Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99185b72-559a-3894-bfd1-7ac8fc211ea3.roa
File:                     99185b72-559a-3894-bfd1-7ac8fc211ea3.roa (raw, json)
Hash identifier:          u4V2poLkzTP4Gw5PoEMipayw72z2LFudPQFoWcXbtyE=
Subject key identifier:   F6:00:35:D6:91:CF:7D:43:73:EF:D1:E8:AA:F0:21:55:51:E0:BC:EA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584925B3B637B5D1F4DF74B383A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99185b72-559a-3894-bfd1-7ac8fc211ea3.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     36236
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:b6:37:b5:d1:f4:df:74:b3:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=359d2b47-ad05-4e52-85e6-ec9349fcd4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:4d:df:af:39:70:a7:73:75:ef:85:29:e6:
                    81:d0:99:bd:93:06:8d:e8:3c:6a:4f:3d:b3:75:44:
                    bb:6f:66:fd:d5:f5:b6:13:e5:94:65:82:a2:20:eb:
                    d8:5d:2f:40:d0:2d:32:9e:20:7c:9c:97:30:60:ed:
                    22:56:a9:51:f3:02:44:61:e0:e0:3a:85:8e:46:c6:
                    cc:a2:91:5c:d3:34:23:ba:f2:54:65:b8:af:7c:88:
                    6b:d1:0d:8f:e5:db:c0:70:f9:3b:3b:bf:b7:d4:c7:
                    d2:9b:cb:14:78:60:35:04:65:c4:d4:2a:85:04:64:
                    ee:05:e7:77:66:e4:93:d4:e0:4e:33:1c:85:c9:23:
                    e7:b5:3f:3a:47:cf:58:d2:b7:3d:d5:c2:20:41:c6:
                    7a:59:2a:e6:54:d8:75:be:c0:43:28:a5:ef:70:62:
                    6c:ee:bf:83:6e:51:77:e7:24:bb:25:cd:f4:6e:7d:
                    a3:37:97:bb:aa:57:f7:fd:ff:d8:8d:b4:91:e2:62:
                    42:35:85:e0:e3:35:7c:91:c6:59:ff:0a:d0:92:9b:
                    bc:f8:8a:30:9c:a6:b7:33:8c:07:77:94:e9:50:eb:
                    60:4e:49:1b:66:44:0b:79:b7:24:8a:27:fc:b7:97:
                    1f:9d:57:30:7e:13:a9:e0:f4:c3:a3:82:05:55:d9:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:00:35:D6:91:CF:7D:43:73:EF:D1:E8:AA:F0:21:55:51:E0:BC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99185b72-559a-3894-bfd1-7ac8fc211ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:30:51:d3:e9:54:37:8b:b6:98:b0:a6:ec:3c:20:f9:4f:2a:
         88:6c:c9:73:27:5c:5b:6f:4d:ce:8b:92:6d:4e:16:9d:46:7d:
         0f:ba:ac:85:83:3f:8b:43:87:f7:ec:90:67:06:99:8f:4b:7e:
         ac:e9:e1:7d:1a:06:22:72:85:26:85:a4:12:d9:84:7d:c8:b4:
         45:f7:2e:71:b7:8a:ce:f2:76:b7:51:f4:94:53:ed:93:e4:dd:
         a2:0e:49:90:65:05:b9:0f:ab:71:cd:e1:a9:1d:b2:28:ad:83:
         41:29:29:72:6d:bf:a2:53:bb:54:da:63:59:d3:16:46:3f:48:
         f5:5e:9f:aa:38:75:e2:11:f7:4d:08:a1:d0:17:11:b5:bc:8b:
         6b:90:9e:42:a1:b3:33:45:76:86:22:13:8d:00:ff:60:24:e3:
         4b:6c:15:9b:c4:f0:ef:e5:18:fd:2a:57:31:24:09:76:23:c5:
         f2:84:3d:2c:e7:77:6b:1e:30:94:10:c4:67:13:f2:4d:19:66:
         f4:64:0f:76:66:e4:a3:85:18:43:9c:4b:1f:b0:62:bb:1f:63:
         53:b3:f9:9b:23:d4:30:63:44:62:9b:8a:0b:1d:00:7e:df:1f:
         f4:73:47:d0:9a:88:67:c9:6f:cf:b7:21:3c:d8:a3:ac:b4:bb:
         5d:92:0b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:08:23 2025 by rpki-client