Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa
File:                     e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa (raw, json)
Hash identifier:          uw2MtgRmxrZlBNz7iBaoc7Uyd3z8I079TH+SuSvBoOA=
Subject key identifier:   A3:E9:7B:9C:7C:AE:BA:B3:A0:98:0D:20:C3:B9:D3:10:74:9E:0C:1F
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B6420A6F7CB921BF4DBE580
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     11404
IP address blocks:        2607:f060:a000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:20:a6:f7:cb:92:1b:f4:db:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=97545835-8b58-4e66-bd03-e7004e0e6258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:71:34:52:a9:4d:4e:84:71:23:39:02:bf:
                    b8:8e:7e:9c:09:15:a9:df:82:6c:45:3a:fc:63:6d:
                    29:bf:57:41:4b:b1:da:9d:4f:75:d7:91:d4:d9:32:
                    90:92:11:92:05:85:95:04:72:94:d2:12:f1:f8:97:
                    5b:a6:82:db:eb:09:b9:a0:33:6c:d0:11:26:4d:3c:
                    34:b7:e3:ba:21:1b:9c:6c:24:a5:3c:f0:09:46:6b:
                    1d:8f:1c:ee:62:66:40:92:0b:8d:77:ad:70:3b:2c:
                    d6:05:a6:63:d2:9b:04:44:eb:b5:93:65:b2:8c:76:
                    e2:2f:c8:78:c3:08:f2:9d:c4:dd:b2:5d:2b:ae:4e:
                    96:ca:dd:2f:db:e5:5c:fa:39:0b:e1:75:b5:51:12:
                    58:a8:82:77:70:8b:ca:e1:1e:58:70:c1:a2:84:20:
                    f0:13:25:2c:cc:23:c9:c2:f4:a8:d8:56:33:30:9f:
                    fd:33:67:ee:44:70:26:62:83:35:df:be:4b:d1:73:
                    54:57:fd:13:d8:c5:6f:8f:4e:3a:d4:a6:13:ed:f9:
                    f7:fa:3e:27:b4:18:dd:69:3c:7a:ed:39:c1:1a:32:
                    24:d9:ed:e8:bf:58:5a:06:fe:2c:e7:ab:07:21:91:
                    7e:0d:9f:11:b0:02:9c:ef:20:aa:74:02:10:80:82:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E9:7B:9C:7C:AE:BA:B3:A0:98:0D:20:C3:B9:D3:10:74:9E:0C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e8b05852-dfce-3dc0-99e9-c67b22ef38f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f060:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:5c:0d:30:5a:3b:ef:5a:69:02:39:30:79:5a:f0:16:3a:
         f2:87:a3:ee:03:7b:50:a3:4b:6d:89:71:19:00:a7:ea:96:33:
         7d:e9:09:1e:37:58:ac:aa:c2:bc:31:85:22:df:49:0b:f9:e7:
         6f:91:f7:11:e3:ad:1d:09:39:ac:76:53:43:d1:92:20:17:e0:
         a6:74:de:34:f3:6e:0c:21:e4:18:01:d5:d5:81:9c:66:f5:be:
         ef:cc:1e:7f:76:85:4d:46:53:47:f3:b3:60:99:5e:97:c1:02:
         c3:e8:b9:6e:9e:9e:2b:61:88:9e:9a:68:90:a5:78:35:0a:5f:
         cf:6a:e7:46:53:a4:70:d0:e6:b5:88:d4:41:43:1e:60:6c:a2:
         bf:cf:fd:cb:03:88:af:14:58:56:f0:6a:a1:7a:dd:e4:0b:27:
         00:9f:82:de:08:ab:70:15:e1:30:15:91:4e:06:a7:47:1a:40:
         d7:ba:4c:75:c4:4f:2f:72:e7:47:b5:04:99:35:ab:8a:00:84:
         a7:b5:3e:5f:86:d6:d8:c3:f4:0e:3d:00:d9:f9:b8:83:9f:b7:
         c8:81:10:96:cb:71:a3:fb:81:27:92:f3:a0:12:82:ce:1e:a4:
         a1:fc:97:f6:14:d4:a2:89:3c:a9:46:b4:95:06:0f:d5:70:09:
         1f:58:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:07:26 2025 by rpki-client