Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/37e97c8a-11fc-3284-a57a-a9f09d472c1c.roa
File:                     37e97c8a-11fc-3284-a57a-a9f09d472c1c.roa (raw, json)
Hash identifier:          PF2jKjKD6Nrh8PfI4/65k8mM0ZIMefJy9Uu1QJ5eV6o=
Subject key identifier:   52:45:42:60:C7:B1:3D:F0:3E:9A:53:D9:09:81:DF:8C:16:8E:1F:76
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584965813D1240FE8F31AA781A40
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/37e97c8a-11fc-3284-a57a-a9f09d472c1c.roa
Signing time:             Wed 02 Apr 2025 21:30:52 +0000
ROA not before:           Wed 02 Apr 2025 21:30:52 +0000
ROA not after:            Tue 01 Jul 2025 21:30:52 +0000
asID:                     3819
IP address blocks:        2602:f69a:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:81:3d:12:40:fe:8f:31:aa:78:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Apr  2 21:30:52 2025 GMT
            Not After : Jul  1 21:30:52 2025 GMT
        Subject: CN=d41b7556-437c-423d-bbbd-07853fea3b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:d4:0d:84:1a:d5:0a:25:ed:55:7c:b5:80:
                    35:e9:3a:a9:c1:99:5b:5c:dc:04:f0:de:a2:f4:f7:
                    bf:96:7f:96:64:ce:8f:e1:8d:d3:cb:1c:e8:e7:70:
                    c0:2e:89:3c:b9:6b:9a:75:9c:d3:f0:cc:f3:9b:a7:
                    29:4d:26:21:80:09:83:bd:21:0f:67:e0:b8:c0:45:
                    75:aa:e2:c7:a4:7e:f8:1d:64:46:4f:9a:ed:a6:14:
                    6b:49:77:bb:5b:dd:07:f2:60:c5:bf:59:21:0a:2e:
                    0d:5f:cf:14:fe:65:48:5f:18:77:2d:f6:c2:04:5f:
                    0b:08:fa:fc:2a:30:36:c3:9f:47:24:56:35:98:d4:
                    b5:cd:af:4c:d1:08:4d:57:4d:01:da:93:b8:4e:e6:
                    7d:04:ca:1a:c7:ef:bc:f7:7c:56:7f:40:b7:22:24:
                    9a:90:83:3b:b1:5d:9a:44:b1:f3:6f:f0:84:c8:c6:
                    b5:a5:de:91:61:60:38:d9:13:19:4a:b5:9d:9b:c0:
                    2c:3f:89:d8:a2:6e:50:d4:b3:8b:71:f5:6b:83:ce:
                    59:1b:1c:f4:ae:bb:76:db:6f:5a:3f:7c:6f:8c:1e:
                    3d:b8:39:33:59:f0:eb:65:a4:09:bf:17:51:06:3f:
                    1b:6a:5a:5a:66:da:e6:f0:a0:38:4a:12:35:1a:07:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:45:42:60:C7:B1:3D:F0:3E:9A:53:D9:09:81:DF:8C:16:8E:1F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/37e97c8a-11fc-3284-a57a-a9f09d472c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:55:53:e2:0f:ab:aa:31:8b:1f:50:b4:49:f7:fd:0c:46:
         6c:75:a0:d3:8b:2a:4f:6c:5a:af:ff:21:d2:44:1d:50:64:f3:
         39:89:e0:7f:c6:f2:93:7d:67:cb:07:fc:4c:d5:5d:52:4e:ca:
         6a:71:b5:d0:33:b5:cc:82:c8:62:42:59:83:4c:d5:59:2c:c3:
         44:f7:b0:12:4c:5a:7a:11:71:7f:30:60:75:b0:c7:e8:52:d9:
         77:04:3f:89:c5:9d:81:ea:5c:40:63:8a:3c:5c:c3:a5:ea:ee:
         a3:13:8f:c5:06:2e:d6:b2:22:fe:5c:ca:58:f1:33:dd:47:0e:
         c8:5c:cd:68:3f:9b:7c:5d:59:87:6b:23:19:5a:68:fd:b1:e4:
         4e:ef:50:a6:1b:58:24:0a:9f:6a:4d:fe:f0:df:63:6f:a0:04:
         ae:7a:33:19:11:23:1e:8c:48:90:ed:ea:85:0d:34:ed:ed:73:
         7a:31:49:ad:0d:33:2d:11:a1:8e:f6:77:90:78:91:21:a3:73:
         e6:0a:03:5e:2f:df:1b:44:27:8a:a3:cf:7a:2d:ea:05:87:71:
         31:5f:a9:33:63:94:c3:7a:db:ce:a4:9e:65:89:29:38:5f:80:
         b2:df:8d:64:0a:68:ee:5a:7d:e1:e2:a2:26:bb:38:87:91:f3:
         b1:b3:1f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:08:13 2025 by rpki-client