Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/d72c5d95-c10f-3a51-8429-815b719ff937.roa
File:                     d72c5d95-c10f-3a51-8429-815b719ff937.roa (raw, json)
Hash identifier:          W0O2ZFxwhOE7wcebJVIBla5/4lRPVJf8X/F4S6y9c4U=
Subject key identifier:   5A:14:2B:83:D7:69:A5:66:38:61:1B:02:80:07:41:48:DF:65:23:86
Certificate issuer:       /CN=31423667-ebcc-4a10-8150-8758941bb075
Certificate serial:       010D0C9F43285849DC8FC0979A509C08B0834D00
Authority key identifier: 91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/d72c5d95-c10f-3a51-8429-815b719ff937.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     19218
IP address blocks:        2604:fd00:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c0:97:9a:50:9c:08:b0:83:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31423667-ebcc-4a10-8150-8758941bb075
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=b3041b59-deaf-4c64-9823-db9419f437e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:b9:79:6e:13:57:99:89:f2:b2:b2:8a:5a:
                    c8:9b:38:35:35:16:53:f1:d9:97:54:ea:96:bd:62:
                    e1:88:18:e8:94:86:f6:8f:4c:b0:ff:f2:86:65:1d:
                    7d:9e:53:d0:d0:35:2d:7d:f4:9c:8c:36:c2:16:16:
                    2b:92:b2:99:b8:ce:ba:e6:54:f9:26:57:5f:73:f2:
                    23:72:be:6a:6d:ea:e3:a1:7c:7c:c5:ad:01:a2:bb:
                    40:f5:6e:85:58:28:1e:a2:2b:9b:50:49:6c:c3:19:
                    1f:f4:9c:6e:16:46:d8:ad:0e:a6:b9:6f:6d:c8:a8:
                    e4:1b:cb:4d:16:d1:c0:ac:b1:a8:a7:62:6b:78:e1:
                    fe:6c:51:a8:74:09:56:41:bf:82:62:6d:71:19:d3:
                    bf:26:bc:6e:79:89:bd:b8:1b:4a:64:6b:2c:4f:e8:
                    25:5a:d6:04:38:29:27:7c:9b:2d:24:20:01:e3:d7:
                    6c:43:7a:b5:c1:0a:40:5b:2b:46:4c:39:1f:8a:19:
                    e0:d9:09:00:37:81:91:f9:e8:52:a0:ca:51:80:37:
                    d4:7e:46:36:ae:a9:b5:70:1e:aa:14:de:b2:e1:4c:
                    a9:47:90:d7:f7:b8:ff:ac:c5:7c:cd:8a:f5:5e:28:
                    dd:bf:6e:d1:0e:08:22:c5:ae:e8:8d:02:8d:06:77:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:14:2B:83:D7:69:A5:66:38:61:1B:02:80:07:41:48:DF:65:23:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/d72c5d95-c10f-3a51-8429-815b719ff937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075/31423667-ebcc-4a10-8150-8758941bb075.crl

            X509v3 Authority Key Identifier:
                keyid:91:01:2E:B2:A1:51:5C:89:B5:03:AC:13:75:4D:37:A4:51:26:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31423667-ebcc-4a10-8150-8758941bb075.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fd00:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7a:1c:30:c0:ae:17:04:ff:bb:c1:9d:5e:ae:1c:93:37:51:
         e3:af:22:63:7c:1e:9e:4b:ea:1c:55:ab:e4:a4:36:f0:10:3c:
         4d:02:02:0b:ac:6b:05:6d:0c:ed:d7:3b:5e:23:d9:36:0b:bc:
         93:5e:fc:17:2b:4a:a4:87:6b:e2:1e:47:20:d8:27:a3:5e:30:
         e3:8e:52:c2:87:a2:38:b3:e6:f3:51:8c:12:61:a3:31:83:14:
         2b:6b:32:5f:4c:b3:e6:04:fd:62:d5:ee:11:13:61:2e:e1:31:
         8c:2c:23:9e:c5:8c:3b:e9:0f:8b:78:b9:6b:11:26:bc:bd:fa:
         7a:fa:28:eb:ba:18:76:85:e8:13:e9:f5:68:69:d9:7e:71:17:
         bc:1d:47:79:d8:67:c5:2f:f7:3a:e9:73:1f:e9:21:4e:5e:42:
         f4:4a:7a:3c:d2:81:11:c1:ce:80:21:3b:c3:b3:da:d5:eb:ed:
         f9:bb:6a:b8:7a:3c:1e:dc:6b:9f:71:54:6b:c4:93:f9:77:66:
         35:f4:93:b2:45:8f:1f:18:73:dd:5e:a2:68:aa:74:18:60:2c:
         4d:58:d0:9f:c2:5a:68:98:0a:0f:fe:56:dc:59:45:d9:5d:e1:
         cc:39:83:bc:b0:65:ff:35:d5:33:c5:10:e5:1a:9c:72:5b:d5:
         81:b0:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:26:25 2025 by rpki-client