:2e:71:2d:f0:e7:89:f4:10:
         b9:96:51:1c:6e:6d:a9:f9:d5:f0:3a:ee:b0:fb:84:dd:3d:a0:
         e2:16:f9:f8:41:3f:58:27:07:1d:a7:f3:9f:83:cb:93:fb:f6:
         61:1d:7b:b0:0e:24:3f:9e:bc:e2:88:22:b0:3d:33:02:d8:c6:
         4b:6c:fa:bc:67:9f:c3:04:cd:c3:1e:58:5b:3f:64:a6:c0:ee:
         31:13:83:7c:b0:09:e5:07:19:87:d8:7f:c1:e5:c1:fa:09:5f:
         d3:7a:d4:2f:72:2e:08:3f:4d:ab:68:b5:b9:f6:9a:b1:fd:f5:
         3c:a1:ed:8a:03:cc:ba:ce:fe:a9:42:67:73:17:52:6d:9f:a6:
         e2:72:2e:87:ac:62:ff:33:63:cf:94:d1:c0:c2:4d:51:e0:29:
         58:8d:9e:d6:20:25:fe:8a:57:45:ed:cc:9e:e7:34:8a:f3:a9:
         af:3f:b7:7e:72:55:09:8c:50:4a:b1:40:5d:07:9e:33:03:53:
         c1:2d:e7:4b:bc:39:11:ad:e8:8a:52:74:1a:69:b2:f3:c5:55:
         30:51:f5:0b:04:cf:f6:7c:f6:e7:f4:7a:0e:c3:af:12:5f:66:
         51:48:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:10 2025 by rpki-client