Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/7cfb82e4-1707-303a-b880-616f3a50ce84.roa
File:                     7cfb82e4-1707-303a-b880-616f3a50ce84.roa (raw, json)
Hash identifier:          yZeI+8FyPSA+Fm4w633bLWPdhJgshAB4eKNyUVigieo=
Subject key identifier:   49:58:84:E9:B7:FD:46:F2:58:6B:6B:0E:3E:94:78:92:66:9E:CD:4C
Certificate issuer:       /CN=0dbbe9e5-6fcf-4701-8305-bd19ac481b9e
Certificate serial:       010D0C9F43285849244E6A08FE5BFA490A5CBB80
Authority key identifier: 29:47:C6:13:66:F5:EB:98:3A:1F:B6:92:70:CB:89:12:47:4B:25:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/7cfb82e4-1707-303a-b880-616f3a50ce84.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     401351
IP address blocks:        2602:f7f7::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:6a:08:fe:5b:fa:49:0a:5c:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbe9e5-6fcf-4701-8305-bd19ac481b9e
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=b9f8a666-ef40-4218-afce-d7ce102c9b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:01:52:db:af:39:27:71:b8:58:f1:f8:f7:f1:
                    9b:4d:71:07:49:4e:6b:06:eb:ba:f6:89:47:f8:88:
                    7b:2c:fb:1a:1f:c9:2e:37:1b:4d:d3:47:74:e3:e4:
                    6b:9e:1d:9b:43:f6:4e:f8:1d:c4:45:29:66:c0:ed:
                    09:d1:2b:e3:76:87:3d:89:37:18:94:b6:37:23:25:
                    6c:0e:9c:2a:29:18:c1:1a:ef:c8:a2:8c:53:f2:9e:
                    78:39:b2:c3:f0:1c:ce:ff:98:50:a6:56:f6:e7:48:
                    e9:a6:fa:e3:0b:19:2c:7b:1b:57:8c:ce:4b:6b:37:
                    62:06:d1:45:3e:cd:1e:fd:cb:6a:53:48:3b:21:51:
                    50:a2:bb:76:ca:a3:42:59:5b:c8:94:31:71:f4:de:
                    27:48:22:3b:f0:b4:36:c0:df:13:75:9a:93:7e:e7:
                    ec:5f:71:e9:25:c8:32:90:3a:a0:6f:55:a4:58:33:
                    5b:5a:93:c3:02:33:54:f4:f9:b2:19:c5:bf:62:89:
                    8f:77:e3:37:4b:b7:60:e6:ad:96:54:3a:d1:22:bb:
                    47:6d:93:22:fc:23:f4:04:62:3b:d1:39:25:de:34:
                    ad:7d:01:22:25:af:d6:48:3b:02:5a:02:ba:c1:a9:
                    20:54:71:8e:d5:88:6c:5b:a0:8e:58:85:bc:86:bd:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:58:84:E9:B7:FD:46:F2:58:6B:6B:0E:3E:94:78:92:66:9E:CD:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/7cfb82e4-1707-303a-b880-616f3a50ce84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.crl

            X509v3 Authority Key Identifier:
                keyid:29:47:C6:13:66:F5:EB:98:3A:1F:B6:92:70:CB:89:12:47:4B:25:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7f7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:17:ef:64:78:f3:5b:71:48:6b:ce:ab:f8:02:d4:ec:28:39:
         e0:c4:bb:a7:44:37:84:f0:44:d7:a1:eb:b8:c8:64:14:c6:fe:
         8e:d6:2f:91:fd:62:69:1a:6e:04:52:a0:91:87:68:9e:96:14:
         29:5e:96:16:fe:aa:44:99:ec:ef:3d:a5:33:b3:0f:30:0f:33:
         b3:63:49:80:1b:16:11:72:c9:3b:64:fb:c0:f4:d5:cd:b1:9d:
         f6:a6:bf:3a:d0:1f:67:a2:bb:a1:06:62:79:a0:04:72:66:20:
         24:63:b5:92:24:7d:4f:0f:17:2d:bf:0a:8c:48:19:dd:eb:66:
         57:dd:02:17:45:d4:5e:b6:2a:29:38:3a:74:2a:16:5f:12:d6:
         ad:ea:9f:ed:e9:ff:e6:f3:88:54:41:a7:e2:aa:4e:51:9e:55:
         7e:ef:06:32:29:88:09:b2:06:eb:ab:e8:ef:09:f8:fb:42:9a:
         28:b2:c1:d6:74:06:9a:47:70:79:17:20:0c:e0:c8:d9:00:a1:
         f5:74:ad:65:f0:10:b6:23:45:ef:68:06:b8:93:fc:06:13:5e:
         c8:60:86:35:af:dc:52:f5:f5:0d:63:78:d9:8a:2c:58:81:e1:
         74:2e:15:c4:01:35:cd:75:c1:4c:59:e7:c5:a3:bc:c3:4e:2a:
         d6:ed:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:00:15 2025 by rpki-client