Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa
File:                     ef63e560-1036-3fd3-af61-21d022a1a803.roa (raw, json)
Hash identifier:          Pl9oY5MC4jH/w+ioh2eoxZiKE69ENpgsyHPR2b7Azg8=
Subject key identifier:   C2:EB:7F:54:B2:06:83:8F:BE:FB:A0:C5:EC:1D:4F:6E:FF:A7:0C:2E
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285848D3765A10117D481110881E00
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa
Signing time:             Sun 09 Feb 2025 14:00:51 +0000
ROA not before:           Sun 09 Feb 2025 14:00:51 +0000
ROA not after:            Sat 10 May 2025 13:00:51 +0000
asID:                     36007
IP address blocks:        2604:bc0:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d3:76:5a:10:11:7d:48:11:10:88:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Feb  9 14:00:51 2025 GMT
            Not After : May 10 13:00:51 2025 GMT
        Subject: CN=4e172682-4e13-4347-b27e-304deecca25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:a4:73:ac:3a:32:c9:f7:9e:5e:15:1e:36:
                    b6:8f:20:42:4c:b1:42:1d:0c:46:4d:b1:e1:9b:5e:
                    dc:4b:37:15:f8:46:6e:92:a8:72:63:a3:c9:a0:d6:
                    58:e0:09:b7:00:1e:eb:27:86:63:08:af:20:f3:75:
                    05:6e:6b:d4:0a:c3:e0:39:25:83:42:af:ba:58:1c:
                    fd:3a:15:8b:f5:83:22:a4:fd:16:f9:fc:5a:3b:01:
                    35:ff:fd:af:09:03:c3:4a:07:75:f0:e0:ed:6f:6a:
                    8b:b3:fa:f2:f3:79:ce:f1:d9:f6:7c:76:e1:24:fd:
                    a0:77:87:c3:c0:85:64:01:b3:00:b5:29:aa:bb:38:
                    70:c5:af:2a:62:2f:22:0b:5f:bf:28:05:20:4b:bd:
                    bd:f6:85:23:a9:a9:8e:36:64:6d:a2:b5:96:8f:e6:
                    18:f0:ea:ee:bc:a5:4b:ff:77:34:d2:a3:c8:b5:9e:
                    3d:59:27:ae:72:8a:21:cb:5d:0a:60:ee:f9:eb:99:
                    a8:7a:c4:68:79:c4:d5:8c:21:9b:78:c2:a1:22:10:
                    f5:f9:3a:3e:b8:ae:59:76:73:03:33:05:2a:94:58:
                    7f:87:d0:92:9c:e1:d0:5e:e3:53:ad:ef:fb:50:75:
                    96:ad:f8:79:e7:46:d1:23:23:02:20:42:09:14:46:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EB:7F:54:B2:06:83:8F:BE:FB:A0:C5:EC:1D:4F:6E:FF:A7:0C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bc0:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f7:87:f9:e1:1e:94:bd:63:a2:50:d2:a2:0e:57:79:a7:63:
         f7:5f:48:13:43:21:69:23:06:3d:7e:86:ef:e3:0b:68:ab:e7:
         d3:b7:64:85:a9:99:40:2f:1d:77:77:71:5f:6d:07:9c:aa:38:
         c5:c0:18:ce:b4:ec:5d:92:de:ea:92:f6:8a:e4:4e:07:c8:95:
         c1:18:b5:5a:7f:3a:68:4c:ef:cf:89:6a:d6:f8:50:6f:55:8e:
         fb:02:5d:84:c4:5f:9a:bd:e8:61:95:c1:dc:bd:51:42:7f:e8:
         d5:b2:ea:21:7a:07:26:e0:e4:9a:5f:f4:4a:5b:66:0d:e8:d2:
         99:9d:91:0a:16:0c:3a:c5:97:21:20:3b:ee:ab:e6:1c:5d:db:
         e8:f2:e3:fc:77:d2:31:87:82:ca:c1:0f:8f:71:c1:e3:e8:57:
         4c:06:d7:c5:5c:6f:48:fd:10:ea:2b:9c:3c:de:60:65:f2:5d:
         3c:60:79:db:e1:a2:35:8d:7d:46:2e:ca:6c:f8:57:49:30:32:
         90:09:3b:95:52:ed:9f:e2:ef:80:82:de:56:ba:f5:29:39:e3:
         ca:06:53:5a:f8:b8:f9:90:e7:3b:b7:bc:64:59:26:e5:e6:e3:
         d6:a7:7f:44:6e:f3:84:50:a4:f4:35:6b:ad:18:bd:c8:11:28:
         9d:97:fe:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:54:41 2025 by rpki-client