Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cb70c6f3-202f-31e1-80fa-d0f7976ab09b.roa
File:                     cb70c6f3-202f-31e1-80fa-d0f7976ab09b.roa (raw, json)
Hash identifier:          OdeAYBgeXJRsAsGqvrVjcbFJqB/NEcF6FfdvIYICV+I=
Subject key identifier:   75:27:9B:95:4F:F5:0F:1F:EA:DF:5C:12:53:0F:F2:75:8A:86:43:47
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584965E979CDF405B8D341D09340
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cb70c6f3-202f-31e1-80fa-d0f7976ab09b.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     14618
IP address blocks:        2606:f4c0:4000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:79:cd:f4:05:b8:d3:41:d0:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=de8e2883-8872-44d7-8166-bc20b05cc514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:74:d4:cf:c6:81:e1:06:47:03:a6:02:d2:f6:
                    03:2c:6f:68:3a:1a:1a:21:99:2f:95:1f:d2:16:3a:
                    6c:96:17:8a:76:e1:d6:05:63:e8:15:a7:9b:9b:8b:
                    70:8f:80:67:c4:7c:ae:d2:1b:79:d5:a9:8d:03:9c:
                    21:59:61:d1:95:a4:2b:00:6b:0d:e5:18:35:59:ec:
                    51:1d:7b:97:cb:3c:7d:77:ee:71:a9:72:87:4e:d9:
                    69:85:50:33:df:c7:63:7d:59:20:46:0f:7d:b4:2a:
                    da:eb:e2:df:8d:a2:f4:ef:48:13:be:5d:0f:62:96:
                    ec:ac:cc:a4:b3:d3:83:da:f8:61:2a:c4:7b:d5:ec:
                    c6:fc:f6:bf:52:72:2b:ce:fc:81:1c:05:30:bc:f3:
                    d6:b6:57:48:b8:e9:21:e7:5c:65:0f:30:6f:d0:27:
                    ed:83:78:de:9a:a1:cc:2d:27:4b:5d:ae:e4:46:60:
                    b2:2d:5d:30:34:c4:a3:7f:b8:7c:93:32:93:a9:65:
                    4a:93:80:a6:8a:03:a6:c6:23:4c:5c:5c:69:38:d3:
                    9a:8b:65:cb:27:84:8a:c9:12:53:77:66:1e:d5:81:
                    00:46:08:c9:35:da:88:ae:e9:fd:77:3a:ae:47:e9:
                    ed:b1:78:70:f6:7a:7a:d6:03:b0:91:25:3f:2e:c6:
                    c4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:9B:95:4F:F5:0F:1F:EA:DF:5C:12:53:0F:F2:75:8A:86:43:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cb70c6f3-202f-31e1-80fa-d0f7976ab09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:7f:bc:35:0d:40:92:88:8d:35:7f:e9:51:7f:de:8a:6d:
         d7:11:43:9b:5c:2d:9d:3d:51:8c:51:58:1b:05:46:4b:00:0a:
         08:9e:71:d1:3e:dc:29:42:43:78:56:d0:7d:f6:65:79:1b:45:
         9f:1a:ee:10:ba:da:56:79:02:9c:2e:3f:0f:73:00:7b:c4:b0:
         f3:dd:5a:4e:29:23:00:45:0d:30:9f:bf:ec:10:c6:00:77:2c:
         25:33:2c:ed:63:b0:b3:2e:1b:77:fa:7a:fe:ef:9d:f9:97:ca:
         60:84:ab:e4:81:49:f9:4b:17:d8:79:83:a2:34:4d:42:06:17:
         99:b5:62:d6:fd:a0:e8:69:38:25:8b:83:31:85:ba:06:ce:54:
         12:27:6a:34:66:e1:18:33:34:4c:f1:c5:57:45:6d:77:7b:02:
         17:24:c5:b1:52:84:8b:99:20:1f:8c:08:0c:99:35:f1:9d:7b:
         45:bf:88:c6:ea:ba:18:5c:00:8b:f3:87:4a:b4:95:fa:a5:11:
         43:52:87:42:80:93:cb:c2:9b:5c:f5:bc:31:c1:8b:00:1f:e2:
         b7:66:cd:48:c3:ff:07:12:d6:83:9e:52:6a:30:2d:b6:81:50:
         d4:fb:a6:9a:19:7e:93:9c:05:4e:a4:60:41:d1:5c:53:51:c4:
         aa:17:19:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:10 2025 by rpki-client