Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa
File:                     c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa (raw, json)
Hash identifier:          6wrFRgSvOxcsncgHNTY5jb75aTUc0piWzdC9zk/28Jw=
Subject key identifier:   DC:74:B8:64:09:31:92:95:BD:D5:EB:23:87:0D:18:A0:8E:96:21:5D
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F4328584A56005651EA01E63A6381C240
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     401390
IP address blocks:        2602:f7da:3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:56:51:ea:01:e6:3a:63:81:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=1716a935-a4ea-4d43-b7da-ae262a7a877d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:aa:c0:9b:21:64:b7:43:3e:bc:3c:66:a5:
                    9e:7e:b6:cd:d7:73:98:c7:3b:aa:20:70:1d:de:af:
                    62:62:8a:64:4b:de:d4:b3:57:eb:5c:4a:09:05:f2:
                    40:12:9a:f7:30:51:b1:c4:19:2c:6e:60:c5:88:d2:
                    cd:fd:c6:71:5f:bc:a3:0e:63:31:56:03:9c:f2:63:
                    34:59:c9:57:d4:e6:87:a0:f6:62:e3:07:08:12:ee:
                    1f:43:9d:a9:8d:d1:40:cb:a9:81:1e:9f:73:5f:21:
                    5a:5d:82:11:6a:9a:20:35:32:f2:68:f9:77:18:c4:
                    69:91:d7:d8:6e:f5:86:df:36:45:f7:61:c1:47:94:
                    0c:ac:b9:6d:ab:e6:a7:65:4a:50:14:14:6d:ac:d7:
                    30:57:fb:a8:d6:f0:be:a6:15:6b:4e:51:b1:31:2d:
                    86:dc:bc:d7:31:9e:70:8c:55:c5:c8:fa:32:0d:f1:
                    de:b6:c3:b9:8b:df:56:af:d2:31:82:3b:5b:ca:a7:
                    85:79:9a:50:70:9b:0d:e8:81:97:44:0b:b6:42:5d:
                    1c:c5:27:03:05:df:b0:23:51:03:f5:71:39:d7:15:
                    cc:0c:19:6a:bc:93:35:dc:a6:e8:3b:fe:10:ad:df:
                    a8:a2:05:41:94:5a:69:c4:43:4b:29:bc:05:ab:42:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:74:B8:64:09:31:92:95:BD:D5:EB:23:87:0D:18:A0:8E:96:21:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/c82d7afd-fc6b-3f4d-b7de-b373b5f81778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:3a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:89:d8:11:8f:1e:c5:34:13:7a:79:ce:13:d8:58:34:13:d6:
         d3:4b:02:01:b8:b6:62:a9:48:c2:0c:31:15:77:ab:88:57:5c:
         a9:cb:71:b0:fc:73:09:00:0f:ca:cf:93:b9:ad:ab:8e:e4:02:
         21:a6:2c:55:ab:11:51:16:3f:ca:a9:e7:fa:e3:06:3c:d2:7a:
         78:22:96:16:9c:b2:d7:7c:16:ba:90:b1:6b:d5:41:1b:92:0d:
         17:e4:20:63:2c:44:ae:81:24:86:1d:9e:2f:5f:63:87:8d:4f:
         65:a0:d5:15:61:6f:e2:67:d5:8c:16:8d:90:83:c2:7e:77:96:
         9d:06:ea:0f:47:98:93:24:ee:31:39:4f:70:b1:ee:6f:55:aa:
         6e:34:02:54:ae:d6:5c:2a:36:c8:43:52:a1:28:b4:f2:17:4c:
         23:0e:6b:39:51:bd:ef:9d:d0:96:3a:e1:f9:65:2c:d9:a4:1d:
         55:9d:19:e6:e3:5f:b7:8e:e8:56:87:23:b3:bd:23:86:a3:eb:
         54:33:77:03:7b:54:fd:3b:49:de:66:40:e0:2a:db:ad:9c:08:
         5f:7a:12:41:fa:48:fc:22:a8:57:68:a4:be:3c:72:ca:45:62:
         43:c2:2e:9a:a3:46:7b:5f:f0:87:da:6d:39:25:1d:b0:bb:65:
         db:53:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:54:42 2025 by rpki-client