Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/bc9bf4b7-6d3f-3310-9178-c64c8f07e688.roa
File:                     bc9bf4b7-6d3f-3310-9178-c64c8f07e688.roa (raw, json)
Hash identifier:          zK3Wny97EonDoda4OEJjmWSnhOxR0hmN8+4/lN8bwiE=
Subject key identifier:   36:4D:BD:8B:7D:BD:5A:75:23:CD:BD:40:87:D4:6B:E1:D3:96:37:8A
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858497279AC14342737E31720E400
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/bc9bf4b7-6d3f-3310-9178-c64c8f07e688.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     5769
IP address blocks:        2607:fa49::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:ac:14:34:27:37:e3:17:20:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=9f2b33f7-7c64-4372-b935-da3b181c8ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:50:ee:80:7a:db:78:4c:64:50:d0:ce:6e:
                    c8:53:2f:24:27:c0:a4:7d:c8:30:2c:f5:26:b1:4a:
                    c0:b7:fa:86:e4:f1:0a:81:f3:13:a5:9f:c5:eb:cc:
                    90:0b:8a:aa:91:20:09:5f:a8:d5:ab:66:f2:30:2d:
                    1f:59:7e:da:5c:4c:21:42:04:54:b1:2b:b0:50:dc:
                    f0:c7:f0:4e:49:01:79:a0:0d:22:74:9a:44:79:b4:
                    ac:96:7d:19:62:a2:43:e8:fd:6f:d0:6c:f2:2f:ce:
                    dd:3b:b7:58:8f:1f:72:32:78:c1:57:0e:fc:32:a4:
                    55:36:f8:94:8c:53:69:f2:f9:7e:f6:a4:9e:42:c3:
                    9f:5d:38:7c:b1:da:72:73:78:d4:d3:3a:91:f1:8c:
                    6c:cc:3b:b4:db:1f:fc:f4:00:63:06:52:9e:fc:ec:
                    a9:50:91:ac:e1:7b:e1:94:b2:e3:c1:63:db:27:46:
                    ef:2a:69:75:94:4b:2c:85:0a:15:04:64:8d:64:c4:
                    03:11:2b:6a:da:51:68:fc:5b:0a:a8:8d:9d:4c:5d:
                    5f:de:49:ae:71:21:c0:34:e3:05:b2:22:d0:cd:c7:
                    43:21:25:3e:5d:e6:d9:6a:70:9e:96:ad:95:3e:bc:
                    20:b2:c3:c2:06:d5:63:70:51:1e:91:c6:0d:1e:b6:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4D:BD:8B:7D:BD:5A:75:23:CD:BD:40:87:D4:6B:E1:D3:96:37:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/bc9bf4b7-6d3f-3310-9178-c64c8f07e688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa49::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:9b:05:90:50:56:a7:cd:03:b2:71:58:8b:22:86:8c:33:
         de:10:3c:ea:2c:53:71:eb:cd:5a:3e:ed:96:d6:a3:83:ce:08:
         67:6e:9b:28:fd:1e:a0:bc:d8:00:20:8d:23:0c:52:8f:f6:79:
         33:4c:16:84:db:d4:30:a5:60:b8:82:a7:2f:c5:43:66:af:02:
         66:9e:17:54:43:7e:3c:eb:18:dc:23:7f:f2:42:33:59:75:d5:
         04:93:1a:74:ce:7c:08:c7:2f:b1:ce:fe:58:a7:a3:7c:f2:36:
         ea:c8:0e:b4:2d:3c:6b:2a:ed:28:94:bf:00:4f:a3:0d:08:96:
         47:eb:db:1d:d3:9f:7f:7e:cc:4b:e1:a9:60:ed:cf:4e:04:ee:
         5b:3a:76:4e:bb:92:38:8e:e4:1a:4a:d9:33:bf:71:02:d7:f8:
         38:3d:2d:5b:fb:d5:a3:94:a2:68:3b:3c:a0:eb:24:25:85:fe:
         41:9c:08:23:f1:81:b7:db:93:01:fd:f8:ba:10:d1:2a:de:b1:
         15:4d:dc:f3:99:f2:a9:6e:43:03:9f:8a:65:0d:91:c5:43:dd:
         47:87:83:97:cf:e6:8d:f9:f6:b8:43:d1:b1:d5:28:80:38:51:
         49:29:67:86:85:f3:16:f1:56:92:15:c7:f0:39:f7:32:dd:8c:
         6e:dd:85:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:59:09 2025 by rpki-client