Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/78c7493a-cd12-3047-9193-6d5e910f8191.roa
File:                     78c7493a-cd12-3047-9193-6d5e910f8191.roa (raw, json)
Hash identifier:          u3ryvuJfyGCRVWcNzboedpYlBs/PR0cDtpIDIhxTObs=
Subject key identifier:   4C:46:AD:33:FE:F6:E5:6D:DE:7A:5B:10:7B:62:B0:85:82:B1:63:E7
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584A6290D00398798C9A9904BE64
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/78c7493a-cd12-3047-9193-6d5e910f8191.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     401012
IP address blocks:        2602:f956:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d0:03:98:79:8c:9a:99:04:be:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=f0553eac-f554-48a4-8686-174474260b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:6f:5e:d6:28:44:c0:45:8b:8b:d2:cc:e9:
                    3a:0e:7a:18:39:7a:a3:7a:fa:5c:89:e9:77:99:d0:
                    64:16:76:eb:34:5a:02:99:92:4d:95:60:2c:04:73:
                    82:d0:5e:88:b2:7f:66:64:a1:85:b4:ff:ee:07:c9:
                    b2:32:ff:1f:4b:02:03:5f:11:e1:58:65:e3:a4:e1:
                    80:cf:89:ac:2a:c2:bd:e3:db:9e:60:d0:a6:5e:0a:
                    ae:f3:5d:a6:a8:f8:be:bd:3c:c7:e3:92:fc:d4:0c:
                    b1:6f:6e:0c:0b:8d:8f:87:b2:80:27:a4:5e:61:1c:
                    48:f7:ae:1b:d2:ac:7b:65:38:1b:b2:a5:14:e2:ef:
                    02:60:1e:ff:07:51:f5:b6:f8:2e:33:31:6f:0b:2a:
                    8a:e4:c9:41:bc:8a:88:20:40:06:d1:08:50:38:16:
                    52:44:70:88:fc:0d:4a:bd:95:50:36:27:16:f2:40:
                    ea:90:ac:0d:c9:f0:8e:48:8a:3d:e0:ff:1a:79:17:
                    cc:94:d2:23:a5:a3:a5:be:d2:ce:85:94:13:7b:ff:
                    97:7b:be:b3:14:b6:50:a0:0a:67:2b:ce:fe:1c:50:
                    3f:5a:0e:4a:0f:38:de:2f:12:f6:d5:53:93:cb:a5:
                    8e:67:5f:00:95:b0:75:c4:f2:10:84:d7:d2:cd:b7:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:46:AD:33:FE:F6:E5:6D:DE:7A:5B:10:7B:62:B0:85:82:B1:63:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/78c7493a-cd12-3047-9193-6d5e910f8191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a2:6c:e8:f3:6c:98:1b:3e:7a:4b:90:0d:e1:ba:d9:93:93:
         c3:7e:7a:48:dc:0d:e0:76:1f:79:c3:55:59:67:09:6b:09:7e:
         37:12:96:57:39:7c:24:b9:47:a3:a1:2b:94:6a:c0:32:63:2c:
         70:95:67:6b:49:9f:a2:f8:76:12:12:cb:53:df:51:54:4e:72:
         48:d4:1f:69:ea:8d:41:6b:df:2f:fe:1b:c7:ad:df:aa:f0:df:
         64:43:45:f5:85:bb:d8:9f:9b:0f:46:75:fc:d7:93:37:cd:da:
         58:91:98:f9:e7:0c:39:f8:70:66:bd:1b:1f:0a:f9:65:4e:dd:
         ce:08:79:26:a2:84:15:48:15:94:2d:4b:8a:ea:6d:62:ee:82:
         c3:b4:65:33:78:b2:9f:8d:7d:61:88:f6:12:7d:5c:bb:09:24:
         08:1d:89:f0:1a:a0:e1:ad:f6:0d:88:6c:18:bf:3f:f3:18:6a:
         0f:b0:54:92:01:5a:96:23:1e:72:f8:79:6e:9f:ff:06:ce:4f:
         e7:74:b7:6a:ca:17:93:e3:88:77:8e:ef:10:78:af:e7:65:13:
         63:6e:38:75:d8:94:52:07:05:26:97:16:a6:45:ef:13:9e:d1:
         8e:46:32:ce:cf:32:60:3d:a6:95:f9:15:ed:92:fc:89:ba:90:
         e6:18:9d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 00:26:08 2025 by rpki-client