Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa
File:                     8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa (raw, json)
Hash identifier:          yJtdjjdiyqffo/3Obc6fUk8VpJ0AFDLL8Pgq6IgpnNw=
Subject key identifier:   32:3D:EA:6D:59:5F:26:94:F0:E7:21:72:F6:8E:AC:8C:A2:AB:FD:2D
Certificate issuer:       /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95
Certificate serial:       010D0C9F43285849D42FAAD78575411884632040
Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     64236
IP address blocks:        2604:2d00::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:aa:d7:85:75:41:18:84:63:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=cbe122a6-4371-4e7b-a714-cc67514b68ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:2e:cb:1b:4d:e9:b4:d7:9a:25:c1:f0:2e:
                    1e:04:4c:f0:fd:fa:e5:b9:4c:dd:4e:e3:c7:a8:32:
                    07:f6:bd:6d:a9:e2:73:33:a8:d5:bc:69:1e:e3:13:
                    dc:79:c8:cf:9c:30:84:fa:27:1b:cd:51:fd:d7:10:
                    68:01:21:bd:a9:8d:ad:e5:18:ba:a9:fe:c4:aa:6a:
                    24:9e:ac:f6:5f:ef:76:61:67:cf:da:8e:64:3d:c0:
                    92:eb:88:dc:47:5d:02:3e:c4:5c:df:7f:92:42:98:
                    35:f9:f9:8b:08:31:98:4d:86:f3:7d:e2:27:30:1a:
                    41:9a:5e:c3:ed:db:d3:8d:2f:c2:e6:4a:ca:60:60:
                    61:f0:d6:09:b1:f3:f5:80:d0:ba:36:6b:14:0c:7b:
                    32:dd:0f:9b:4e:bc:39:1c:d8:5c:51:5f:d0:c1:c6:
                    70:21:dc:95:be:0e:93:59:ef:f4:b7:bb:76:fb:a5:
                    53:29:79:b9:e2:3b:aa:f4:a0:29:c1:3a:a2:5d:1b:
                    cb:73:a3:a3:8b:b6:92:c5:da:23:1f:14:7e:a0:7c:
                    99:dd:01:b3:b7:2f:dc:26:e4:aa:3e:e4:7e:43:57:
                    3a:83:5b:82:c9:15:48:a7:5a:c5:6e:72:8b:ba:73:
                    42:12:5e:58:76:f5:1b:f7:b2:4f:f9:43:e1:5b:57:
                    98:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3D:EA:6D:59:5F:26:94:F0:E7:21:72:F6:8E:AC:8C:A2:AB:FD:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl

            X509v3 Authority Key Identifier:
                keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d00::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:2c:2a:0f:1a:5f:43:b4:89:ef:35:49:52:f8:51:34:31:eb:
         95:14:bc:f9:57:c1:d7:45:01:da:3f:4d:94:ec:37:f6:fc:b8:
         3d:47:ee:98:04:52:10:5d:ff:ad:ba:83:8f:6e:ed:de:91:5a:
         65:2c:37:39:e6:63:49:02:2c:7d:b4:fe:47:fa:91:9c:bd:67:
         45:0c:c4:27:64:1c:5f:85:3e:1b:fb:7f:d2:80:40:0c:09:9a:
         71:ad:4b:57:79:ac:75:2e:0f:c3:22:09:b9:6a:f0:c0:5a:cb:
         0a:21:91:74:90:26:9b:bd:d8:39:4d:8f:ba:db:89:d8:38:56:
         c7:2b:d0:b5:7f:35:b7:29:15:d8:e7:0d:fc:28:46:7e:3b:c6:
         4d:65:74:80:98:a2:fa:e2:12:53:89:51:27:3b:bf:6f:02:31:
         7f:ec:68:55:5b:30:13:2d:5c:82:98:32:44:2e:b3:f8:c1:7b:
         6c:f6:92:f9:dd:2f:2d:70:66:76:73:af:1b:0b:d4:29:b2:25:
         8f:96:f1:13:a5:86:bb:60:ef:00:75:39:6e:84:2d:06:44:3b:
         06:34:f6:6a:4a:2b:11:59:1c:71:0c:73:4c:ce:84:12:8d:67:
         45:8d:fe:d0:94:69:57:3c:11:6f:95:16:30:84:ac:35:34:e1:
         65:cd:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:11:50 2025 by rpki-client