Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/5747fda4-9caf-35d9-87f7-5bb218756291.roa
File:                     5747fda4-9caf-35d9-87f7-5bb218756291.roa (raw, json)
Hash identifier:          LRTyEdSRwLlXHUoFDHhBle4v2DH4tnnj6RRkFNHAxpA=
Subject key identifier:   DC:12:18:11:95:0D:49:B1:23:0D:E2:F5:83:C0:80:A7:97:2F:F7:9A
Certificate issuer:       /CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
Certificate serial:       010D0C9F4328584976A98CE068492320EE296018
Authority key identifier: 81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/5747fda4-9caf-35d9-87f7-5bb218756291.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     398779
IP address blocks:        2607:1740:1000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8c:e0:68:49:23:20:ee:29:60:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=b6da6a84-74f7-4bbd-8101-8a1b4af39a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:4e:89:c9:b2:24:81:8c:04:73:ab:11:fe:
                    6e:c7:d3:d3:f7:9b:49:29:f4:88:51:37:b4:da:88:
                    47:38:6a:bb:d7:fe:d5:19:20:20:a9:28:ea:0b:97:
                    17:0a:46:90:fd:c2:06:67:b7:8b:96:86:5c:78:20:
                    e4:f8:08:9e:dd:af:11:78:d6:8d:72:87:5c:f8:e2:
                    d6:65:34:b3:27:48:f7:63:2b:14:ad:34:95:7d:21:
                    6e:c3:86:ba:ad:8a:c6:a1:e3:18:f0:cf:3b:c5:6a:
                    65:ea:a2:16:b0:eb:de:a5:14:fc:5d:99:ea:74:ed:
                    1d:a0:b9:5c:03:65:1e:e7:70:d1:29:2c:7a:14:0c:
                    ea:80:43:49:a3:ab:20:87:63:c5:55:0e:f3:42:2e:
                    4f:f5:0e:70:e7:72:d9:95:de:47:f8:bc:8a:a0:41:
                    53:b1:dc:ee:76:d1:ea:f9:3e:8d:60:ef:04:7d:76:
                    7b:81:7e:11:e0:04:42:d2:1e:9b:71:5b:c9:ff:1e:
                    f3:e5:51:5a:fc:6a:fd:1e:98:7e:6e:61:e5:56:90:
                    01:de:c5:a3:83:8a:26:ba:98:16:4d:d7:8c:78:1e:
                    b9:91:fb:e3:93:7b:fe:45:5c:a3:28:b6:b1:dd:4e:
                    c0:07:f7:3a:e9:0d:18:18:86:46:d9:e5:29:cc:b3:
                    b6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:12:18:11:95:0D:49:B1:23:0D:E2:F5:83:C0:80:A7:97:2F:F7:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/5747fda4-9caf-35d9-87f7-5bb218756291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl

            X509v3 Authority Key Identifier:
                keyid:81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1740:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3b:b2:6c:9b:e0:56:75:4d:02:35:44:c3:78:6a:66:a3:83:
         22:c8:b9:29:09:51:6a:cb:bf:88:b1:27:b8:ec:16:d8:93:39:
         ee:f1:96:7b:7b:38:d0:59:bf:11:86:64:78:0b:82:48:ed:f6:
         f8:09:e4:23:70:ff:6b:8f:34:70:4b:ae:c9:a3:6c:f2:5d:b2:
         36:40:8f:dc:d6:13:18:63:75:bb:e1:92:27:15:04:80:0d:3d:
         d6:3f:dd:95:b9:98:af:0a:e6:8b:7e:1b:46:e8:6c:9d:fb:a2:
         11:87:8b:ec:b7:c3:0f:65:4b:45:53:c8:74:4a:a1:dc:e6:9f:
         45:30:f2:a6:db:90:e8:59:e7:f0:1c:c7:0d:69:2a:25:bc:98:
         15:a2:9a:8e:51:3e:39:db:9e:49:73:06:29:49:8c:1f:da:b5:
         6f:de:1e:89:ff:d4:ae:19:93:25:b9:2a:d2:06:71:e0:47:44:
         ce:60:21:07:0a:bb:70:db:fe:32:41:58:e3:7f:cf:42:11:b6:
         35:d8:69:b2:18:dd:f7:2b:0c:d0:fc:6c:bf:d7:61:15:fd:45:
         6b:12:36:a5:fc:f0:e7:9a:fa:48:54:8f:a4:60:1c:2d:6e:4f:
         65:75:7c:0e:83:16:bf:9e:33:30:ac:48:44:23:28:3b:18:f4:
         78:33:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:49:05 2025 by rpki-client