Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9051a569-4f38-3329-945f-e2fca1424e5e.roa
File:                     9051a569-4f38-3329-945f-e2fca1424e5e.roa (raw, json)
Hash identifier:          u4m7myXEhQNzqqNarPsL+kHXaHAfYH1e/8S8iySJQSE=
Subject key identifier:   CA:99:C8:D4:63:61:5A:62:56:85:A0:78:2B:12:D7:1D:C7:89:E0:60
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499294A01FF50D28B80845B420
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9051a569-4f38-3329-945f-e2fca1424e5e.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     852
IP address blocks:        2607:fe88:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a0:1f:f5:0d:28:b8:08:45:b4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=12f81e7e-ea65-4d70-91f5-feea2831896b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:f7:4a:a3:30:84:e2:91:bf:d0:69:a8:1c:
                    3d:21:b4:45:44:c9:fe:7a:64:03:45:a2:8f:5f:be:
                    d6:48:09:1e:a5:71:88:01:96:da:89:fe:cf:e8:ec:
                    7c:8c:90:ce:a0:36:ed:0a:05:d8:51:e5:6f:ca:a1:
                    ec:b6:ea:3a:96:df:3d:27:28:a1:5f:33:ec:88:cd:
                    0c:85:3d:50:f0:9b:ce:82:03:19:07:4d:d4:fd:d0:
                    64:9b:c4:04:d9:a0:93:11:b4:ec:83:5a:90:0e:f7:
                    9f:60:dd:95:cd:6a:83:db:3d:7d:88:f9:8b:ee:74:
                    c3:b5:60:ac:8f:d5:32:c6:88:90:f3:50:35:38:87:
                    ab:83:fb:16:6b:5f:29:76:38:2c:87:76:5e:d7:3d:
                    f9:f2:b2:2b:7c:ba:b0:99:f9:72:6f:0d:37:5d:0d:
                    fc:ec:da:84:21:0c:1c:96:09:cc:ee:f7:60:ce:37:
                    eb:b1:72:17:77:06:54:5d:b4:3f:5d:69:6e:78:b8:
                    cf:8f:d7:69:cc:e3:a3:25:d3:0e:e2:93:0e:74:68:
                    ff:ed:8f:c9:59:6e:9a:82:50:0d:38:56:77:0a:ce:
                    39:92:96:84:97:a6:76:10:75:30:13:a2:f2:3f:30:
                    87:60:8c:57:0f:67:1c:ad:99:20:b5:39:34:5e:10:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:C8:D4:63:61:5A:62:56:85:A0:78:2B:12:D7:1D:C7:89:E0:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9051a569-4f38-3329-945f-e2fca1424e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe88:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:48:a6:df:58:1a:32:8f:0f:25:67:ca:ec:f1:81:3e:4d:9f:
         31:72:9e:85:44:ad:83:70:6e:9e:89:1d:84:99:9d:8f:4a:ca:
         c3:f5:b4:27:df:df:cb:46:f4:a8:7a:68:1a:1a:36:1e:07:a9:
         4f:04:cb:fb:1b:e5:4e:da:b6:33:83:60:ab:df:27:aa:12:3e:
         00:c8:a6:84:10:7f:61:d4:a8:86:71:15:88:7b:68:de:4a:49:
         6d:f2:b0:cb:38:8e:a3:98:9b:c0:46:c1:69:1d:78:bf:25:24:
         00:1d:04:d2:44:c6:68:df:e5:7f:1a:04:c0:14:2a:9f:5d:11:
         95:05:de:d8:3b:83:93:fe:5b:30:0f:6c:b8:8b:05:1b:ee:ed:
         3c:25:d8:5e:c1:3b:0b:3d:39:09:45:b6:db:a5:8c:d5:9b:40:
         7b:1b:cc:12:80:1f:d9:77:34:21:c5:56:27:88:66:25:14:21:
         3a:72:59:b6:c7:a2:31:b3:8c:43:7a:02:35:96:b5:b5:3b:c7:
         65:81:c9:c6:c4:ca:9d:ff:2c:4c:c8:23:bb:8f:0e:c5:77:9d:
         65:4a:53:a6:05:84:67:d6:0b:4d:f9:46:6d:ce:cb:79:7d:a0:
         9a:00:f9:94:44:6f:23:93:a6:d5:b5:e0:a8:59:3f:33:e0:7e:
         1c:ad:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:19:01 2025 by rpki-client