Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fc3a3f46-7e00-3a4f-9f7f-64f5d80e2763.roa
File:                     fc3a3f46-7e00-3a4f-9f7f-64f5d80e2763.roa (raw, json)
Hash identifier:          oKrgacbrJD9Y1hSN7CeA3P9R0kNJTA1WxpHonKw07Js=
Subject key identifier:   58:E7:A4:9D:3E:39:D2:79:BC:42:29:7D:11:19:A7:26:DF:70:F2:15
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584A78E5F7B6EB0F43DEC83F9C00
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fc3a3f46-7e00-3a4f-9f7f-64f5d80e2763.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     36007
IP address blocks:        2606:3a80:2400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:f7:b6:eb:0f:43:de:c8:3f:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=f58a34ff-c491-4d71-96e5-35d95aa8223d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:ce:83:4b:4e:5f:36:91:c8:2f:f7:8f:da:
                    49:c1:3d:8b:17:01:04:c0:b8:3a:66:f3:07:27:50:
                    60:2a:6c:28:46:c2:b5:98:53:c9:0a:6a:e9:3b:be:
                    a5:a5:77:cf:66:4b:5b:96:58:b7:de:7e:b3:70:69:
                    00:ca:ce:23:56:73:dc:d3:8d:53:3a:f2:d3:a9:cf:
                    e2:a8:ee:df:e9:40:5a:7f:35:29:04:aa:de:bd:0c:
                    2c:68:91:cd:3f:c1:62:4b:c9:5c:fd:be:1d:9f:da:
                    aa:b1:cb:66:2e:e9:bc:4c:4e:d8:0b:94:81:31:b1:
                    0b:4b:8c:ee:02:2e:b6:9b:14:7e:ed:d1:2b:4b:8f:
                    83:11:05:74:6f:fa:6a:a0:ad:92:6a:a4:b5:7a:e2:
                    77:b8:39:41:09:dd:69:f6:37:f6:dd:2a:3f:bd:69:
                    42:1a:f1:53:3a:5d:31:a9:db:a0:47:40:2d:b8:ee:
                    04:e9:0c:10:e6:7a:42:dd:4e:13:bb:7e:2d:2f:b3:
                    76:a2:bb:19:9b:c0:62:11:fc:34:0a:d3:d3:38:41:
                    3e:06:b1:b5:1d:7e:9a:78:59:c5:80:3b:00:e0:20:
                    78:90:9f:86:25:7a:27:11:41:19:0f:1d:d1:f9:ee:
                    09:1d:28:0f:47:9b:7a:f3:54:2f:1c:42:43:67:75:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E7:A4:9D:3E:39:D2:79:BC:42:29:7D:11:19:A7:26:DF:70:F2:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/fc3a3f46-7e00-3a4f-9f7f-64f5d80e2763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3a80:2400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:e2:28:bf:f6:49:f5:b7:7d:9a:53:24:40:6e:4a:49:e9:
         21:44:4f:ce:60:be:ba:a5:27:b2:1f:a1:9b:dc:5f:47:67:8b:
         27:3c:f1:87:c0:50:52:55:bb:0a:66:54:20:d5:e6:25:e1:d2:
         71:75:19:35:01:9f:23:72:7f:28:2e:49:d0:11:b8:01:07:6f:
         83:0c:1c:28:91:52:ff:2f:e7:ee:fa:f1:b2:3f:76:7c:f6:d3:
         de:a5:7c:d4:fb:58:f8:ae:40:22:38:39:5d:0d:9d:80:ee:7c:
         f9:2f:12:9d:82:79:37:cc:79:57:e3:ab:1d:40:85:21:cf:14:
         51:c2:a3:28:e7:83:2a:27:91:42:88:92:38:06:55:cb:26:8b:
         5f:fd:c1:d5:49:d5:87:00:93:d2:a3:bd:8a:27:af:c3:32:7c:
         ce:0e:e6:aa:98:c2:cf:ec:53:43:70:42:07:32:6c:d4:76:de:
         d4:f1:d8:72:14:67:3e:0b:4a:ff:a8:5d:01:13:36:72:eb:75:
         65:bb:93:6b:7b:18:ca:b5:ce:2a:0a:e4:a6:a9:c5:09:fb:37:
         f1:a3:5e:ed:ff:9c:fa:04:6e:8c:eb:3a:5b:80:67:4b:06:a7:
         56:b4:e3:08:38:d1:2f:f0:5f:38:72:13:df:60:25:7e:61:85:
         68:37:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:33:03 2025 by rpki-client