Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa
File:                     168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa (raw, json)
Hash identifier:          ZB8Q6y4RzVVwZDYft8KGrtRdhsu5LM/S+BOCPkNtblM=
Subject key identifier:   EF:3E:D5:99:D1:9A:05:69:75:81:A1:EB:7E:1C:AB:04:0B:EE:64:AC
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584A2EEABFDBC6089D45FBF96380
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     53727
IP address blocks:        2602:f982:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:bf:db:c6:08:9d:45:fb:f9:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=78b0eeb5-8c3f-48dd-915d-f3c68d956008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:62:56:e2:ed:0d:b0:6b:21:f8:72:ea:83:
                    b1:a5:6a:fa:c7:1c:53:a7:5f:e2:2f:eb:73:f3:0d:
                    45:04:3a:51:4f:0c:40:71:8a:a3:e9:ed:66:e6:05:
                    1a:35:42:09:6c:45:b6:eb:b6:33:c9:94:0a:7f:78:
                    54:8a:f3:07:0a:eb:17:28:f6:5a:72:da:47:48:98:
                    2a:b9:4e:2b:13:7a:b3:1e:ca:9d:c5:38:9a:61:62:
                    65:ad:5a:2e:a1:23:6f:cc:50:23:67:ce:9e:49:aa:
                    fd:32:76:15:7d:25:65:ac:a6:92:c3:e5:33:46:7f:
                    27:e9:5f:6b:41:ef:09:b5:21:e8:9b:65:9b:99:54:
                    d1:fb:f3:8b:15:03:10:e3:51:1c:ee:d1:2e:b9:7d:
                    57:0c:2d:ca:92:ac:1e:2c:c7:34:83:ef:a3:a9:55:
                    be:e1:e4:e4:33:37:ad:9f:69:49:81:04:ee:f0:37:
                    24:c2:72:ab:d0:21:65:0a:cb:8e:a0:33:ba:ae:c9:
                    34:33:54:f9:a8:23:fa:24:7e:e1:fb:3e:19:b7:c6:
                    f8:88:1c:30:07:2e:2f:ad:c8:73:7a:57:90:65:76:
                    08:a5:31:fe:77:e7:db:e1:ae:53:96:da:88:b2:83:
                    a6:0d:59:bc:69:32:97:6f:4a:0a:3b:97:67:18:0e:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3E:D5:99:D1:9A:05:69:75:81:A1:EB:7E:1C:AB:04:0B:EE:64:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/168a62fb-6f1e-34bb-a531-a6c0ac28f6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d5:90:60:67:57:c6:14:a1:5f:f3:f1:23:38:57:82:50:5c:
         15:d2:1c:a8:89:f1:ca:3d:ac:65:3c:57:fe:ea:0d:b6:07:e7:
         37:71:fa:f0:34:23:f0:ce:14:fb:88:59:67:b8:6a:ed:8f:9e:
         51:04:39:c4:c0:a1:2c:a1:bc:f3:10:04:34:8b:ba:52:a5:91:
         39:82:1e:7c:5e:51:5b:8c:9f:c4:51:dc:a3:98:3e:66:1f:65:
         a3:af:1d:ed:b7:79:29:2e:8b:8f:1f:65:77:c7:8d:ee:bc:07:
         3a:6d:10:d8:4f:22:87:19:b7:69:38:18:de:48:44:2e:9f:0a:
         45:1e:53:1e:52:11:8b:11:17:5b:71:1e:e5:7a:ea:d4:99:4b:
         1f:90:fb:48:4a:d6:7f:37:7f:cc:3c:61:6f:3f:c7:f3:bc:ff:
         ff:a8:a1:f9:2a:59:cb:21:c6:34:d3:a0:1b:b1:67:11:85:4b:
         82:dd:53:94:38:18:70:13:08:49:d9:0c:f5:3d:77:48:61:95:
         5e:8d:03:f2:c1:3a:ef:31:35:e2:94:55:f9:db:ff:0b:f8:57:
         74:f8:b1:e0:37:f5:84:44:e0:e2:02:0f:9b:b9:dc:66:0b:45:
         bb:0b:f7:58:68:2a:79:4c:15:e7:17:2d:b5:2a:f8:c4:46:c0:
         45:f7:f3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:18:20 2025 by rpki-client