Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/eb6fc912-909b-3236-8ac8-46c73ef2bbbe.roa
File:                     eb6fc912-909b-3236-8ac8-46c73ef2bbbe.roa (raw, json)
Hash identifier:          rtAFnXL437qYvEK9XSwcrUbxUCinLmnzFBQNcHvyQ1M=
Subject key identifier:   A7:6E:80:ED:87:10:10:B4:F1:22:DE:B0:19:75:50:C6:22:C8:79:F4
Certificate issuer:       /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial:       010D0C9F43285848B6261DBDC9D8AE3B23938780
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/eb6fc912-909b-3236-8ac8-46c73ef2bbbe.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     36329
IP address blocks:        2604:7b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1d:bd:c9:d8:ae:3b:23:93:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=5bbd6a2b-7d98-433e-9e3a-bd3b0cbf8d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:e4:23:f4:94:b3:55:55:71:45:9d:dc:89:
                    2f:ff:c6:d9:60:8f:59:7c:3b:3a:de:19:0f:fc:1f:
                    b1:e6:4c:97:4a:47:12:90:79:d9:b0:cb:2f:82:fb:
                    1d:e0:64:7d:7f:f8:57:39:4a:f5:66:2a:c7:99:37:
                    63:f6:73:96:70:93:12:da:ef:c9:e5:26:6e:d8:68:
                    e3:b9:b7:b9:a2:7f:a6:bf:bb:26:64:25:b1:a8:c0:
                    0c:c4:19:f5:97:82:31:6a:8b:44:ca:b5:37:5e:b3:
                    13:af:25:32:04:6f:41:e5:0d:65:60:d1:e5:39:2d:
                    af:50:84:2e:45:5c:05:67:44:23:af:38:bd:e7:a8:
                    ee:5d:0c:ab:a2:31:eb:c6:7a:cf:cf:cc:a2:a8:c7:
                    a1:b7:9f:cf:3c:3c:7f:e5:41:48:9e:e6:04:1f:ac:
                    31:20:bc:0f:bc:cc:d1:5d:56:6b:21:1e:d2:c0:39:
                    46:c8:89:6e:04:31:fd:2d:c5:42:97:d0:c8:71:e7:
                    e3:a2:7d:29:13:60:c0:7a:6f:ae:1e:16:3c:f7:f6:
                    6f:9a:f1:f6:31:4f:58:21:9a:92:75:02:ef:e9:4b:
                    15:17:00:de:4b:d7:ca:29:cd:0d:86:2f:c4:1c:e2:
                    40:9f:da:54:b3:37:da:3d:41:78:98:fb:5f:8c:1a:
                    e7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6E:80:ED:87:10:10:B4:F1:22:DE:B0:19:75:50:C6:22:C8:79:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/eb6fc912-909b-3236-8ac8-46c73ef2bbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:8e:ed:58:58:78:b6:a5:3f:c1:7f:b9:9c:79:0d:aa:54:3e:
         58:0a:70:ee:51:a6:71:c8:83:b3:71:df:cb:11:c2:f5:08:23:
         54:54:12:cc:cd:ec:ff:0d:5b:4c:90:3a:fb:1d:5d:f8:b8:fa:
         a4:28:0c:1e:a0:4c:3d:0a:14:5b:59:83:6c:46:32:0c:e9:a2:
         a3:df:5c:03:7b:21:da:b8:ac:8f:9b:b1:74:92:e6:d2:e0:bd:
         fe:f7:57:31:93:1a:ab:01:38:ea:9b:b5:38:67:b5:55:93:54:
         3c:b6:05:21:1f:9d:9a:f6:da:7a:df:7b:1a:92:74:b3:45:0c:
         ca:47:36:3e:5c:1f:c1:2b:a1:27:26:21:87:89:c7:43:5b:5a:
         ec:ee:05:5c:a4:d7:51:ce:9a:63:15:f5:a4:9f:8d:d6:91:a0:
         7e:7c:d5:52:1f:e0:e1:34:2f:e8:a9:8a:28:0d:13:25:1a:08:
         6b:a3:32:b1:83:d7:92:c3:96:c0:4f:c9:7b:bc:ac:94:67:1c:
         3d:b9:50:22:93:81:2b:ac:15:20:28:1b:6a:c3:9a:92:28:ea:
         9a:8b:8e:fe:67:bc:d8:84:d6:37:b3:9d:26:f0:59:ea:07:7a:
         63:b2:ca:19:3d:c3:dc:85:05:95:2a:c2:1b:23:74:ed:b0:c8:
         dc:12:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:11:58 2025 by rpki-client