Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7ff37f4e-7977-31fe-94e5-a56e9e5fad32.roa
File:                     7ff37f4e-7977-31fe-94e5-a56e9e5fad32.roa (raw, json)
Hash identifier:          plWdNkopm/VzrOHFvnSdYaXeZ77XMr2/YiYxQZxpW0U=
Subject key identifier:   C4:96:FB:B3:57:81:85:3D:62:28:8C:D1:4D:F6:CD:5A:9A:56:A7:3A
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F432858495C243A684CA644CC04786780
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7ff37f4e-7977-31fe-94e5-a56e9e5fad32.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     26506
IP address blocks:        2607:f4e8:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3a:68:4c:a6:44:cc:04:78:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=ce0ad073-964f-4848-b053-abbd648505c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e7:dd:bf:f1:42:49:3e:e6:78:55:b5:2d:0e:
                    88:72:dc:bf:19:59:3a:cc:93:30:50:85:ef:07:8b:
                    38:97:03:a5:56:bc:73:26:f0:1e:62:6e:b3:82:a1:
                    ae:33:ec:e2:ec:8b:5f:08:10:b4:bc:10:fa:f3:04:
                    b9:0e:41:5c:af:a1:5f:c0:5c:8d:e9:cb:3c:ca:ab:
                    76:3c:ce:9e:17:27:4c:4c:3e:58:af:35:25:1e:65:
                    26:b3:3a:9a:8a:ad:43:f0:78:5c:30:cc:2f:a1:00:
                    86:3f:61:0d:e7:be:ee:d2:53:9e:47:30:cf:b5:1a:
                    7c:7b:61:0f:ef:a8:b8:32:3d:6b:16:f2:9b:a6:13:
                    a3:bd:86:1a:fb:83:59:7a:b8:86:fb:e2:75:5a:c1:
                    b0:8b:0b:31:e7:91:9f:8f:b3:54:7a:36:ed:6e:a8:
                    8c:67:e6:f4:1e:26:85:b9:6c:53:23:97:e2:34:2e:
                    c1:fd:c2:a3:62:c0:24:9a:90:ab:9b:3c:66:27:68:
                    6b:75:9e:8f:87:0b:72:4f:91:13:b5:7d:6c:46:cb:
                    e6:fb:2a:cc:1e:11:20:ca:5c:0d:fa:c6:34:cf:63:
                    04:45:71:29:9b:a2:dc:6e:ba:3b:86:e4:2d:02:c7:
                    54:73:0a:de:04:26:ff:aa:2a:65:60:4a:0e:7c:34:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:96:FB:B3:57:81:85:3D:62:28:8C:D1:4D:F6:CD:5A:9A:56:A7:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7ff37f4e-7977-31fe-94e5-a56e9e5fad32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:07:0e:4e:07:0e:95:8d:04:90:cc:5d:af:23:cf:cb:93:56:
         ee:ee:52:ad:d7:70:53:bc:14:90:91:b3:6b:30:95:e8:96:76:
         e0:a6:15:48:7c:94:69:fa:2a:e8:52:cc:3e:b1:1f:ed:26:2a:
         48:33:4b:29:c0:61:3e:b7:f8:97:a3:2a:df:4a:db:ae:5f:14:
         64:50:31:91:32:90:6d:bb:82:ec:3f:77:29:38:60:fc:26:7a:
         26:ba:b1:a6:30:c4:8c:91:73:cb:24:96:82:2e:5d:32:b0:f3:
         74:e9:37:48:d6:a0:70:84:3f:2f:67:e1:7c:31:74:fa:51:68:
         02:c6:0f:00:20:ea:61:fc:c7:25:d3:13:a5:25:46:70:17:23:
         81:4c:a3:79:a4:e6:66:d8:0f:ab:f5:12:6b:12:7f:b1:03:7f:
         2b:e0:83:7e:ac:b2:97:b0:10:f9:72:ed:ea:f1:ea:8b:a5:eb:
         d1:c4:05:27:32:0a:30:f2:ee:ee:7c:c7:6a:e7:04:77:25:1d:
         22:9b:71:9c:14:b9:11:80:4b:09:49:1d:a9:bc:9d:b9:9e:c1:
         b4:a4:56:5c:9f:2d:83:06:e9:92:2d:6d:54:28:a5:4d:25:f5:
         7f:e6:16:fe:c1:b9:21:ad:ba:08:e3:61:71:38:4b:10:9e:5c:
         6f:7a:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:43:20 2025 by rpki-client