Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/0169fe11-c32d-3023-933f-02e828e6ce1f.roa
File:                     0169fe11-c32d-3023-933f-02e828e6ce1f.roa (raw, json)
Hash identifier:          Wghl1HR2onqqG+d4/YQPRdz1Z+KBMTfIfUWiYg8bjYI=
Subject key identifier:   74:FE:67:C2:0D:30:07:50:CE:07:7F:70:63:BC:80:98:D9:48:C7:F1
Certificate issuer:       /CN=19cb6623-eabf-410a-89de-eb6cae8e37a3
Certificate serial:       010D0C9F432858496B7ED1F07037FC27FB502100
Authority key identifier: 0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/0169fe11-c32d-3023-933f-02e828e6ce1f.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     8987
IP address blocks:        2602:f73e:20::/43 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d1:f0:70:37:fc:27:fb:50:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cb6623-eabf-410a-89de-eb6cae8e37a3
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=401905df-4e14-4292-bc9f-28a4b8610683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:24:ff:ef:48:6d:77:39:3f:b7:e7:6f:a6:
                    6d:7c:ac:da:48:72:7c:90:4b:88:f3:da:d6:c9:e0:
                    74:d7:fa:e0:ed:5d:e7:0a:2c:da:1a:f6:3d:75:24:
                    fe:12:f0:be:e4:3f:32:e6:0b:df:8b:7e:27:62:d3:
                    75:79:fc:8e:45:3a:39:20:fe:ef:aa:19:98:ee:3c:
                    a0:11:e5:4e:6a:87:a0:44:68:1b:b6:c0:cd:d2:8c:
                    1d:09:29:ac:dd:6e:86:83:4a:9b:3b:39:af:d2:c6:
                    df:6a:9e:07:6a:0f:7f:14:f6:11:90:08:82:e2:f9:
                    4e:31:f2:64:ae:cd:3a:31:6d:d6:af:be:e3:cc:36:
                    b9:21:b6:68:1e:58:21:7d:29:f0:00:4f:55:9e:a8:
                    69:70:c1:9b:24:6f:66:30:00:35:31:07:ec:95:d6:
                    ef:7b:70:20:93:cb:2a:b1:16:8a:d4:4e:b7:72:b9:
                    61:11:bf:b6:3d:6a:69:fe:5c:b2:77:ad:3c:78:c9:
                    3d:2a:08:39:b6:e8:e1:9e:0e:68:53:36:58:e7:4b:
                    e4:a5:7e:a4:61:d6:4d:46:43:08:a4:e8:f6:fb:91:
                    09:4e:3a:58:c8:5b:3f:a0:b3:8b:69:ea:45:03:ac:
                    80:eb:e7:7a:69:02:bc:6f:5a:b5:26:da:7d:5d:f8:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FE:67:C2:0D:30:07:50:CE:07:7F:70:63:BC:80:98:D9:48:C7:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/0169fe11-c32d-3023-933f-02e828e6ce1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3/19cb6623-eabf-410a-89de-eb6cae8e37a3.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:71:F1:83:8E:FF:8B:1D:3B:32:E9:5D:1F:70:DD:2E:82:B9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/19cb6623-eabf-410a-89de-eb6cae8e37a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f73e:20::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:df:b5:df:54:8b:ca:66:4f:f4:3e:99:34:77:a9:b8:35:e1:
         ee:34:d8:75:ea:d7:82:69:6a:04:fb:64:85:5d:1a:56:13:4e:
         4b:89:5f:d4:0c:f5:2d:da:f5:d5:ad:63:91:fa:51:7a:ec:6e:
         19:83:a4:c5:be:8a:36:65:5c:27:27:2e:ce:af:d9:94:ef:0f:
         8f:b1:77:b8:10:dc:96:f8:c0:d2:d5:b8:f8:00:13:02:b0:d4:
         8f:0c:45:00:98:6e:6a:fb:87:0a:27:67:df:c6:ba:65:5e:62:
         8f:05:d3:6c:2a:33:76:56:19:a8:e2:d7:3b:ec:47:fc:fb:bd:
         75:8a:be:1d:82:9d:b8:e0:7e:6c:df:c2:93:85:86:7a:7a:cc:
         27:58:76:49:3e:07:ae:92:7b:ff:c9:e1:e7:f6:16:c4:66:39:
         ca:7e:c9:85:f4:54:12:03:5c:b8:dc:4e:e8:d1:19:1d:99:a7:
         d1:f5:e6:73:3f:30:b8:81:31:d0:20:e7:f9:9c:e0:be:2d:f0:
         8a:04:59:f9:20:b8:a3:40:59:1d:8a:8f:bb:a0:bd:51:4c:b3:
         3f:6a:77:17:eb:63:df:dc:68:c3:02:fe:b0:59:28:8d:9b:94:
         b2:f8:4b:32:7f:e8:72:51:4c:a2:56:dd:b3:6e:a2:07:62:5a:
         d4:85:d0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:33 2025 by rpki-client