Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa
File:                     48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa (raw, json)
Hash identifier:          K+DVfIN3byK5sIj/kwEeszIn8RuUmddNG8NUBUEEM6Y=
Subject key identifier:   23:EA:FE:DF:55:F8:05:8D:39:D1:BC:2C:E1:78:D6:5D:A9:42:E7:29
Certificate issuer:       /CN=e7dfb913-c249-4fb1-816b-a01434dbe079
Certificate serial:       010D0C9F4328584921840563B909C9FBF8C0A940
Authority key identifier: 28:06:C8:9F:CB:16:D7:4B:E9:C4:87:26:1A:6E:F5:F6:62:5A:5F:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     26533
IP address blocks:        2602:fa76::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/e7dfb913-c249-4fb1-816b-a01434dbe079.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/e7dfb913-c249-4fb1-816b-a01434dbe079.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:05:63:b9:09:c9:fb:f8:c0:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7dfb913-c249-4fb1-816b-a01434dbe079
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=626fc18f-ea31-44b4-95fe-e7a63cad4384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c0:5f:bf:04:7f:1a:7c:ee:01:dd:cd:a2:2f:
                    ef:f2:3a:fe:46:0d:32:1b:0f:9f:db:52:c9:93:9f:
                    a2:51:a0:ed:d3:cc:be:89:8b:7f:16:bb:21:46:32:
                    bf:41:6e:17:32:f8:00:65:62:c0:94:e1:28:d0:34:
                    6b:7e:bb:32:aa:1e:23:6e:ad:0c:c0:07:c8:f3:7b:
                    d1:ae:0b:e4:bf:1e:b8:18:d9:f5:5c:3c:28:41:c1:
                    5c:71:9e:2b:38:ed:ce:0d:be:3f:59:9a:b7:39:65:
                    0a:3d:a4:bd:07:6d:44:8c:89:da:85:42:43:fd:29:
                    b2:ce:23:66:a8:f8:7a:dd:6f:49:38:57:e5:69:02:
                    95:7d:33:b2:2f:83:fb:91:35:e8:2b:b7:b3:96:b5:
                    94:d0:53:df:2d:0d:f0:2b:96:2d:fc:1d:68:73:64:
                    2d:af:c0:4f:2a:45:02:32:d6:f0:c6:3d:01:96:18:
                    39:59:fc:8a:1d:51:a1:54:e8:c0:85:6b:1d:73:4b:
                    ee:8d:cf:12:27:5c:34:ae:ff:3d:42:67:95:2b:8b:
                    fc:dd:63:68:f9:35:e8:ad:8e:3b:c7:df:fd:ee:09:
                    a1:43:5c:ab:36:79:a9:24:2a:cf:40:6b:4a:83:d0:
                    5e:31:62:6e:51:9b:ed:8a:80:59:9c:be:c3:97:32:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EA:FE:DF:55:F8:05:8D:39:D1:BC:2C:E1:78:D6:5D:A9:42:E7:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/e7dfb913-c249-4fb1-816b-a01434dbe079.crl

            X509v3 Authority Key Identifier:
                keyid:28:06:C8:9F:CB:16:D7:4B:E9:C4:87:26:1A:6E:F5:F6:62:5A:5F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa76::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:37:42:ba:db:3f:eb:ed:09:bc:2e:1a:b9:9b:a6:02:b0:
         f2:20:2c:e5:95:3a:41:0d:9b:3a:c5:08:e4:52:f2:f9:78:8e:
         22:8f:c7:6f:1a:96:ce:66:af:a8:32:23:25:f4:a6:26:f6:72:
         88:f0:98:06:6e:75:b8:84:31:98:46:16:d7:f1:81:db:c9:44:
         c3:ab:6e:be:a1:2c:77:52:e6:78:e8:be:15:7c:3d:7e:63:9f:
         32:55:0d:e0:10:ba:f4:38:80:5e:d5:cc:c9:22:f5:cf:ad:37:
         d8:90:87:c1:cd:09:58:f1:db:5e:d9:f6:2b:b8:c6:e9:26:5c:
         24:6b:06:8f:ce:cc:fe:53:69:1d:c0:44:94:93:34:94:3a:88:
         5e:a7:91:41:aa:e0:ae:02:6e:9b:00:b2:1d:b5:71:7a:06:81:
         c7:3d:0d:3e:ac:90:5a:ce:fa:c8:2c:82:5c:00:b9:a7:70:d1:
         c0:a7:a2:92:99:73:7a:94:ff:e8:c6:b6:1a:48:4a:3e:76:f6:
         45:b1:c1:3e:37:6e:34:7f:e2:b4:2d:fa:87:89:01:2c:5b:5c:
         94:65:0c:cb:78:1e:fe:a0:af:76:95:d8:07:a7:71:9b:fe:a4:
         de:ee:2f:41:29:bb:b2:f8:72:18:01:23:a5:d6:6b:9b:33:b0:
         b3:7f:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:16 2025 by rpki-client