Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c74085ab-914c-3b60-852c-80bed856182e.roa
File:                     c74085ab-914c-3b60-852c-80bed856182e.roa (raw, json)
Hash identifier:          WvF8EdpzGBktLETUpTWUJ1UjAEXnI2bzgdIhgFdSERY=
Subject key identifier:   D6:57:6F:F6:15:8F:56:8A:0A:20:02:BE:A2:58:85:4A:98:37:C9:80
Certificate issuer:       /CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
Certificate serial:       010D0C9F432858499F249910D49EE7F130C68900
Authority key identifier: 2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c74085ab-914c-3b60-852c-80bed856182e.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     29848
IP address blocks:        2604:9b40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:99:10:d4:9e:e7:f1:30:c6:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=39a3a144-702a-4629-8d3f-240fca91c9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:7e:c7:74:31:82:ab:7a:63:6e:8f:e2:d7:
                    78:4d:f1:88:06:e0:9f:fa:c7:45:e0:f4:43:9d:5e:
                    c4:20:8f:8c:cc:23:8c:e6:be:28:23:21:30:09:91:
                    8c:86:5e:b9:1e:31:e7:ed:c7:dc:40:fc:b1:ad:de:
                    fd:3f:41:f1:a1:03:96:f6:70:27:b9:20:bb:dd:9f:
                    38:0e:10:d9:12:67:8b:65:b3:7d:ba:cd:15:7a:7e:
                    79:c8:42:22:1f:ec:6d:b4:8e:21:4a:e5:79:e9:35:
                    a5:d5:4b:8c:24:4d:32:aa:96:1e:08:ae:bc:ed:45:
                    0a:72:d7:a3:c4:e1:c9:83:56:50:56:c5:f1:d6:81:
                    40:86:a6:20:7e:ae:84:58:ec:f8:7f:d5:93:f0:4b:
                    fd:56:f0:e4:46:e1:cb:21:52:8b:0d:01:b1:c4:24:
                    3e:14:a9:87:6d:04:73:9b:62:16:a5:27:23:87:ec:
                    c6:35:12:df:80:48:de:fc:9e:56:47:7c:56:3a:77:
                    d8:9c:48:39:be:43:eb:f2:0e:1d:ca:73:42:d5:04:
                    59:97:02:83:5f:40:3d:16:54:03:90:7d:02:34:a7:
                    2e:96:bb:72:9c:84:db:bb:ac:b2:8a:5c:2a:70:aa:
                    cb:5d:b6:b5:ec:6e:eb:46:2d:6d:7c:6e:30:dd:d3:
                    c2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:57:6F:F6:15:8F:56:8A:0A:20:02:BE:A2:58:85:4A:98:37:C9:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c74085ab-914c-3b60-852c-80bed856182e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:be:63:08:60:24:e8:a3:f2:f7:77:cb:cc:c0:96:3c:27:72:
         5b:fd:d0:9d:eb:17:c6:3e:1c:11:42:6b:a9:19:b8:e5:76:b4:
         81:0f:72:84:56:4f:05:8e:f6:92:e3:df:d8:df:f9:04:f9:6e:
         81:81:56:e5:a2:2e:71:65:ba:e7:1d:03:f2:14:40:2a:ec:80:
         64:a8:13:98:04:46:2a:95:9f:d7:09:57:eb:6a:7e:d5:ad:65:
         76:84:17:4f:18:c6:97:20:33:c1:ab:eb:33:e6:f9:34:13:eb:
         52:20:c2:1c:04:4a:e2:2d:6e:45:8f:53:af:63:3f:db:54:c3:
         8e:99:86:4c:6a:2c:cd:0b:ec:0d:99:6b:a8:a3:83:c2:9c:67:
         f3:ac:7a:d3:2d:ee:89:59:3f:d6:9e:d8:3e:e1:9c:a0:5a:97:
         69:a9:fb:ec:d9:ef:eb:86:30:c8:d8:85:5a:a4:27:0a:e3:09:
         67:b8:62:bf:ff:05:f0:3e:a3:8a:01:68:06:07:75:a4:fe:21:
         06:cb:81:89:8b:8a:c3:b1:87:f6:b6:62:89:15:7b:b6:5b:84:
         ce:2f:c6:de:08:46:9a:63:59:f5:e1:83:13:12:81:90:12:0a:
         23:cc:c5:44:a2:a8:2f:4f:3e:97:74:40:fb:f0:09:5a:2a:3e:
         ff:7f:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:35:14 2025 by rpki-client