Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/35210763-57db-34de-b330-cad02dbdd9ae.roa
File:                     35210763-57db-34de-b330-cad02dbdd9ae.roa (raw, json)
Hash identifier:          mgnwyR2GxAGhIt8ijeNhS3wqrHG6Y701RHxT8Q9W1D8=
Subject key identifier:   38:F4:7D:1C:60:3F:27:C6:71:6F:D0:D3:13:B8:F7:AE:1F:30:9D:D8
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F432858495ABECC634157B011BDF7A724
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/35210763-57db-34de-b330-cad02dbdd9ae.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     945
IP address blocks:        2605:f440:9800::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:cc:63:41:57:b0:11:bd:f7:a7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=56682205-32f9-49f1-b9a1-6d1190ebab9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e5:26:d9:e8:9e:3e:8c:d2:5e:4a:5f:58:71:
                    43:e3:11:5a:4d:4e:5a:dc:23:86:c2:c9:5e:53:06:
                    af:5f:b8:dd:65:1a:56:7d:4e:2a:d6:b8:8e:b9:1e:
                    13:07:5b:72:58:57:9d:8c:5f:99:a6:c2:7f:ed:9c:
                    6c:4b:75:e5:7a:7e:f5:fc:2f:e9:46:ef:0d:26:f3:
                    1e:51:9c:45:be:60:f9:70:e0:71:79:fb:b3:50:5c:
                    f3:35:e2:0b:ab:09:47:73:d4:2e:7d:2f:bb:8e:d0:
                    13:83:99:19:35:ef:5b:be:86:1a:c7:81:d4:4f:a6:
                    8b:b2:66:48:36:2f:00:2d:86:65:a7:2a:0c:57:ab:
                    71:5c:5d:30:40:2d:bc:bc:1a:7a:ff:07:be:c8:70:
                    2e:79:0b:18:e8:84:65:5d:24:80:35:c6:7b:fa:ef:
                    73:47:f8:19:a1:ec:92:aa:d9:3a:0a:62:41:06:ee:
                    47:da:62:17:bc:e7:d6:6d:75:fa:1f:9e:e5:c2:9b:
                    43:25:e4:e9:35:dc:ba:65:02:c5:e9:08:7c:12:15:
                    19:41:e7:68:dc:ad:7c:1a:69:ed:e5:fb:7e:c1:03:
                    f4:af:28:5d:b3:49:9c:c5:29:af:c8:06:ec:33:e9:
                    d0:81:3e:1f:d2:66:d2:53:5f:e8:89:0f:eb:56:61:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F4:7D:1C:60:3F:27:C6:71:6F:D0:D3:13:B8:F7:AE:1F:30:9D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/35210763-57db-34de-b330-cad02dbdd9ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:9800::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:2b:e7:40:6c:70:53:f3:45:6c:ba:80:42:57:66:da:1d:87:
         40:48:54:55:c7:6e:77:a9:dc:30:ee:b0:93:9f:90:80:94:02:
         94:36:38:65:3e:49:5a:91:66:ab:2f:67:e6:f5:1c:eb:83:b0:
         9f:2b:cd:9f:fc:3d:c5:b2:33:59:d6:80:20:2e:62:bf:4d:ce:
         c3:3a:bc:95:96:93:38:a0:1f:78:84:23:86:55:3a:d4:6e:33:
         1c:fc:16:fb:4f:d6:82:00:e0:c3:af:02:70:04:db:c8:d3:89:
         95:fd:15:c6:30:dd:5b:d8:99:88:a8:a6:1a:da:4f:f7:f9:12:
         68:1d:7e:9c:0b:2a:e4:8f:11:aa:f9:2a:20:97:45:e9:5c:cd:
         08:50:4c:c2:5f:88:c7:78:d6:01:a5:62:13:2d:48:52:8f:e2:
         48:4e:05:aa:f2:6b:7b:24:c0:91:f9:23:a5:01:c5:50:e7:92:
         65:23:2e:1e:2f:8b:b3:50:4f:35:46:5d:3b:68:4d:b2:1d:a3:
         01:26:c1:7e:54:98:68:b5:86:09:79:87:36:16:da:90:bf:64:
         75:81:3a:9d:4a:ad:43:5b:c2:8e:38:47:21:dd:19:6d:56:09:
         e3:8f:99:01:67:ce:f3:f1:9b:0f:15:5b:c9:96:5e:ec:f5:e5:
         57:6a:6e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:10 2025 by rpki-client