Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/3fcf93dd-d596-3e12-9d59-4062faa41053.roa
File:                     3fcf93dd-d596-3e12-9d59-4062faa41053.roa (raw, json)
Hash identifier:          IQ+NKVDlsrZvhNzoZd9bzkKVXKWbf0p6z2AewtxNuss=
Subject key identifier:   A0:B7:0F:18:78:F8:E1:6C:A1:A3:A9:65:F7:80:05:44:E2:FE:27:92
Certificate issuer:       /CN=73d6002b-995e-4a63-943c-bf2474d0b147
Certificate serial:       010D0C9F43285849D42FAC62301B9FDE6150A580
Authority key identifier: 8E:A4:7C:4E:F5:7A:75:1E:07:EC:9D:A2:C9:73:19:EB:A5:0A:29:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/3fcf93dd-d596-3e12-9d59-4062faa41053.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     400950
IP address blocks:        2602:f927:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/73d6002b-995e-4a63-943c-bf2474d0b147.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/73d6002b-995e-4a63-943c-bf2474d0b147.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:ac:62:30:1b:9f:de:61:50:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d6002b-995e-4a63-943c-bf2474d0b147
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=4a01f611-72b5-415c-bc45-bd406d3ebfe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d3:dc:45:73:cd:a4:3b:2d:5a:bf:c8:0a:ae:
                    23:b5:b1:96:4f:76:e7:37:15:e7:5b:6e:5b:a2:d0:
                    55:a6:41:16:22:b4:c7:69:ab:89:d5:97:fa:ae:83:
                    1f:99:4d:83:56:23:7e:de:aa:f1:69:7d:3d:cf:7f:
                    8b:69:6f:44:d2:56:a7:2d:ca:09:ee:75:2c:1a:64:
                    80:c8:cd:1c:68:50:df:0c:c5:6c:e7:b8:85:32:c0:
                    aa:72:2c:c7:e9:99:b5:02:6a:e6:0a:61:e0:46:dc:
                    5e:99:6c:ea:3c:4e:9d:ba:bb:2b:64:b3:52:3f:e4:
                    ce:5e:93:f7:f3:63:10:2e:9e:49:4e:b6:e4:ab:b9:
                    ed:31:c2:c9:e1:48:5f:92:1b:8b:18:04:8e:df:b4:
                    61:b0:f9:8b:8d:ff:ec:20:73:41:cb:18:64:ae:47:
                    44:d1:3d:47:fd:14:19:60:ae:6a:11:cd:99:d0:35:
                    52:ca:7a:28:21:61:85:d7:c3:cc:89:66:8e:09:9b:
                    f6:62:94:87:2e:13:d5:5a:9c:2a:dc:0e:f1:d5:9c:
                    4e:9c:0b:d5:9a:75:a2:16:cf:47:8c:82:76:2d:51:
                    d1:d6:a1:41:61:5c:ae:3c:d1:8f:d0:80:db:fd:3b:
                    9e:56:de:07:06:1a:54:98:01:ae:c6:27:1f:af:98:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B7:0F:18:78:F8:E1:6C:A1:A3:A9:65:F7:80:05:44:E2:FE:27:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/3fcf93dd-d596-3e12-9d59-4062faa41053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/73d6002b-995e-4a63-943c-bf2474d0b147.crl

            X509v3 Authority Key Identifier:
                keyid:8E:A4:7C:4E:F5:7A:75:1E:07:EC:9D:A2:C9:73:19:EB:A5:0A:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f927:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:95:ab:fe:d0:4b:9d:f1:ce:3b:28:39:fa:e3:9b:07:dd:84:
         51:ff:01:20:26:50:aa:ea:89:ce:ef:f7:68:82:c6:53:ec:13:
         32:e2:46:7f:dc:e3:39:5b:26:ce:cd:8c:c4:22:d6:20:ea:41:
         a2:42:f9:3b:9e:c2:6e:1c:fe:1a:f8:e4:9e:fa:7a:bd:6b:5c:
         da:76:84:e8:92:70:58:4c:fb:3c:d7:a9:fa:37:c1:da:12:6e:
         99:8d:47:a4:d3:0a:3b:98:bd:7b:fe:26:0d:7a:8b:4d:4b:21:
         ca:13:86:ef:13:d7:c1:09:e6:18:e5:bc:bd:4d:6c:f2:ee:4d:
         d8:a5:2a:91:ca:56:57:5c:d7:cd:0a:31:a3:e3:80:78:d3:52:
         04:b3:0c:fe:e3:12:87:75:f7:5e:90:e7:3b:7d:84:78:a1:58:
         03:e0:92:45:c7:27:34:58:ac:1d:9e:5b:4b:85:50:fd:1a:44:
         15:f6:ae:96:7a:0f:c2:57:cb:08:06:0a:70:99:a7:ce:44:48:
         ba:4b:c8:5b:73:94:f3:a2:59:88:fc:80:30:2a:d6:62:47:79:
         29:1c:a9:e3:d2:cb:3c:ef:a5:ff:90:16:d0:8a:cb:8d:23:f4:
         a6:16:8f:a9:47:b5:97:cb:89:57:e4:0a:83:39:37:ae:b6:48:
         a7:5c:14:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:06 2025 by rpki-client