Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/6fa967fc-7151-3ae1-9f3f-e1bafae49234.roa
File:                     6fa967fc-7151-3ae1-9f3f-e1bafae49234.roa (raw, json)
Hash identifier:          gyAuUvY+vuTy+b1xV9SQcTUiK8007d1Us35cgYC/e3k=
Subject key identifier:   DD:C5:BB:36:27:4E:A0:60:CD:75:A2:E6:18:8C:56:4E:E6:1E:38:26
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285849B9AA01C6AC4F0EE5C83F0740
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/6fa967fc-7151-3ae1-9f3f-e1bafae49234.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     36007
IP address blocks:        45.61.52.0/24 maxlen: 24
                          2604:bc0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:01:c6:ac:4f:0e:e5:c8:3f:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=2192c13b-cfbe-4b3d-97f0-64f9192a0699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d0:74:a2:9a:2b:23:dd:6f:34:fc:a3:eb:6f:
                    a7:ee:95:5d:2a:17:98:b1:f5:fb:9c:91:83:a5:51:
                    12:ad:c7:a4:0d:aa:4b:c9:e9:eb:6e:51:15:5e:99:
                    07:be:8d:6d:c7:3f:15:ad:b8:b9:bb:9c:51:9e:e7:
                    fa:c0:2c:a9:71:c2:d9:72:6a:4e:6f:f1:ff:c6:b3:
                    5e:68:b6:81:2c:8d:ec:28:43:b1:87:31:f0:d1:c3:
                    a8:31:d6:b2:4a:27:70:9d:0f:06:19:b3:58:fb:64:
                    fe:dd:8c:83:b9:d9:bd:bd:03:d1:69:26:fb:64:c1:
                    11:46:87:04:63:88:6c:8b:d2:ce:94:a0:f4:f3:c8:
                    a2:ff:17:01:02:95:6c:1a:ad:d3:7a:40:41:bb:6d:
                    c9:b2:60:54:51:eb:dd:87:ad:8a:68:5e:b3:8d:a6:
                    cb:4f:a6:f2:9f:58:8e:f6:43:f1:34:5c:a7:ee:eb:
                    f7:25:ea:ed:63:30:70:07:de:bb:ca:f2:42:2b:44:
                    c9:a3:53:b9:e8:97:9c:f8:4f:94:4b:08:88:3e:ae:
                    ae:47:c4:c8:84:9e:af:2b:49:63:38:eb:5c:37:e6:
                    8d:3b:f7:8c:3b:8f:7f:6c:38:19:ed:ff:6a:3d:ef:
                    91:c6:28:b6:56:1f:4f:94:8e:9c:78:70:6a:51:b0:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C5:BB:36:27:4E:A0:60:CD:75:A2:E6:18:8C:56:4E:E6:1E:38:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/6fa967fc-7151-3ae1-9f3f-e1bafae49234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.61.52.0/24
                IPv6:
                  2604:bc0:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d9:5b:bc:3c:39:99:84:f0:ff:67:4b:5c:4f:69:be:37:e5:
         7a:53:ef:49:fd:8f:05:56:d1:dd:64:65:a2:54:3e:09:43:ee:
         6c:b2:be:63:1b:d4:b3:f5:91:a1:3e:c8:8e:5a:7c:c4:38:1a:
         b9:55:9f:a4:d1:99:2c:59:06:51:0e:28:56:00:d5:2e:bf:47:
         d1:9a:ac:6d:77:0a:91:14:d4:c6:25:96:dc:fc:d1:4b:eb:2b:
         c5:89:21:b0:eb:00:72:b7:0a:05:8d:97:d0:d6:36:84:fb:bd:
         aa:27:b0:c6:d3:e0:84:f5:0a:26:62:df:84:f0:8b:9c:85:55:
         d0:7c:62:13:e0:b1:bd:6a:60:07:60:ed:1e:79:bb:b1:f2:23:
         84:4a:6d:0c:ce:df:c0:b5:57:22:59:b3:d3:55:46:85:df:d6:
         58:dd:50:ba:9a:f6:88:20:ee:46:ff:f1:c1:55:68:1b:0c:34:
         88:5f:0f:2d:1b:e1:e3:c1:c2:c7:e8:57:d0:3f:71:58:f4:a5:
         8d:4f:4a:25:d1:43:ee:9a:0d:5f:dc:6d:5f:f9:25:54:59:7b:
         ac:a2:30:8e:6e:2d:7a:d7:32:1e:1c:23:f1:98:21:59:6e:cc:
         f0:2b:5d:ab:db:d6:b7:a1:cb:33:1e:be:d4:dd:1a:88:b5:0c:
         63:f0:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:59:19 2025 by rpki-client