Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/6fa967fc-7151-3ae1-9f3f-e1bafae49234.roa
File:                     6fa967fc-7151-3ae1-9f3f-e1bafae49234.roa (raw, json)
Hash identifier:          FTGO2JSGKz89Eh906e3zt14oMFEZ3hTdaPjf+NKvmpc=
Subject key identifier:   25:0D:E0:9F:21:A6:8B:1A:E3:EA:97:67:49:DA:07:58:43:29:FB:0C
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584A9900C2550129E72F3460D900
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/6fa967fc-7151-3ae1-9f3f-e1bafae49234.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     36007
IP address blocks:        45.61.52.0/24 maxlen: 24
                          2604:bc0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c2:55:01:29:e7:2f:34:60:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=fc96e4fa-acde-47f2-9a8c-98e3b596533c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:32:da:74:76:8b:e9:b4:07:15:bd:b3:b9:
                    0e:04:8f:4a:bd:9e:58:05:d5:0d:38:73:82:fe:39:
                    30:3a:58:6f:b9:6f:76:09:cd:f9:df:7d:d4:36:94:
                    a5:e5:1c:c8:fc:e1:33:7f:4c:4b:76:23:2f:93:2b:
                    8d:31:da:04:92:8d:ac:f7:de:a0:e9:52:f3:c5:0a:
                    d7:ac:80:a6:b5:84:ab:b2:d6:69:88:c2:45:56:95:
                    97:5a:f5:cc:fb:44:94:ad:f5:8f:2b:cc:f1:fc:b5:
                    10:68:e3:8b:29:b7:7a:a6:10:c0:21:49:8a:fb:27:
                    a0:2e:28:85:83:9e:40:d7:ea:cf:3a:42:9b:a7:bb:
                    eb:ae:18:86:cf:e3:9e:c8:20:7b:69:d4:07:d1:37:
                    75:91:0f:be:12:00:0e:02:2f:0d:10:d9:6b:20:ac:
                    98:1b:a1:f7:81:89:b8:49:bd:7b:67:16:49:c0:bd:
                    1c:e9:94:fb:e7:8d:94:33:5e:02:90:b0:4a:04:1d:
                    8f:39:99:26:b8:57:41:47:15:9e:fb:6c:15:fb:57:
                    ec:ac:16:e8:d8:9d:10:0b:1a:07:7e:47:4e:72:94:
                    d1:a5:cb:65:cb:3a:9b:c1:17:3b:a4:fd:37:96:62:
                    7c:9d:fd:48:b4:47:96:65:3e:62:70:3a:e2:28:ec:
                    e3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0D:E0:9F:21:A6:8B:1A:E3:EA:97:67:49:DA:07:58:43:29:FB:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/6fa967fc-7151-3ae1-9f3f-e1bafae49234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.52.0/24
                IPv6:
                  2604:bc0:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5a:86:86:92:4c:c3:67:21:0a:f8:aa:ec:73:99:b7:f4:36:
         27:39:a2:43:ef:a2:2c:10:ff:f1:e6:c6:f8:71:d3:77:de:f3:
         85:ea:a6:39:63:2e:ce:4a:f7:16:e7:fa:96:68:1a:2d:d9:c2:
         1d:1e:e8:7d:22:f9:cd:75:cf:ed:4d:9d:ef:95:d0:29:ec:94:
         44:52:cb:4f:e7:b5:18:31:a5:b2:ae:1a:0a:af:b8:91:c2:ba:
         ba:eb:4a:c8:73:55:31:39:49:3e:1a:8b:f6:92:a6:92:38:5f:
         9c:47:3c:9a:a0:d1:ba:66:15:1d:9e:4b:71:4d:ce:9d:95:15:
         ec:d4:4e:97:64:5e:67:57:ae:9f:88:e5:3b:4e:7d:4a:1b:60:
         d7:b1:f7:88:b2:b1:69:e7:4f:c4:75:2e:4e:c7:87:6b:7d:7b:
         49:a4:00:a2:03:38:81:eb:da:be:79:f4:a6:fa:f6:a5:5b:d0:
         f3:39:bb:e9:5f:e5:2e:8d:7d:30:44:4c:7c:9e:58:93:88:c1:
         06:85:63:2c:aa:9e:c4:94:10:43:56:67:58:8e:d4:2d:74:b2:
         67:1a:a2:1b:73:e1:0b:71:33:9b:87:9f:3a:f0:b7:fe:42:6c:
         21:27:41:e1:ee:e2:25:b2:2b:08:20:4d:9c:c3:7e:51:af:5d:
         2c:d0:9a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:27:56 2025 by rpki-client