Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/e3a72863-ca11-3c18-b55c-7146fb931a82.roa
File:                     e3a72863-ca11-3c18-b55c-7146fb931a82.roa (raw, json)
Hash identifier:          xOgyjQ3yaiVIaDfZ5cnSVpefL2uTWX963yhQe4+tbPs=
Subject key identifier:   20:9E:EE:DB:D7:A4:C3:90:88:3D:67:9D:1C:4F:62:F3:F0:7E:A1:29
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584A1F901B3433C0FC156C161CC0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/e3a72863-ca11-3c18-b55c-7146fb931a82.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     23059
IP address blocks:        2607:f4e8:ac2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:1b:34:33:c0:fc:15:6c:16:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=a20a5cb1-f7fa-4947-abf5-4f04bd1d43c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b1:87:dc:e0:0e:9d:bf:96:69:52:24:5a:36:
                    b1:d4:0b:2f:95:06:26:9f:fe:00:dc:13:ba:83:70:
                    ca:71:df:0c:36:7b:fd:56:2c:dc:fd:7d:37:2e:17:
                    7d:eb:a6:64:d0:d4:29:a5:ec:a4:3b:41:83:1e:b5:
                    ab:6e:8b:0d:9b:e5:9d:cc:c7:91:03:94:e7:25:4c:
                    d4:00:77:d5:ef:47:3e:10:3f:d3:b6:b8:c0:64:fe:
                    cc:bb:23:a6:b5:85:de:fd:52:d8:33:a8:d2:88:e3:
                    e1:13:4e:3d:ff:a0:3d:cd:45:62:cd:04:ec:69:04:
                    6b:cb:6d:1a:ae:08:d7:f4:30:8c:7b:9b:ef:b5:e4:
                    bc:0b:8f:b0:05:16:ef:1c:4c:e7:62:6f:6e:19:55:
                    6f:28:d1:1a:0d:55:7e:71:4b:ff:50:21:59:f1:50:
                    97:e8:33:a0:d7:fa:f9:78:20:29:96:7d:46:ae:29:
                    1b:88:13:eb:b8:2e:c4:f9:57:24:d0:35:c8:14:47:
                    41:06:1b:2b:d7:f3:4d:8c:7f:69:3e:68:a1:d2:f4:
                    bc:64:08:1e:13:0d:f7:1c:68:27:94:8e:d2:4f:4c:
                    32:2b:be:97:e9:df:36:bd:0e:0b:75:65:4c:3a:2a:
                    54:16:70:8d:b0:1b:5a:56:a3:99:8a:00:c9:73:b1:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9E:EE:DB:D7:A4:C3:90:88:3D:67:9D:1C:4F:62:F3:F0:7E:A1:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/e3a72863-ca11-3c18-b55c-7146fb931a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:e6:46:6e:c7:4a:db:d8:c6:17:62:80:f3:17:12:b7:3f:
         5e:10:5c:6a:c7:8d:44:9c:d2:80:31:c4:2c:61:a9:8f:81:9a:
         df:b0:63:ac:82:4a:e8:cb:23:0a:4b:cd:0f:1e:db:a8:28:5c:
         2a:65:cf:ed:50:a9:ed:8c:ad:a1:7e:21:b9:b8:08:21:12:ef:
         f0:14:f1:0b:74:c1:35:d0:99:94:93:c2:05:89:f5:6c:4b:1c:
         ba:49:f5:ef:c9:7c:91:74:83:fe:6b:60:f2:63:2e:73:50:bc:
         b4:34:4d:43:f5:f9:23:0b:60:74:3a:58:b7:05:51:b3:04:fa:
         26:ed:a8:f1:27:3e:3b:a2:ef:b8:55:a7:ee:16:76:e1:81:8e:
         f1:b4:cd:09:26:44:ef:68:c8:aa:4f:e3:51:31:15:6f:84:a4:
         e2:36:21:c5:f0:28:2b:83:64:6c:63:db:0c:9a:54:07:a6:96:
         09:a7:a0:f7:1a:bb:07:c6:42:ff:77:bc:f3:97:30:f2:75:fd:
         f3:88:ac:87:76:10:4a:46:a8:b5:b6:de:1d:3b:45:95:4a:73:
         77:a4:f4:4c:14:7b:88:fe:fc:16:7c:ee:a2:64:f0:64:f7:df:
         52:a4:70:a5:c1:fa:0a:45:35:3e:15:f2:54:6f:33:ac:fb:a5:
         9e:93:32:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:10:50 2025 by rpki-client