Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/60fbf9ed-a259-334b-a1c8-e266b1343140.roa
File:                     60fbf9ed-a259-334b-a1c8-e266b1343140.roa (raw, json)
Hash identifier:          lJOnZh2nW1Ix4iRbDT0vtmQQ4S3SPaJDWC2NdbsVymA=
Subject key identifier:   0A:90:04:3B:A5:60:23:94:F4:83:E2:A6:EC:9C:55:95:9A:CC:8D:4F
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F432858498B99D0DD7F6E397A9DBD4080
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/60fbf9ed-a259-334b-a1c8-e266b1343140.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     812
IP address blocks:        2607:f798:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d0:dd:7f:6e:39:7a:9d:bd:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=27c43e5f-6191-417b-b66e-553df2493b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:9f:ce:a9:9f:30:14:e2:b6:15:c4:7b:f6:
                    18:dc:5f:c7:a6:54:44:39:94:7d:bb:bc:56:ac:f8:
                    6b:5b:3f:06:f0:e2:e7:8e:61:5c:ff:ee:68:6d:cc:
                    e3:ca:75:71:2f:c8:30:f9:a6:5a:b0:3a:af:67:9a:
                    f8:bc:08:22:5e:1f:ee:17:8d:71:fa:61:59:bb:92:
                    12:1e:8b:4f:fb:2a:09:c9:18:ef:f4:f2:bf:6b:aa:
                    7f:30:2a:81:4b:27:3a:89:16:cf:09:be:68:74:e4:
                    05:ea:8d:e7:61:d3:ad:06:18:4f:1d:fe:85:eb:a8:
                    ff:01:52:18:f5:80:ad:74:0a:64:21:55:db:61:2a:
                    5e:fa:8c:a6:8e:fa:01:7c:8a:38:f4:00:68:97:d1:
                    8a:b5:0d:c6:b2:72:d6:55:9b:18:f0:2f:b8:76:0e:
                    dd:35:b7:bc:ba:3e:29:bc:9c:6d:41:bc:50:70:79:
                    19:78:8f:d5:0c:02:f6:f8:9d:4c:73:30:0c:55:30:
                    27:df:b4:12:d9:96:16:53:b2:5d:c0:0a:e3:c5:a3:
                    d2:57:96:a0:60:45:64:ea:15:be:6b:1e:2d:4e:52:
                    6e:db:bf:a1:d9:13:51:57:63:10:53:a9:5a:74:52:
                    3b:d8:76:82:8b:68:86:7a:9f:30:37:50:3e:16:bd:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:90:04:3B:A5:60:23:94:F4:83:E2:A6:EC:9C:55:95:9A:CC:8D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/60fbf9ed-a259-334b-a1c8-e266b1343140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f798:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:7e:6b:65:6d:e7:86:99:ba:1e:e7:60:f1:0a:ad:7a:08:96:
         35:08:ed:d3:9c:98:41:b3:41:13:1a:b8:cb:d4:d3:85:fe:39:
         1c:2f:31:b3:ee:d8:12:c8:a7:57:2d:53:32:d1:0c:fb:11:ab:
         3d:e2:fe:04:1b:13:97:ce:53:31:61:25:e8:8d:a1:83:42:8a:
         d0:76:ad:07:88:00:06:6f:db:74:fb:e5:04:8b:38:84:4d:64:
         06:d5:c2:6e:6b:00:f4:29:61:55:72:51:c2:38:07:b6:dd:d6:
         1f:fd:b1:4a:31:15:8f:90:21:c7:b6:21:f4:d5:ed:0c:3f:1b:
         b8:c1:8d:8d:3e:ab:d6:58:fb:ad:28:a9:10:07:70:48:0b:d1:
         82:66:d1:b1:6b:d3:ce:2b:11:8a:1b:24:21:00:a5:35:22:a6:
         c0:0c:80:4a:ab:ac:f3:b1:e5:45:08:eb:ac:09:49:78:04:31:
         96:e9:27:05:cb:d4:9b:30:a0:be:0c:83:ad:89:d5:66:17:1d:
         80:2d:73:12:e7:ca:e8:c8:49:e3:70:a8:c1:a8:a6:74:8c:65:
         7a:f8:8e:8f:df:98:45:70:b1:98:da:02:81:fb:81:a0:2a:60:
         f3:ed:b8:6b:89:58:cb:4b:5c:9f:da:cd:5f:bf:aa:30:30:90:
         fe:12:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:46:16 2025 by rpki-client