Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa
File:                     df87bb72-dc52-3639-a0af-dcba3509be30.roa (raw, json)
Hash identifier:          9GGK9uwZrjVqMIDrEmsCxbYhdV5jqw2VRU2UKe3Q1cY=
Subject key identifier:   FC:DF:1B:30:11:12:F9:BF:02:CD:19:3C:BA:18:41:E6:A7:9D:33:C6
Certificate issuer:       /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial:       010D0C9F4328584A10353CA7183B50BE110BDB80
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     36236
IP address blocks:        2620:49:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:3c:a7:18:3b:50:be:11:0b:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=eea1451a-bebd-4d9f-a53d-701ac45a9b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e4:0f:72:36:c5:96:d4:93:79:89:be:7b:9e:
                    66:9d:24:7d:cb:21:8f:c4:4d:0f:2f:f3:be:2c:13:
                    71:f2:96:bc:a0:39:2e:37:6e:c8:6a:b4:39:af:40:
                    fc:50:ae:10:1e:e1:fc:32:41:79:2b:ae:e5:b8:9f:
                    ad:bf:bc:af:f3:c5:fe:ca:69:d0:10:c3:f4:ab:3b:
                    0d:c5:d9:95:0f:d1:9d:8f:71:32:07:05:56:79:fc:
                    67:09:e7:f3:ec:95:ad:49:9c:a5:a8:e5:22:48:8c:
                    76:77:62:21:54:2d:8a:ec:56:e6:51:cc:bf:17:57:
                    92:74:88:70:98:5e:b5:14:cb:25:5f:22:54:44:fb:
                    55:da:e9:ad:b5:06:27:80:f0:25:cf:58:6c:ba:21:
                    62:d0:c5:ee:88:d1:3b:e2:54:60:52:39:b6:ac:0c:
                    0a:0a:06:a2:42:6f:38:36:e2:1b:1f:1e:86:10:33:
                    49:bd:22:48:be:2d:b9:11:ac:be:d1:78:71:5c:24:
                    95:54:6f:6b:cc:27:33:cd:2f:5b:33:41:c1:45:97:
                    63:20:14:15:d6:04:0c:5e:63:cc:f6:05:52:96:28:
                    1d:e6:ae:3e:76:a0:02:f7:4d:88:da:29:29:03:98:
                    65:7a:42:da:ea:64:7f:48:d0:ec:7f:04:72:bd:c3:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DF:1B:30:11:12:F9:BF:02:CD:19:3C:BA:18:41:E6:A7:9D:33:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl

            X509v3 Authority Key Identifier:
                keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:49:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:86:30:2c:95:d3:c9:f4:ed:32:8e:83:0e:8d:5a:0b:56:
         03:e0:08:89:ec:f8:ba:e6:11:8b:57:87:97:e4:ad:02:25:e1:
         e1:24:c9:c7:b2:00:7b:73:1e:0e:0f:96:25:2f:75:a4:88:6d:
         e8:1b:63:6f:58:a4:03:d5:ba:8e:a3:5d:9c:b1:af:36:c2:89:
         0a:16:a3:70:5b:16:6b:cf:2e:1e:db:ac:25:c6:23:0c:56:88:
         01:88:2e:dd:3d:40:4d:2c:da:34:4d:ed:18:02:d4:ab:34:ab:
         af:79:1d:e3:28:ce:b0:81:5e:44:dd:26:fc:c5:62:32:c8:bc:
         e0:bc:6d:42:0a:b7:fc:e6:71:ff:0a:b1:5e:d8:c7:88:26:65:
         74:ae:18:78:48:9d:91:a5:b6:01:0b:e6:a2:01:35:83:6d:88:
         34:6c:50:eb:7c:4f:f0:b9:b5:53:e0:9b:9e:8e:6e:e3:5b:25:
         fc:e8:e4:a0:23:53:7e:89:4f:ee:d3:78:91:b0:91:25:56:ff:
         ae:b0:f3:5e:81:93:d9:1a:34:ae:fd:57:17:d1:0e:6d:42:fe:
         5a:08:7c:7c:97:83:eb:28:97:81:77:f6:bb:aa:7a:fe:51:52:
         57:1a:6e:fa:06:ee:e3:08:ad:fc:37:d6:10:05:b7:6d:66:3c:
         3a:69:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:54:04 2025 by rpki-client