Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6f777758-37ec-3629-a5b3-9b222bf1ebe8.roa
File:                     6f777758-37ec-3629-a5b3-9b222bf1ebe8.roa (raw, json)
Hash identifier:          /ldCMpS6tAlkxHDWzUccMAfrBMURiOuCQ0bCCmIngRk=
Subject key identifier:   3D:7B:49:8D:05:19:78:62:BC:47:80:4D:46:38:52:60:43:62:9F:5B
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F432858492AD24BE93177E49F54305F00
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6f777758-37ec-3629-a5b3-9b222bf1ebe8.roa
Signing time:             Wed 12 Mar 2025 21:01:30 +0000
ROA not before:           Wed 12 Mar 2025 21:01:30 +0000
ROA not after:            Tue 10 Jun 2025 21:01:30 +0000
asID:                     27539
IP address blocks:        2604:a900:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2a:d2:4b:e9:31:77:e4:9f:54:30:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Mar 12 21:01:30 2025 GMT
            Not After : Jun 10 21:01:30 2025 GMT
        Subject: CN=cfdacfc4-82cd-40f8-9a06-575dfdcff805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:f4:8c:df:4f:f3:82:c9:f3:99:d2:ff:80:
                    b0:6a:8d:87:83:b8:35:95:5a:c1:56:32:fa:e4:4f:
                    10:d7:10:dd:70:26:d0:90:dd:4c:0d:72:d1:0c:ba:
                    22:8a:81:ac:ac:ab:af:c5:28:f3:f2:b9:6f:c8:98:
                    c1:27:dc:03:e0:a0:ed:db:46:f3:e4:9e:84:09:36:
                    4e:68:61:5d:bd:21:46:0d:dd:42:d1:0f:6f:49:ca:
                    39:71:a1:26:1d:23:c9:0a:af:dc:63:64:96:fd:74:
                    0a:49:1d:fd:72:b3:56:4d:66:b5:4b:d3:32:ba:99:
                    de:87:bc:6f:9b:2a:ef:d2:bc:b3:54:f5:0b:86:f9:
                    16:69:e2:2a:ae:4e:5e:89:31:f2:23:3d:47:a2:23:
                    c8:9b:c5:d3:70:23:b5:cd:3d:75:c1:fb:ec:d9:fa:
                    75:e9:4e:0f:39:76:d5:88:fd:cc:f4:4e:80:76:79:
                    a3:45:6b:c7:82:07:0b:14:8c:de:33:6f:e9:c4:fc:
                    d3:79:bc:cd:6e:0f:1a:02:fb:5e:ba:72:b2:e1:96:
                    d7:70:a2:51:d1:41:9f:c6:29:fb:9e:41:4e:a5:e0:
                    2e:4f:0f:19:34:bf:15:6a:87:ec:e1:30:5a:b1:f0:
                    51:2e:2d:4f:77:8f:95:4a:83:bf:b6:18:48:da:7d:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7B:49:8D:05:19:78:62:BC:47:80:4D:46:38:52:60:43:62:9F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6f777758-37ec-3629-a5b3-9b222bf1ebe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:e000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:cc:ce:95:ad:52:d3:16:17:f6:11:10:b2:e9:a1:96:18:4e:
         53:b3:02:4d:01:d2:91:d0:2d:fe:57:c4:83:6f:68:26:66:4e:
         20:1a:bb:84:ca:1a:88:07:d2:97:3f:04:e2:08:92:fa:cc:cc:
         4e:b0:e8:8e:2d:4b:33:d2:8d:0a:16:d2:da:47:fb:60:c0:c4:
         6d:d1:6d:13:e8:d9:c8:1d:db:e3:e4:19:66:a2:d8:4d:24:9a:
         3c:a3:7d:9c:18:c5:fe:7e:62:9f:30:21:74:dd:36:b4:8b:fb:
         a4:14:9d:0a:37:14:a7:03:b2:ef:0f:d0:53:3b:77:64:eb:fb:
         67:2c:d7:cc:29:16:ff:e3:3c:f4:f6:dc:3f:c9:6c:ec:2a:c1:
         2f:ca:82:15:9e:85:6b:9a:a7:e5:35:fc:d1:6f:69:0d:18:28:
         cb:59:40:8b:bb:85:70:00:21:fb:78:57:1e:d7:7e:5d:2a:25:
         02:25:fb:b5:9c:e8:6a:8e:69:2b:5f:21:7d:5e:0a:bd:89:da:
         a4:7a:ea:e4:ce:37:e3:a9:77:fe:76:02:05:3c:f6:01:39:b1:
         35:1e:c8:12:ed:90:65:91:55:ae:36:8b:a4:9e:32:39:1a:91:
         72:37:31:14:1d:50:0b:69:a7:f7:0e:4c:2a:d1:8e:69:4c:e1:
         dc:87:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:30 2025 by rpki-client