Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa
File:                     b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa (raw, json)
Hash identifier:          nuisraTNq80cxQVCzRaoSVLlMoVA82V6rt1c3QGtc9U=
Subject key identifier:   3A:2F:D2:8A:04:3B:72:D5:4E:9B:E0:38:A6:9D:78:62:5A:E3:4B:D4
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F43285849B6DF4AAD1F7FC25B347D0300
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     399045
IP address blocks:        2606:d640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:4a:ad:1f:7f:c2:5b:34:7d:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=65c65ec5-8f08-44eb-9360-4dcb6e55580c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:1f:ff:0b:f6:80:e5:cb:ad:bb:75:0b:db:
                    1a:7d:16:08:89:3a:f5:e7:f7:6b:9a:cb:71:ee:08:
                    f1:f1:50:10:d5:74:4a:9e:05:ca:9d:ec:c1:51:81:
                    46:e3:35:91:ee:4e:91:3e:88:96:8c:2b:71:2c:60:
                    1d:80:d8:40:d9:26:2f:79:15:9e:9e:7f:b2:78:ff:
                    bb:26:99:d4:ab:0d:9c:8d:5f:ec:a4:dd:f0:16:cd:
                    ef:49:7e:ee:12:f4:61:c3:48:dd:35:56:98:4d:ba:
                    6f:79:1f:0c:67:c5:07:a1:ca:ca:78:44:80:01:67:
                    3e:f0:6b:49:f0:40:d3:f0:63:a3:86:1a:05:99:60:
                    38:4a:46:c0:0b:53:5a:08:3d:cd:e3:e5:98:bb:3a:
                    b2:c7:23:43:ca:8f:ba:ad:03:97:40:e0:bb:67:1c:
                    41:8d:bd:dc:b7:22:2b:88:e3:bb:54:7d:42:c6:7b:
                    54:28:1d:2f:76:c6:de:60:87:a3:ad:b2:d6:c8:c4:
                    22:95:42:15:a6:85:5b:ca:c1:80:41:ec:d4:8f:29:
                    51:d1:f3:fb:cf:ce:12:5f:b2:df:a6:3a:e3:84:14:
                    f0:62:88:8c:7c:7d:93:6d:96:2c:f7:9f:36:54:e8:
                    11:a9:9f:4b:fb:61:2d:b4:b1:22:a5:d8:02:af:03:
                    82:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2F:D2:8A:04:3B:72:D5:4E:9B:E0:38:A6:9D:78:62:5A:E3:4B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/b99b36f7-6e3d-3b3f-9bcd-67afa3ceff07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:86:f7:f0:ed:89:33:11:67:6b:82:07:69:c2:0c:7b:41:
         d7:d7:82:b1:23:cd:cd:af:ea:13:53:38:c1:13:38:3f:d8:ec:
         d8:e3:b7:3c:43:5c:30:67:df:51:42:9a:11:31:98:96:ef:98:
         65:1b:97:fe:3f:e9:a5:89:74:60:6a:6a:7b:67:d6:ff:94:37:
         82:0c:97:70:94:3f:5b:e8:d9:4c:93:89:3c:c1:e5:56:16:a9:
         87:8d:a0:c3:24:8c:56:06:93:5a:1b:b2:4e:fb:7e:e9:af:f4:
         2e:06:d4:23:a5:f6:89:6c:af:59:7c:d6:7e:f5:75:03:72:19:
         fe:cf:b4:7b:70:d3:71:d9:d5:3b:36:e9:45:c2:28:52:dd:f9:
         93:33:6b:8b:83:fd:90:91:1b:d7:41:59:35:37:f2:0f:b1:68:
         bc:c4:bf:ee:d4:4b:75:75:e3:58:36:5b:6c:b2:31:c2:4f:8b:
         cc:af:75:d8:30:a5:d0:3a:b9:be:4e:e2:16:06:ef:7f:ec:33:
         96:32:42:3f:d5:f9:7a:4d:5d:cc:c8:55:f6:45:b9:c3:80:6f:
         3b:e4:2f:ef:ff:30:7e:c9:82:e9:72:23:0e:67:43:9d:52:ab:
         38:22:18:36:10:2a:0b:2c:e8:9a:2a:57:d4:cd:09:41:a4:c9:
         ca:09:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:03:16 2025 by rpki-client