Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa
File:                     cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa (raw, json)
Hash identifier:          wnHPDHIXUi27L2dwwXpMuMW9RR8AvTdM6B4C5eOhk3A=
Subject key identifier:   27:5E:92:E2:15:34:8C:91:A2:35:68:5C:45:55:E2:EC:D6:93:D0:15
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584A6C55CCEFA9823231CE63AFC0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     36829
IP address blocks:        2602:fc64:ca10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:cc:ef:a9:82:32:31:ce:63:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=18c7d0cd-7341-4ce1-8197-683365cca1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:86:2c:cb:b7:b8:e6:cc:c2:14:6b:88:94:
                    1a:ba:61:04:b2:71:b0:0e:0a:63:35:5a:cd:0d:6e:
                    43:10:20:c6:60:a0:04:d5:31:89:9e:e5:dc:28:43:
                    a6:40:48:e1:46:aa:19:be:e0:8f:43:6d:a9:8d:94:
                    87:f8:4d:11:7a:ca:da:de:0c:6e:6c:fc:32:90:57:
                    45:64:0c:25:8d:4b:d6:96:8c:de:a3:c4:e1:cc:97:
                    ed:09:3b:9d:b9:bd:be:9e:af:74:76:a2:6e:83:66:
                    85:5b:d4:4e:30:08:46:41:b5:73:95:fb:f9:12:02:
                    11:d8:c3:98:76:ac:50:f9:7e:0b:d8:38:6e:3c:8b:
                    36:47:24:c2:2c:bb:54:a8:f0:e9:70:96:e9:ad:7b:
                    46:9e:30:b6:f9:c7:36:25:25:a5:35:42:55:2e:6e:
                    f7:66:e9:1a:64:75:25:ee:e2:d7:b0:0d:5a:a9:e0:
                    6d:ce:2d:05:9e:5b:1d:6c:6f:32:a9:99:a1:20:cf:
                    21:b1:de:4f:4c:a0:fc:8a:d6:19:68:81:0b:fd:f5:
                    9d:99:32:20:e1:26:89:c2:c1:51:8e:fa:d4:93:13:
                    e0:6e:a9:ec:65:26:2f:ff:92:36:12:e0:6e:67:48:
                    61:6d:1a:9e:54:ff:fa:cb:a6:90:36:00:70:cc:41:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5E:92:E2:15:34:8C:91:A2:35:68:5C:45:55:E2:EC:D6:93:D0:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc64:ca10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4f:13:3c:e3:98:9c:fd:4f:40:02:e4:fc:e8:7d:06:bd:e5:
         8c:46:71:79:ee:44:ea:a2:b4:ee:6b:54:b8:2f:56:c0:cc:30:
         95:2d:bf:54:d7:fb:04:62:68:c0:81:b4:ee:c9:5e:4e:f2:11:
         dd:e7:1d:ee:b5:2a:8f:f3:d5:82:ca:16:74:47:40:26:8a:21:
         dd:84:ef:93:2b:c8:de:a5:42:e4:5b:b7:32:ba:5d:42:7b:4d:
         c7:9e:ee:4a:63:40:09:ce:ba:1f:82:41:6a:75:5b:c5:39:ee:
         4e:fd:d6:30:30:dd:f7:54:a6:6c:fc:dc:b1:12:7b:a2:30:ff:
         b4:eb:bd:22:0e:e3:ed:89:9b:66:d0:2c:78:3c:07:c4:98:c9:
         d9:b4:09:84:d7:7f:90:4a:18:fa:49:d6:dc:9e:6b:81:18:43:
         39:fa:f3:d1:ee:8b:7a:0f:d6:0d:a3:e3:2a:21:a1:45:cb:22:
         20:13:ce:8b:ca:b6:f2:e7:d1:a2:6e:d7:af:8b:e4:ce:68:6d:
         f9:d9:f6:af:ec:0e:18:46:4f:84:73:85:3c:6a:ab:85:03:61:
         02:0c:be:11:16:35:1f:2a:79:7b:b4:c8:02:ec:c6:91:de:6d:
         b2:d2:7e:5b:9a:6c:ca:b7:68:37:88:fb:45:33:69:86:6b:1e:
         e3:48:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:14:07 2025 by rpki-client