Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/78391bf5-1171-35e1-9bef-eb0a933c67ef.roa
File:                     78391bf5-1171-35e1-9bef-eb0a933c67ef.roa (raw, json)
Hash identifier:          pPTk0icpKfhX+t0AJ8eBhcpVp+fBu90lhdQeQErbo40=
Subject key identifier:   A6:9F:46:96:DF:14:9D:A5:89:95:EF:38:7E:6F:DD:18:FE:7E:00:88
Certificate issuer:       /CN=7526f790-ccec-40fc-afc4-9d600cb8a815
Certificate serial:       010D0C9F43285848E059991597C2E37D3637B400
Authority key identifier: A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/78391bf5-1171-35e1-9bef-eb0a933c67ef.roa
Signing time:             Fri 14 Feb 2025 04:48:29 +0000
ROA not before:           Fri 14 Feb 2025 04:48:29 +0000
ROA not after:            Thu 15 May 2025 03:48:29 +0000
asID:                     8075
IP address blocks:        2602:f742::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:59:99:15:97:c2:e3:7d:36:37:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7526f790-ccec-40fc-afc4-9d600cb8a815
        Validity
            Not Before: Feb 14 04:48:29 2025 GMT
            Not After : May 15 03:48:29 2025 GMT
        Subject: CN=8200ea0f-f993-4f0a-ad48-8777ce4dc5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:42:cc:6d:57:dc:db:9e:9f:59:93:85:8f:b9:
                    77:63:c6:23:8d:ea:48:4c:11:72:5c:f9:0e:8a:47:
                    f6:56:00:bc:e0:a7:5f:02:ed:20:58:7c:47:4c:16:
                    9f:51:98:46:da:3c:59:fc:43:79:cb:0e:a5:7d:40:
                    ae:fc:99:7f:bf:f3:ac:22:ad:70:4c:e1:7f:b3:f5:
                    2f:92:9b:31:35:70:ae:d2:0a:f4:34:89:42:b4:12:
                    c5:67:68:0f:a8:4b:3d:1c:46:fb:23:3f:2b:60:7f:
                    fb:3c:02:55:92:e1:f8:33:3f:2c:21:5d:0d:8a:5e:
                    42:8c:43:44:c6:27:87:42:59:cd:f5:d5:7b:b5:9b:
                    f7:88:81:71:44:2b:b8:ec:b5:da:86:d6:35:0c:5d:
                    a1:c0:7e:56:9b:1b:49:30:36:83:b6:e6:7e:ed:d8:
                    90:56:ac:28:4c:fc:b2:67:93:10:c9:e6:a8:aa:18:
                    a1:f9:6c:72:c6:28:d5:44:1f:bb:f1:d0:4e:a0:77:
                    9c:29:72:7e:b7:82:91:3f:a8:03:b5:11:5d:27:23:
                    e2:dd:3f:c4:25:63:99:2c:49:70:50:06:73:ad:09:
                    5f:3f:28:c0:7e:54:4a:67:87:ff:a8:c6:f0:bd:00:
                    c5:73:2c:34:de:be:c3:65:d4:85:0e:5a:39:6b:2d:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9F:46:96:DF:14:9D:A5:89:95:EF:38:7E:6F:DD:18:FE:7E:00:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/78391bf5-1171-35e1-9bef-eb0a933c67ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl

            X509v3 Authority Key Identifier:
                keyid:A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f742::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:7e:4f:64:f4:11:c7:ef:d1:16:4e:6a:5e:47:0e:5c:86:1c:
         99:b7:86:ac:b6:6b:74:4b:16:1a:07:3f:25:b1:e5:c1:8f:37:
         f3:99:c1:8e:fd:ef:de:a7:29:3b:aa:21:69:79:b2:5c:93:db:
         56:c7:ab:0b:d2:e8:46:16:3e:fa:73:ae:3f:f1:31:91:5a:a3:
         f7:6b:13:ed:54:c9:65:ad:9a:68:0b:4e:20:d3:d7:2a:13:b4:
         cb:5e:a0:0a:a5:fd:5c:7d:c5:2b:ae:63:a1:6c:90:99:7d:e7:
         fa:33:8d:3b:cd:fc:ef:b4:cc:6a:0e:13:3d:b4:8c:7c:34:c1:
         bb:36:69:49:df:a7:0c:68:ce:4a:0c:a9:6a:ca:45:00:26:7b:
         55:ca:90:98:d2:3c:ba:e9:c7:36:f2:c0:b0:27:99:c0:0a:25:
         7d:59:73:ae:4f:cb:8c:d5:56:b6:48:bc:49:2b:be:6a:14:ec:
         56:5a:e3:59:58:b8:db:6b:66:8f:5f:18:c9:f6:3d:3e:c5:09:
         27:6b:61:a8:33:d8:5d:ab:ca:02:da:ba:af:2b:ce:fe:79:ae:
         02:6c:87:f3:68:7c:d7:4a:09:e1:f9:de:e9:6b:c3:45:55:77:
         9c:37:16:1f:e2:1f:2e:ca:2f:d3:fd:e4:87:92:74:f9:9a:7e:
         27:43:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:41:23 2025 by rpki-client