Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa
File:                     c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa (raw, json)
Hash identifier:          Hi4tfRqZIjiVgsHDrQvP0Y71qmHIcfPznpq2VOmwwbU=
Subject key identifier:   1F:1D:14:27:5E:D8:63:4D:75:FA:79:ED:7A:5C:BA:7F:17:B3:AD:ED
Certificate issuer:       /CN=794b722c-8055-4835-a39e-50fadbb9af0e
Certificate serial:       010D0C9F432858495EEEDB757617088435C68C91
Authority key identifier: 27:29:30:12:21:72:38:E7:76:06:4E:7C:84:99:CE:3D:4F:49:5F:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     400075
IP address blocks:        2606:df40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:db:75:76:17:08:84:35:c6:8c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794b722c-8055-4835-a39e-50fadbb9af0e
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=47687e58-f5ed-40be-aa25-97509bebb26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3e:e9:10:9c:bf:60:00:79:44:06:bf:2a:76:
                    a4:6d:c9:e9:7c:5b:57:8d:c1:80:c2:82:e4:98:5d:
                    e5:a6:7a:81:72:20:5a:82:5a:bb:a5:8d:da:de:b7:
                    f2:cf:05:59:89:24:c5:71:ff:2c:06:fa:0b:1b:03:
                    f7:d5:17:b7:fc:94:96:a5:20:d1:b9:56:09:6e:10:
                    61:d7:7a:80:69:ae:95:de:5f:e7:4b:e3:eb:e9:36:
                    7a:1f:72:83:0d:f9:f6:23:e3:44:18:92:ad:b0:5d:
                    23:95:e0:07:f4:4d:d7:7e:d9:74:e7:61:37:fe:95:
                    e2:1a:cc:d6:66:71:5e:23:da:6f:84:49:3c:ad:92:
                    bd:d0:06:bb:00:ce:3c:93:03:ed:12:b6:d2:c4:e7:
                    64:e2:74:b0:1d:aa:b1:40:77:b5:a5:de:00:f9:52:
                    36:a5:e5:35:01:d9:ac:6b:b1:25:79:a0:d1:25:75:
                    c3:d7:d2:5b:5c:48:f1:63:ff:7f:d0:d6:b9:3c:1e:
                    85:75:4c:5f:00:7d:c5:5c:fd:5b:f4:9f:0f:fa:e3:
                    7e:fc:63:0d:f5:f7:02:99:04:3c:91:00:e1:47:b6:
                    11:70:53:1e:2c:2b:26:21:1e:5b:e6:54:fe:dd:e4:
                    fd:a5:0c:c1:8a:23:b8:e7:93:ac:9a:27:43:45:86:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1D:14:27:5E:D8:63:4D:75:FA:79:ED:7A:5C:BA:7F:17:B3:AD:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.crl

            X509v3 Authority Key Identifier:
                keyid:27:29:30:12:21:72:38:E7:76:06:4E:7C:84:99:CE:3D:4F:49:5F:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:df40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c2:d2:87:fa:df:02:e4:4a:cb:f9:ce:37:5e:8e:ea:c9:5d:
         38:64:0d:6b:20:ab:b3:2c:a7:9c:95:b4:7f:d2:7d:ed:96:11:
         c6:df:ef:98:dd:91:45:0e:ba:36:b9:71:8e:a3:e9:0b:13:bc:
         d9:ad:dd:37:b2:e3:24:d2:7d:8d:37:dd:c5:5a:b6:25:37:78:
         c2:ea:40:a0:a5:89:7a:8c:34:26:cf:40:c5:a6:4e:98:de:9d:
         66:85:44:c8:79:e6:af:90:56:4d:e6:52:21:77:cb:94:af:b6:
         1b:b0:e2:50:0d:05:e8:a2:ca:46:c0:5b:bd:0d:ca:98:e7:e1:
         aa:1b:b5:07:2b:95:44:47:ed:ab:b7:18:44:bd:f7:be:35:b4:
         a1:b6:28:26:aa:6b:28:92:9f:c6:69:04:2e:82:97:ec:36:39:
         1c:b0:4f:88:e4:e7:12:ab:56:c4:2d:b1:6e:9d:8b:c7:ba:d4:
         31:5c:f1:4d:f7:b7:bf:ad:ec:b5:7d:0d:36:4c:04:e5:c9:73:
         d9:2b:2e:db:c6:ad:4a:02:fe:d0:79:d3:4b:a0:d6:f0:b8:1d:
         47:f3:43:2c:42:3c:61:e3:c7:58:2f:2a:5b:ce:c0:d1:ce:29:
         e5:3f:76:f1:31:bc:44:4d:66:4e:31:00:87:ff:6d:24:13:fd:
         ee:84:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:59 2025 by rpki-client