Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c75178ce-3432-3602-b6dc-5e72fa4ae91f.roa
File:                     c75178ce-3432-3602-b6dc-5e72fa4ae91f.roa (raw, json)
Hash identifier:          /f4ReitXEbAU5AP2lcme5Ju6TvvC3Xn01gxgxxWa8Z8=
Subject key identifier:   96:7C:B4:47:50:52:C5:DE:7E:1C:DC:05:2E:88:61:B8:F2:87:9C:DD
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F43285848696068E22D8CEFAA9C8B5900
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c75178ce-3432-3602-b6dc-5e72fa4ae91f.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     393885
IP address blocks:        2604:4a00:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:68:e2:2d:8c:ef:aa:9c:8b:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=bcd95a41-62ca-40d0-87d0-5b75775f2344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:9d:67:f2:ab:3f:d8:45:88:d4:48:42:5f:
                    34:d9:31:6e:61:71:2e:ec:83:bc:46:1f:f5:63:70:
                    77:2a:0f:d0:67:d8:88:56:9a:54:64:39:38:f9:58:
                    54:02:e7:88:e0:ae:ee:6a:61:00:8e:e7:e8:4b:df:
                    00:ed:ef:40:8c:7c:fc:be:d7:b3:1f:39:24:14:0d:
                    e9:f2:94:10:a1:4a:8e:00:1e:16:d2:cf:c0:e9:3c:
                    eb:34:0b:88:a4:54:c1:27:ee:a5:48:5a:6e:d4:52:
                    70:89:85:21:8b:08:db:60:0f:bd:72:36:45:a9:c1:
                    a7:58:f9:8f:64:01:a0:e4:f7:50:b8:ea:99:d7:f2:
                    cb:9e:98:81:5c:90:d2:ec:b8:77:38:14:c7:36:a7:
                    66:ab:0b:2a:5a:17:1b:b3:90:56:dd:17:be:65:ca:
                    91:40:b7:86:f4:8c:28:8e:91:2f:f3:00:4c:de:81:
                    9d:cd:20:11:32:c4:95:e5:85:de:75:24:b5:ba:05:
                    75:29:a8:dd:ee:02:c2:af:2b:02:a2:a3:9a:59:ee:
                    7c:ed:5f:8f:f0:35:40:e7:0d:72:29:14:ae:89:b2:
                    53:6d:4a:aa:55:43:64:b4:04:14:55:78:1b:17:4c:
                    d2:08:85:42:42:8c:1a:74:df:49:1c:ee:b8:6c:c3:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7C:B4:47:50:52:C5:DE:7E:1C:DC:05:2E:88:61:B8:F2:87:9C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c75178ce-3432-3602-b6dc-5e72fa4ae91f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:c8:31:f2:d8:df:9e:69:88:b9:2f:02:1b:d0:51:94:b6:2c:
         e8:de:8a:da:14:11:83:71:e0:35:4d:a8:be:45:2f:6c:bc:18:
         a9:88:aa:de:5a:dc:5a:2f:0e:94:01:8c:89:f8:ce:81:27:61:
         8e:db:76:90:c1:06:aa:6a:46:14:61:04:d3:e9:5c:0e:41:a2:
         14:64:83:f8:ce:a5:d2:0e:5f:14:6b:ec:f4:af:9f:ce:2c:c2:
         e6:b3:31:e9:00:02:c9:de:74:74:ed:82:45:c2:ac:fd:c2:2f:
         f1:52:da:13:44:4e:f8:ce:91:18:13:97:7f:44:54:5c:06:8f:
         32:5e:0a:21:5f:71:2a:ad:a2:3f:0f:d8:e8:16:4b:53:08:cc:
         42:d9:86:4e:70:ca:ca:89:a5:ce:c3:e5:b3:12:88:6b:0f:11:
         f9:1f:61:cc:d5:db:26:7e:10:96:39:59:ac:12:e3:d4:18:77:
         8e:6f:f1:0d:ac:94:92:67:30:31:31:0c:db:91:0c:18:67:0a:
         8f:d9:75:df:61:b4:02:0d:84:46:89:ac:66:e5:65:6d:8c:19:
         76:6f:ad:24:2f:db:55:1c:b0:48:be:69:05:b5:6e:28:6b:4f:
         4f:f3:95:13:ef:3f:1a:60:15:3e:b9:84:39:dd:15:4c:e8:3d:
         38:36:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:31 2025 by rpki-client