Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/26866edf-d023-3ea2-b0da-da31f2948c0a.roa
File:                     26866edf-d023-3ea2-b0da-da31f2948c0a.roa (raw, json)
Hash identifier:          XSb8MY2T9718nVwjwk7laOT1PF/kUg4M/vXv2gv8ZE4=
Subject key identifier:   8D:51:D7:E8:EA:CA:FC:52:97:38:8E:87:ED:96:9A:54:C7:4F:56:4A
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F432858496585D3A6575FA0229C90D1C0
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/26866edf-d023-3ea2-b0da-da31f2948c0a.roa
Signing time:             Wed 02 Apr 2025 21:40:07 +0000
ROA not before:           Wed 02 Apr 2025 21:40:07 +0000
ROA not after:            Tue 01 Jul 2025 21:40:07 +0000
asID:                     3819
IP address blocks:        2602:f69a:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:85:d3:a6:57:5f:a0:22:9c:90:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Apr  2 21:40:07 2025 GMT
            Not After : Jul  1 21:40:07 2025 GMT
        Subject: CN=8c81ddcb-fd3b-44eb-bb3b-c406b729ffb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:ca:16:22:bf:81:c4:bb:df:7e:30:75:57:
                    8f:da:29:ba:ad:d4:99:03:aa:db:13:21:15:75:39:
                    19:89:30:77:e8:81:ce:49:50:75:e8:99:82:95:ed:
                    87:29:00:a4:a2:93:9b:e7:fa:83:bd:12:8b:e4:2d:
                    fb:f0:2d:63:d6:8c:3a:3f:f1:c8:bd:de:a1:0a:4f:
                    b3:77:86:1f:9d:36:bc:98:e0:35:1d:a7:fe:60:d5:
                    34:7b:9b:e8:03:89:51:7f:05:7c:bb:38:cb:05:0d:
                    3c:5d:93:81:6a:52:9c:16:be:ec:0e:a9:40:b1:25:
                    dd:2b:90:6d:1e:73:c7:e7:33:00:ab:06:32:a4:de:
                    7a:65:85:a1:6a:4f:71:b0:9c:7f:e7:b8:02:06:3d:
                    fa:18:ba:56:59:46:f1:8a:ad:6b:02:8d:79:39:04:
                    28:8a:8d:1c:fc:08:ec:47:c1:8a:d3:77:9f:e4:db:
                    45:62:07:37:e8:90:98:5d:6d:a5:1b:41:9e:51:4c:
                    6a:c1:78:ae:97:22:28:6d:ab:f9:e8:49:e2:c8:84:
                    28:9c:85:35:6d:ed:a9:7c:f4:a8:1d:a0:3a:da:db:
                    22:15:ee:e2:cc:99:a5:a8:18:23:3d:5d:e9:52:e8:
                    6c:c6:d9:e8:c2:94:06:d8:05:f6:b2:e3:ad:21:66:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:51:D7:E8:EA:CA:FC:52:97:38:8E:87:ED:96:9A:54:C7:4F:56:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/26866edf-d023-3ea2-b0da-da31f2948c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:94:d0:69:30:ce:e3:9a:4b:1d:0a:07:62:c4:16:77:9f:12:
         17:13:55:e1:39:4a:41:5f:71:0b:c7:1b:c5:0e:fb:c3:ff:1f:
         f3:b5:f8:9a:3f:58:b1:d7:ff:42:3b:df:75:1c:fa:49:9a:f3:
         71:70:d8:40:81:3a:19:d1:a0:45:c4:67:ce:28:d2:f1:da:4a:
         7c:80:f3:3b:36:af:eb:bc:94:a7:f5:40:f8:42:75:61:15:bd:
         4b:1b:1c:8e:c6:18:1f:d0:b0:8a:60:52:b9:6e:80:18:68:39:
         00:a4:75:99:90:93:7c:69:c0:d8:60:99:73:fa:4c:54:ea:0e:
         36:dc:6b:05:a6:fa:91:dd:9a:ec:e3:7b:49:84:dc:f2:16:88:
         55:e0:1b:ba:be:be:f9:03:e1:4c:0a:18:97:42:73:58:04:f1:
         a4:30:ef:31:bf:5a:79:77:c8:d4:cc:7b:27:a1:fa:1f:9f:10:
         cc:92:9d:49:e2:a3:9d:ba:df:1a:5b:e3:a4:44:4a:87:22:10:
         ab:89:af:3b:4c:76:a2:10:21:43:24:73:3d:3d:2f:ea:6d:74:
         5f:7c:ba:00:67:4f:8c:29:45:51:bd:20:6c:f9:dd:7a:7b:37:
         58:99:e6:cb:a3:bb:df:ad:50:67:05:9d:86:df:b1:a2:20:76:
         fd:ee:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:12:15 2025 by rpki-client