Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/f98151e2-3b13-3359-b4ba-7cb5e9b96a2f.roa
File:                     f98151e2-3b13-3359-b4ba-7cb5e9b96a2f.roa (raw, json)
Hash identifier:          m7FDk38hXBNfFsiJz3x98SmxLmbShM4BhFkNq7BbPUQ=
Subject key identifier:   C2:7D:A7:99:5D:93:5C:B1:79:6F:32:9C:FE:36:00:1B:D1:42:62:EB
Certificate issuer:       /CN=12e2244f-c38e-4b53-9402-9dfacc484a1b
Certificate serial:       010D0C9F4328584955295862CCB2ED9480E42B00
Authority key identifier: 90:45:F0:B7:C4:13:43:DF:EA:1A:D1:A5:60:A4:59:EA:49:BC:31:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/f98151e2-3b13-3359-b4ba-7cb5e9b96a2f.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     36064
IP address blocks:        2607:c740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/12e2244f-c38e-4b53-9402-9dfacc484a1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/12e2244f-c38e-4b53-9402-9dfacc484a1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:58:62:cc:b2:ed:94:80:e4:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e2244f-c38e-4b53-9402-9dfacc484a1b
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=013fa924-13ee-43bc-83e0-6a25e8045856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:b8:da:63:be:18:11:95:48:e8:36:58:8c:
                    fd:bb:4e:12:25:50:a8:d9:27:5d:eb:0d:a0:e5:44:
                    fc:6b:b2:21:a6:72:92:50:63:82:8a:cc:49:63:64:
                    23:4a:71:6c:05:25:7d:02:4f:0e:38:74:fd:e1:65:
                    df:75:1e:a7:7c:bb:68:32:61:b3:13:51:e2:f1:46:
                    42:a7:13:e9:5b:3c:3e:a0:81:a3:28:ff:7c:68:7a:
                    1c:61:ce:58:fe:ed:48:b4:5b:5d:96:ed:6d:fb:ee:
                    79:3f:15:ee:20:76:a3:cb:8b:5e:31:33:9a:0f:19:
                    8d:13:ee:44:03:58:cd:09:30:04:d4:82:8c:d7:66:
                    d5:0e:ee:98:b2:df:ff:91:4d:2a:48:aa:23:b6:c1:
                    c3:61:10:05:71:12:44:d8:d3:51:f9:59:61:ab:22:
                    0b:68:6c:86:18:f0:a9:38:c7:02:40:7f:70:06:bc:
                    56:d9:55:f4:fd:2e:50:05:12:48:0a:d8:de:9d:13:
                    00:12:50:d9:db:4a:f7:65:84:45:9a:b2:75:f1:5b:
                    e9:0f:81:0f:bc:bc:3e:8f:e5:36:cc:62:9b:68:a8:
                    ad:87:e0:e6:f6:70:8d:a4:2b:7e:93:47:2d:63:82:
                    6e:16:fd:1d:70:50:ec:b5:78:fb:57:e0:d0:11:c3:
                    cc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7D:A7:99:5D:93:5C:B1:79:6F:32:9C:FE:36:00:1B:D1:42:62:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/f98151e2-3b13-3359-b4ba-7cb5e9b96a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b/12e2244f-c38e-4b53-9402-9dfacc484a1b.crl

            X509v3 Authority Key Identifier:
                keyid:90:45:F0:B7:C4:13:43:DF:EA:1A:D1:A5:60:A4:59:EA:49:BC:31:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12e2244f-c38e-4b53-9402-9dfacc484a1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1d:c1:1e:34:30:24:87:6f:52:a5:57:64:59:0a:30:4c:5d:
         ed:c5:29:7f:ce:72:80:d4:cc:96:ca:bc:7c:d8:85:cd:03:10:
         be:13:42:8b:25:05:b9:ca:69:23:c9:0c:11:fc:1e:94:71:be:
         dd:3d:98:05:58:02:3c:db:9a:8c:d3:a9:81:c7:63:48:01:b1:
         c5:be:f4:ef:50:12:b2:fc:ce:3e:51:f9:ac:c8:07:6a:62:85:
         ab:59:8e:49:bc:80:cf:03:e5:01:84:77:85:26:7a:b8:00:90:
         59:bb:e3:66:89:3b:08:ca:9d:d3:ea:9a:d3:54:95:3b:c0:40:
         29:e1:f1:42:98:23:ed:c4:d9:5b:66:78:e8:27:e8:cd:ed:7b:
         0a:b0:02:52:a6:ae:8e:23:7e:fd:d4:a9:67:83:90:8a:7b:9f:
         3d:56:e3:84:10:60:e4:17:e2:30:59:a2:be:60:c8:2c:80:a6:
         e9:e4:ac:22:f2:07:e4:0a:69:0b:b9:6e:03:c2:19:23:7d:35:
         a2:93:2a:be:a0:48:a6:89:78:1e:39:45:ec:4a:af:81:29:0a:
         d4:2f:a3:f9:68:c9:99:1c:66:64:54:c8:71:06:8d:40:6b:d2:
         46:e2:ea:0e:ab:fd:be:41:e4:59:f8:94:5c:27:2a:08:90:de:
         2f:98:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:11:10 2025 by rpki-client