Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/73d5bf75-edcd-30c4-abbf-80265ca1c9e9.roa
File:                     73d5bf75-edcd-30c4-abbf-80265ca1c9e9.roa (raw, json)
Hash identifier:          NvTSCN/zHBUgqHV92Btn8M5t5Lr7MidJCur4FI6OH3Y=
Subject key identifier:   99:80:9C:F5:59:ED:0F:94:3B:7F:1D:8B:A1:A1:09:EE:7F:14:CE:F3
Certificate issuer:       /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial:       010D0C9F4328584A6825F5813033B0B98BF83B80
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/73d5bf75-edcd-30c4-abbf-80265ca1c9e9.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     8003
IP address blocks:        2602:f7a8::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f5:81:30:33:b0:b9:8b:f8:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=9ae721ef-1482-416f-9bbe-79dd438f1c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:24:6d:53:34:4e:11:8c:dc:d7:e4:df:b9:
                    ab:0b:ad:06:65:9e:ca:19:de:0f:6d:74:66:08:7a:
                    54:dc:17:df:95:9a:eb:69:f6:db:89:89:ec:86:67:
                    08:f5:23:5e:8c:19:c1:c5:73:7b:b8:ff:73:ef:2e:
                    d6:36:e3:cd:56:53:b6:c5:1c:05:d1:11:15:83:05:
                    34:df:b3:81:8f:4f:2c:34:ef:eb:b5:9c:b3:fd:c5:
                    53:8d:70:a4:5e:61:fd:b5:b4:ae:77:6f:8f:81:94:
                    1a:9a:4f:2c:37:92:48:2a:d4:e4:f8:01:e4:e7:20:
                    3c:d7:e4:5c:76:ea:9c:83:3d:a9:ab:f9:15:c9:4b:
                    e8:87:b4:1f:94:e4:4d:e2:5e:e9:7f:7f:40:d4:9d:
                    b8:34:54:97:6a:54:38:95:06:82:5e:85:b5:e8:c6:
                    cd:d7:21:59:06:85:79:a6:5b:4d:c8:dc:7e:49:33:
                    da:59:92:c6:4b:6c:94:ed:9b:24:8c:d0:dc:d2:c9:
                    bf:29:c5:09:5b:95:db:0c:6f:3c:d5:f5:48:85:6f:
                    ec:94:96:29:02:6f:7b:96:d7:aa:fe:3f:c0:5c:ad:
                    a6:68:5b:ae:e0:9a:0a:d1:5c:fd:d2:83:53:a0:3c:
                    27:d0:5c:88:28:cd:e2:25:20:ae:cd:14:2d:e5:ef:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:80:9C:F5:59:ED:0F:94:3B:7F:1D:8B:A1:A1:09:EE:7F:14:CE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/73d5bf75-edcd-30c4-abbf-80265ca1c9e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl

            X509v3 Authority Key Identifier:
                keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:5c:c8:1e:a3:43:7d:da:5f:a5:f6:e3:22:12:1e:cf:d2:19:
         31:09:ee:d9:c9:a5:20:05:f1:a9:f8:e2:15:2b:f9:77:68:db:
         14:4f:20:67:3c:95:56:01:67:a8:b9:de:de:ec:30:0c:4c:e6:
         3e:c8:91:8f:29:f7:49:9b:8f:60:67:d3:50:32:0a:7d:71:87:
         8d:fe:ea:0f:f0:a7:0a:6d:b1:0f:16:32:4d:ff:be:3f:f6:2a:
         a7:c3:3e:97:18:ee:ad:0b:50:4d:fe:80:e9:21:5d:da:76:be:
         c0:dc:38:56:89:ff:35:d2:ff:11:a5:90:96:9f:05:ab:15:34:
         e8:16:b6:e0:4e:f6:1c:2c:e7:9d:d0:94:30:6a:bb:da:2a:2b:
         5c:3c:42:e5:a3:16:f8:04:de:89:3f:d2:5e:33:78:11:b4:e8:
         f1:5a:c2:20:07:14:e1:ed:fb:22:27:a2:6e:db:ff:55:87:8c:
         50:4a:0f:8c:f6:1f:a1:1f:52:48:6a:b3:2c:36:91:23:a7:24:
         87:3b:4b:af:87:1c:8a:30:b8:7f:70:51:bd:8a:8f:b8:95:a7:
         91:8a:ce:c8:94:cc:bf:1e:1d:33:31:87:fc:ef:0d:6f:37:3d:
         89:b2:a2:56:1e:7f:92:96:78:67:24:f3:6c:4c:6c:4c:ca:1f:
         75:90:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 01:01:55 2025 by rpki-client