Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/f9f523ad-9870-307e-895d-ed31d1359fce.roa
File:                     f9f523ad-9870-307e-895d-ed31d1359fce.roa (raw, json)
Hash identifier:          is6ZK4W6ECzhUE2Alk6yLp5BJmKUb1DossR/rIfSj8k=
Subject key identifier:   91:DF:9F:1D:35:F9:20:21:5B:66:ED:C5:D7:77:7E:00:A4:9E:23:D0
Certificate issuer:       /CN=736df059-86cb-4a7f-b49e-44e0134dfbca
Certificate serial:       010D0C9F4328584A1B5FFA4B55A90D30EB6CD6C0
Authority key identifier: 59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/f9f523ad-9870-307e-895d-ed31d1359fce.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     23260
IP address blocks:        2604:8d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fa:4b:55:a9:0d:30:eb:6c:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736df059-86cb-4a7f-b49e-44e0134dfbca
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=c6bff8a9-ac84-41ef-939d-fe38e4b95815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:61:54:14:14:ad:b3:e8:be:d3:04:cf:68:
                    b7:bb:29:76:1c:7e:e2:83:3c:bf:c8:45:27:e5:a9:
                    f5:a7:63:83:de:84:d9:0e:64:fe:4e:44:5c:1f:65:
                    64:fb:14:68:de:ae:d4:13:a6:fc:ff:2b:c7:34:bc:
                    72:5a:e4:75:f4:ac:57:a4:59:cd:4e:53:fa:8e:c1:
                    d4:19:0f:69:ea:2b:ab:1c:76:3b:25:aa:43:c6:aa:
                    40:bb:4a:1c:6d:eb:cc:00:2d:d5:9e:2b:fb:15:3a:
                    cc:ca:74:a9:1e:50:a0:89:45:60:96:5e:0a:79:ff:
                    24:90:98:9c:64:fe:ce:73:14:d5:71:3d:d2:64:09:
                    51:30:35:e5:f4:73:3a:b9:a6:c8:6c:ab:b5:81:9f:
                    e7:d0:0a:73:c6:0c:74:69:76:c8:e9:96:68:ae:e6:
                    05:b9:6c:43:b4:29:f5:88:78:9e:9a:f6:0b:a9:41:
                    32:96:99:c5:29:96:ab:8d:5b:c2:5e:cd:63:d5:a5:
                    ec:d8:fe:d8:64:30:f2:13:39:45:7c:92:f9:a0:a0:
                    f6:71:e1:23:31:cb:a5:cd:06:29:90:91:77:21:26:
                    c3:8e:77:ff:09:ac:25:d3:15:04:f1:99:c7:6d:15:
                    bb:7f:32:89:63:fc:50:2f:4a:61:7e:3e:f1:cf:bd:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DF:9F:1D:35:F9:20:21:5B:66:ED:C5:D7:77:7E:00:A4:9E:23:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/f9f523ad-9870-307e-895d-ed31d1359fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.crl

            X509v3 Authority Key Identifier:
                keyid:59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:ee:03:a3:aa:5b:22:12:0c:6d:79:c4:99:1d:da:c9:b4:
         bf:a6:0d:50:33:ef:dd:57:7e:85:6e:65:4e:c2:89:67:8e:6e:
         5d:a7:2c:c4:ec:b7:8e:ba:62:77:f5:78:71:bd:44:72:33:7c:
         98:54:5b:14:7f:11:77:5e:df:4b:d9:8f:cd:c7:45:a2:dc:1d:
         23:0e:fa:ec:bf:19:f1:47:dc:c0:c4:09:4d:de:a3:80:ba:1d:
         0b:9a:72:99:30:5a:b7:6b:3d:04:ac:dd:47:af:93:61:c7:c0:
         d3:1a:3a:ee:7d:f3:4f:98:97:c6:18:bb:b9:30:fd:46:dc:60:
         79:5f:52:f2:67:41:90:88:0c:74:33:0b:21:a0:f0:b2:d6:68:
         66:84:36:e2:71:fd:69:b1:4e:0d:6c:62:8c:69:60:b4:87:30:
         eb:a0:91:e1:28:3d:c4:46:72:7c:de:53:84:fb:c4:38:e9:9e:
         d0:c0:b1:d5:11:5d:75:ee:4b:32:2a:5b:be:36:a5:06:c9:d1:
         32:dd:93:e6:22:db:3f:91:26:17:6d:d8:69:a7:0c:c2:f6:6a:
         fc:b3:91:1c:01:e7:8d:5f:85:d8:03:92:07:c4:0c:be:7d:15:
         8c:9d:eb:98:49:a1:13:bb:c6:ee:96:e0:75:02:55:ce:34:d5:
         ad:4a:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:08:53 2025 by rpki-client