Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa
File:                     c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa (raw, json)
Hash identifier:          MGzz7hU3xvG22nLEicXchfKK9MVIFswqRKZLL7xBG9g=
Subject key identifier:   62:97:07:3A:0E:20:E6:3E:21:F3:20:60:E7:66:23:EA:A7:81:FA:2E
Certificate issuer:       /CN=794b722c-8055-4835-a39e-50fadbb9af0e
Certificate serial:       010D0C9F432858487FB5D83EA94F4893011CBEE0
Authority key identifier: 27:29:30:12:21:72:38:E7:76:06:4E:7C:84:99:CE:3D:4F:49:5F:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     400075
IP address blocks:        2606:df40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:d8:3e:a9:4f:48:93:01:1c:be:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794b722c-8055-4835-a39e-50fadbb9af0e
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=9c69effc-91a5-4785-b47c-065187108c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:74:c6:b1:8a:53:a7:0e:32:9c:5e:2a:b8:
                    2f:e2:00:84:f7:1c:b8:7f:52:8c:af:6f:03:32:dc:
                    1e:30:3e:58:32:3e:f4:ea:96:7c:8f:0e:8c:99:71:
                    fc:cf:2e:1d:f7:66:9f:aa:16:59:f0:d4:f7:1a:6d:
                    ee:76:8a:d2:af:d6:ae:5d:c3:96:1c:4d:10:b6:88:
                    7e:9b:22:22:1e:43:c0:fe:ff:e5:56:a9:7b:d1:33:
                    f0:a4:6a:43:11:3a:f4:12:7d:51:7d:b9:49:70:98:
                    b4:07:c5:13:73:90:d4:e4:36:9a:98:71:8c:66:c9:
                    65:74:1d:02:1f:31:c8:02:e3:6d:43:64:92:6a:90:
                    84:cc:88:bc:a8:32:36:2a:8c:c6:d5:9c:82:9d:36:
                    5b:52:fb:04:0f:e8:10:f0:c2:4f:df:00:ca:26:0a:
                    0e:9f:66:8c:72:bf:6f:3b:61:5e:ca:d1:c0:55:80:
                    13:72:ed:28:cd:3c:4b:c8:48:af:6e:fe:88:94:a4:
                    c3:c8:15:5f:30:5f:12:77:71:47:c4:24:b2:a5:4c:
                    b7:56:b5:df:67:64:2a:cc:c9:a7:31:80:20:3f:95:
                    a3:30:87:90:88:2b:b9:83:70:9f:b3:55:e9:a6:e9:
                    33:d6:f1:23:0e:db:53:8b:4f:a0:3e:2a:40:70:9d:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:97:07:3A:0E:20:E6:3E:21:F3:20:60:E7:66:23:EA:A7:81:FA:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/c36d6062-bd68-39e3-a7e3-d7f313b3c094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e/794b722c-8055-4835-a39e-50fadbb9af0e.crl

            X509v3 Authority Key Identifier:
                keyid:27:29:30:12:21:72:38:E7:76:06:4E:7C:84:99:CE:3D:4F:49:5F:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/794b722c-8055-4835-a39e-50fadbb9af0e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:df40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8b:bf:e3:31:92:84:19:25:b4:79:07:0b:1a:ee:5b:a1:56:
         87:03:3c:08:cc:ab:7c:45:8d:97:73:92:b6:73:ed:98:5f:26:
         fa:d2:ea:14:98:45:00:29:f7:0e:f0:53:81:40:d2:c1:ef:c2:
         c9:52:07:07:47:75:3e:40:e9:f2:99:93:6e:9d:c5:aa:b4:5a:
         5a:5d:e6:f7:6e:89:bb:96:5f:a1:9d:7f:49:f2:d5:bc:d4:b0:
         cd:3a:b9:59:17:cb:c8:80:51:3f:e1:87:36:39:fd:d2:f1:05:
         72:eb:37:f8:4d:9b:f6:07:c8:59:e7:9b:43:20:6d:29:65:12:
         e4:a8:b1:0f:7c:77:19:ee:62:ac:38:6a:be:c1:8d:fa:55:db:
         43:77:75:7e:cc:8f:6d:ff:b7:b0:be:ab:4b:85:3f:09:30:38:
         ed:f0:58:a0:7b:99:88:91:7e:e0:87:04:a8:d6:e5:6b:08:c4:
         72:7c:a1:cd:45:a3:62:ce:13:b0:56:02:20:5f:64:e1:9f:bf:
         e2:84:91:5f:17:64:8b:3f:9a:d6:d8:37:a2:45:40:59:e1:9e:
         48:b0:61:8a:25:bc:ac:cb:67:11:ba:a0:9b:dc:2c:4d:d3:28:
         b2:91:36:e4:f2:be:b3:dd:89:54:00:d0:d3:ba:e0:04:bb:c3:
         f6:0b:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:05:00 2025 by rpki-client