Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/c48a744b-2c16-3bd0-bb18-cc341dd2f886.roa
File:                     c48a744b-2c16-3bd0-bb18-cc341dd2f886.roa (raw, json)
Hash identifier:          l/FE8VkOfqcPPj5UkZKkAQUtUUU9IjYIQI3ZteJzus0=
Subject key identifier:   10:F7:45:45:0B:98:65:EB:74:BB:4B:BE:FD:D2:BA:B3:EE:D2:E0:61
Certificate issuer:       /CN=1073152b-033a-4ad5-ba98-45c1d65704d4
Certificate serial:       010D0C9F4328584929E3D14E5EDEA10D63942B80
Authority key identifier: AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/c48a744b-2c16-3bd0-bb18-cc341dd2f886.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     30700
IP address blocks:        2602:f7ee::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:d1:4e:5e:de:a1:0d:63:94:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1073152b-033a-4ad5-ba98-45c1d65704d4
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=1d39e71f-5013-4626-a8e5-ddf1b9ed0a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:13:50:bb:90:04:a7:83:eb:8a:7c:80:7c:5b:
                    19:ad:cc:37:4e:65:d3:42:24:ec:f4:05:e5:7f:f0:
                    f8:e1:ca:66:44:8c:92:8c:24:49:5b:d4:4b:95:2f:
                    70:a5:b4:d9:36:1c:c7:81:02:bc:4a:90:7f:41:3d:
                    a1:21:e3:e6:23:c2:66:38:09:3a:a7:74:a7:24:34:
                    bc:1a:c7:8a:cf:e9:72:a0:94:de:08:0b:80:64:b4:
                    d4:f6:30:39:41:e1:ef:d4:a6:70:c7:62:c8:4f:b4:
                    a1:b2:ac:9d:31:8f:09:6a:a4:c4:fb:ee:fb:d0:c1:
                    dd:a1:f5:69:11:e1:97:89:c5:b0:f3:11:81:a9:85:
                    83:79:9b:7a:8d:d6:24:2a:85:c8:2c:bc:a4:cc:4f:
                    48:5d:c6:80:11:7a:e7:78:26:38:5e:de:c4:70:68:
                    83:de:ff:8f:03:3f:b3:89:f8:0b:4a:84:e5:52:3f:
                    d0:c9:12:dc:ce:d3:8b:94:c6:21:c5:76:d8:b8:f4:
                    bf:83:c8:e6:ee:7e:b7:8f:bc:ce:32:e7:04:88:79:
                    a3:1a:b9:9e:37:5b:77:6d:7f:04:53:fd:7e:51:b9:
                    94:12:5a:b1:c4:5b:28:6c:e3:53:1f:4b:54:f1:cb:
                    58:b8:29:92:60:f7:e4:da:72:d8:0b:da:68:ed:38:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F7:45:45:0B:98:65:EB:74:BB:4B:BE:FD:D2:BA:B3:EE:D2:E0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/c48a744b-2c16-3bd0-bb18-cc341dd2f886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl

            X509v3 Authority Key Identifier:
                keyid:AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ee::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:38:7b:cb:d6:2c:6a:0c:ed:a2:bf:bc:57:b8:e2:29:b7:78:
         bd:8a:00:b6:9f:50:eb:06:d9:dd:28:f7:70:f8:d3:e1:ed:b7:
         7f:7a:eb:d9:1a:a6:09:ef:6b:74:dc:da:4b:70:07:82:ef:7f:
         4f:48:ba:b0:4a:cd:3a:4a:ed:fe:b1:2c:c0:ce:aa:51:c3:b8:
         8b:60:21:1a:ae:ea:d8:93:5e:03:00:f8:6a:89:e9:33:0b:96:
         4d:84:aa:47:71:1e:62:59:b8:7a:18:8c:89:6e:e5:6f:7e:ce:
         96:75:48:b6:26:08:c4:a2:b8:4f:22:75:d8:81:37:48:b8:ce:
         37:cd:88:b4:68:21:24:5f:d2:54:c7:23:b9:aa:c0:35:70:32:
         1e:da:14:23:6f:35:49:77:cc:a7:18:46:39:1a:c4:1f:c8:79:
         40:be:0c:e1:f7:b3:a5:56:41:6e:68:11:11:4a:13:a9:9e:05:
         0a:85:05:10:2c:ef:44:62:f7:f6:40:5c:1c:b2:f1:a3:f2:fe:
         86:88:7e:43:f8:5d:f3:6c:9b:21:e4:51:72:0a:ce:bc:90:60:
         83:86:83:4f:25:d1:b2:15:8d:af:11:24:0d:3f:34:9c:a5:fd:
         11:00:3d:26:be:9e:94:40:2f:06:85:72:47:5d:be:99:76:71:
         bd:31:0c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:27 2025 by rpki-client