Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f37807f7-c01c-38e7-90a3-02cc83a015f1.roa
File:                     f37807f7-c01c-38e7-90a3-02cc83a015f1.roa (raw, json)
Hash identifier:          sSCZg74xqnRy9/UuP/LK9DdT5FuhwNLIV5utvyl0G2E=
Subject key identifier:   BB:1B:6E:5C:5E:12:29:8B:37:AA:12:09:45:E4:D4:DA:BE:B6:FF:37
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F432858498769B53CA25527FD12BF1500
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f37807f7-c01c-38e7-90a3-02cc83a015f1.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     9009
IP address blocks:        2607:740:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b5:3c:a2:55:27:fd:12:bf:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=8dd62cee-e389-4603-a32c-dd674eb30c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:26:a4:92:07:0a:ac:80:81:b6:69:95:de:21:
                    d9:74:bd:74:80:48:d2:fd:5b:b5:e2:e4:ce:33:c4:
                    7d:37:27:f3:f1:ae:ba:ad:28:8f:06:f0:47:14:1b:
                    a4:7b:d5:73:e2:b0:b8:bd:ba:9d:65:77:4f:d6:fb:
                    6a:da:00:f7:7f:79:58:cf:f9:5b:36:e7:a1:74:ed:
                    13:b8:96:87:86:10:05:26:5f:c6:c1:f5:75:35:d0:
                    c9:f7:d7:e9:a9:73:aa:e0:02:42:b4:6e:d5:3e:5b:
                    9d:21:17:3e:2c:c2:de:b3:09:4b:2a:98:8a:27:af:
                    13:ed:ff:47:d2:db:55:4d:de:d2:e1:e5:10:50:cf:
                    8c:80:b4:b9:56:b7:05:57:e2:55:7b:72:d2:9f:1d:
                    76:47:d8:6c:d7:0b:aa:8e:ed:96:e7:18:7a:cd:51:
                    f8:e6:a5:d8:09:ec:32:2e:0d:e3:84:b4:c3:83:e5:
                    6d:18:bf:73:a8:b8:3c:b6:ed:67:ec:bc:20:bc:2c:
                    89:12:be:98:5e:5a:6a:07:03:b9:b8:ea:a1:a1:bb:
                    07:2b:8b:13:ba:d8:7f:95:17:0d:58:1a:73:0c:34:
                    95:dc:67:1e:53:b3:23:c8:50:13:2f:7d:dd:5a:e5:
                    dd:50:d6:6c:6a:a7:37:68:e4:3a:4c:87:46:5a:49:
                    71:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1B:6E:5C:5E:12:29:8B:37:AA:12:09:45:E4:D4:DA:BE:B6:FF:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f37807f7-c01c-38e7-90a3-02cc83a015f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:24::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3e:5b:76:62:0f:9a:0e:b0:3f:41:48:ce:ad:1f:eb:b5:2f:
         b9:ba:e8:2e:9f:9d:95:9a:09:95:f1:9e:50:1d:a6:15:e5:d7:
         eb:59:3a:be:ce:be:11:3f:f4:9a:9f:b2:66:32:8f:70:90:10:
         37:e3:9d:f0:b6:61:52:a2:99:3e:b4:89:00:a4:88:a3:55:c5:
         0e:1b:06:b8:17:b4:92:44:71:bc:cf:c1:e9:bf:ba:1b:5a:9a:
         f3:9a:16:f6:e4:47:6f:cc:aa:5c:c6:6c:1b:3e:9a:13:b3:b6:
         f6:cf:45:6c:15:23:97:72:e1:6c:dc:e0:29:74:d4:22:db:67:
         64:68:85:48:24:dd:31:8b:6e:ba:b7:20:47:c3:23:09:5f:18:
         11:62:08:80:23:4d:3a:21:cb:37:2b:b1:65:92:fb:22:8b:45:
         5b:60:09:f9:4e:c5:a6:da:97:2a:53:d0:27:8f:db:a6:4e:48:
         f6:79:ab:9a:16:9b:42:3c:9e:e5:c8:19:23:87:d9:b4:3b:15:
         65:75:ff:40:24:f4:81:e0:7b:09:1d:39:04:34:d9:c2:e5:ce:
         5f:4c:a4:da:1b:b2:2d:35:2b:92:e3:02:c7:85:b6:16:f4:d3:
         ed:e0:3b:05:d5:68:27:f3:b3:b4:8a:34:f5:43:69:e0:65:1e:
         7d:2f:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:03:55 2025 by rpki-client