Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa
File:                     78a6b278-a386-3ab9-ae89-23d472527cd2.roa (raw, json)
Hash identifier:          SX2VPj17Dw/bqYr0FMZzf2U+/4F5UbjSQd5HVow/CcA=
Subject key identifier:   8B:7A:1A:0C:DA:D1:3C:AA:57:68:25:0A:F4:34:5A:90:CD:00:92:3B
Certificate issuer:       /CN=917f98c2-cbd2-43de-a8cf-7091ad719621
Certificate serial:       010D0C9F43285849EA851E011F04D829573DFEC0
Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     6939
IP address blocks:        2605:3ac0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1e:01:1f:04:d8:29:57:3d:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=82d660d2-6a8f-424f-8abe-d3c276a88619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:4e:97:e2:06:0b:a8:70:8d:8e:45:77:67:
                    28:fd:92:dd:5f:77:97:17:4c:97:5a:41:0b:a2:ae:
                    4d:ea:11:8b:5d:a6:4f:c7:0b:ab:70:48:04:b0:a8:
                    5c:4f:cb:1e:8e:02:13:08:d6:9c:6a:22:a6:ea:a3:
                    92:31:ca:a5:b5:2d:42:86:28:c1:b5:a3:9a:35:d2:
                    0a:16:84:05:f3:e4:51:80:1a:48:00:4a:4c:58:db:
                    bb:c8:31:16:38:c7:ad:b1:09:25:a1:67:32:02:7e:
                    9e:3c:ad:92:43:ef:5a:f3:a3:26:cb:39:a7:08:47:
                    21:2e:f4:15:f5:dc:3e:32:09:5e:c2:cb:4a:76:78:
                    90:ba:c2:3b:80:e2:e3:6d:90:95:4b:c0:81:e5:6c:
                    ab:7e:29:c1:2f:0b:16:12:3a:94:ee:b2:db:bb:9a:
                    97:3f:a4:b3:f9:50:dc:ba:e4:48:fe:1b:61:14:84:
                    3c:9f:e0:c2:1b:64:31:c8:d1:b4:7b:68:8a:0e:5d:
                    2e:58:6b:a2:f1:de:b9:26:0f:c1:2d:d6:cb:5e:81:
                    2f:dd:5d:d5:8b:bd:09:af:d1:c8:3b:ef:cf:c1:50:
                    fa:79:32:29:85:a4:e4:27:20:5b:5a:9a:f0:24:21:
                    5d:e6:0d:df:56:0d:b2:07:1f:11:d3:80:1d:e5:1e:
                    d7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7A:1A:0C:DA:D1:3C:AA:57:68:25:0A:F4:34:5A:90:CD:00:92:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl

            X509v3 Authority Key Identifier:
                keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3ac0:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:67:9c:1d:8c:51:a5:37:c2:8d:4a:94:fa:3f:c5:ae:cb:6f:
         3d:22:78:0f:b6:e4:f0:f5:12:21:3e:c4:52:b3:db:90:2b:05:
         cb:1c:eb:44:23:20:43:84:2e:56:ad:98:8f:71:e4:3e:25:82:
         bc:cc:e7:50:85:ee:68:3c:14:dc:8f:b0:43:e5:2d:d0:2b:96:
         3b:3d:e5:7a:56:1e:dd:9a:83:22:ef:3f:8c:c5:5e:7a:ef:42:
         c6:f0:0e:14:3a:c7:13:e8:f9:44:24:b7:09:6b:51:77:df:35:
         50:d7:90:16:ec:5e:d7:a5:7c:b0:6b:9e:b8:56:d6:78:24:4c:
         c1:6f:4f:57:84:1f:6b:9f:22:75:77:de:84:7e:b3:3d:9f:84:
         25:c6:58:15:f0:b4:e3:d2:83:aa:19:b7:84:59:d1:b9:16:94:
         b5:95:e4:02:65:64:6d:95:3c:32:2f:37:3e:dc:d4:a6:ab:4f:
         b4:26:72:98:75:e0:c4:1e:56:d6:bb:fb:39:cf:27:f9:3a:43:
         51:8c:0f:66:20:cd:9d:e8:32:42:5a:85:51:ff:91:be:4c:0a:
         0c:81:3d:d9:05:da:2f:73:ab:96:75:a8:b6:79:4d:83:d1:43:
         4c:00:0b:82:75:e5:24:74:80:ff:f9:b5:56:8d:13:24:79:b9:
         06:b8:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:57:46 2025 by rpki-client