Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa
File:                     ea1a9030-9438-32dc-88a6-09fec6a92edf.roa (raw, json)
Hash identifier:          koGFgVxf10CACRdo/WMFMEfezH/NDO9mkA9pE7UyYpg=
Subject key identifier:   57:3B:79:9E:AB:42:6B:66:1B:AB:AB:71:A6:35:BE:C7:66:7D:C2:17
Certificate issuer:       /CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
Certificate serial:       010D0C9F4328584930DE7480CE9451ED952BCC00
Authority key identifier: 24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     399519
IP address blocks:        2606:3bc0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:74:80:ce:94:51:ed:95:2b:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=1ea39e0d-2df0-4604-9c7e-525e15ad83a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:34:77:e3:c0:d5:bb:dd:62:d5:24:52:11:
                    62:7a:5e:8d:3e:1a:3e:34:32:36:dd:a2:b9:bf:4e:
                    4a:f2:95:9b:41:9e:7b:34:b7:09:67:ec:cd:78:e8:
                    61:f4:7d:db:de:0c:51:6d:2d:12:4b:be:54:c2:46:
                    f9:de:1e:d8:30:c4:b7:77:6e:4b:ff:15:a0:f9:f7:
                    cb:0e:6d:4a:23:87:bf:45:e4:b0:a0:29:12:5d:3c:
                    9c:eb:07:4b:3f:82:a8:93:04:cf:53:48:00:69:04:
                    8b:c3:eb:bc:44:34:eb:7a:e9:a9:98:f0:73:7f:c3:
                    84:a1:10:f6:08:6b:e0:65:c7:34:2d:cd:d9:ad:8a:
                    f8:aa:1c:2a:34:2c:06:fd:f5:41:04:f7:9c:bc:5a:
                    3d:c0:bb:f4:7a:bf:f5:4a:aa:b9:c2:d9:df:73:05:
                    ee:f7:5c:2b:2b:d0:0c:b3:1b:88:c6:2b:37:e8:04:
                    b1:a7:e3:27:8f:23:20:77:f4:4a:6d:6e:1e:4b:79:
                    60:22:23:39:5d:7a:b3:f6:0d:c8:a5:7c:f7:b1:52:
                    69:c8:ea:ab:e3:52:69:cf:a2:38:37:68:52:32:1e:
                    16:9a:64:a2:4b:27:be:d3:73:81:4f:12:2c:18:5c:
                    fa:de:21:08:fb:0c:6a:bf:d0:67:cb:7a:d2:7a:bd:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:79:9E:AB:42:6B:66:1B:AB:AB:71:A6:35:BE:C7:66:7D:C2:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl

            X509v3 Authority Key Identifier:
                keyid:24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:0d:c8:bf:74:69:9d:44:24:a5:f2:dc:5b:4c:ae:93:d3:a2:
         0e:2d:c1:b5:04:73:00:dc:35:0c:0a:fa:0d:90:fe:49:f3:98:
         3a:f8:6a:77:dd:4b:bb:c6:7f:34:33:8a:f2:56:19:b2:01:25:
         19:36:bc:6c:83:4a:27:06:fc:fd:37:30:21:ab:2c:0f:8f:9b:
         c5:1e:c1:08:df:90:65:f2:8c:f1:4e:19:f9:de:9f:69:2d:f9:
         22:15:1a:a3:c6:88:79:29:3d:2d:38:b2:28:bd:3b:f4:fb:8e:
         c9:d9:30:ae:88:08:64:94:0c:2a:ec:8f:3a:65:f6:83:0d:1d:
         90:00:5f:05:d5:f3:56:67:e0:e3:08:45:8d:a8:65:f1:f2:d1:
         74:79:55:d7:95:99:5b:fd:df:84:85:02:e2:04:4d:b5:aa:c7:
         4b:5d:82:5e:63:e2:18:6b:e7:dd:cf:c3:e8:63:9e:e9:89:79:
         5b:4a:97:06:a6:62:08:e7:da:8b:90:1f:35:05:3e:57:3f:d8:
         98:05:61:e0:82:49:17:35:99:df:b4:94:f4:07:01:45:50:03:
         f7:77:d0:fc:87:07:ce:a6:68:d1:95:23:07:24:e2:59:e1:fd:
         45:4d:f3:a3:3e:e2:37:27:67:63:30:d1:45:76:b2:cc:96:b8:
         fb:df:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:59 2025 by rpki-client