Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/400ab649-3959-3e08-8eb1-04630167fca9.roa
File:                     400ab649-3959-3e08-8eb1-04630167fca9.roa (raw, json)
Hash identifier:          s6njZCzwumEcAY4wfiYgtKYjYyaDjtN/LX94cwGkbfI=
Subject key identifier:   2B:C6:33:B1:E7:96:D3:2F:EF:18:19:B5:14:B2:E3:BD:53:CE:5C:89
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584A506AEE6CA28C3B4FE5F75000
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/400ab649-3959-3e08-8eb1-04630167fca9.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     53727
IP address blocks:        2602:f982:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:ee:6c:a2:8c:3b:4f:e5:f7:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=8c851df1-e790-4446-bd51-8fcf0ee8b8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:ae:c3:1f:fe:01:d1:0c:53:19:13:89:c1:
                    80:b8:0a:a4:83:27:b0:08:05:94:95:33:7d:58:88:
                    7b:eb:69:aa:84:13:33:a0:19:6b:15:72:6a:8c:87:
                    91:4b:75:f7:e7:84:fe:7f:2d:7a:4e:da:a6:4c:ce:
                    28:89:b1:06:98:f4:0c:57:a9:e0:be:a3:db:28:78:
                    85:97:d9:0d:ca:e9:df:53:a9:92:96:f4:59:8e:da:
                    62:e7:88:9c:8a:58:1b:8b:08:7a:49:7a:9f:62:ff:
                    1a:04:40:f9:e3:e2:5a:f9:c1:16:9e:c6:89:2d:c2:
                    84:ce:28:af:ea:dd:f5:12:30:4d:35:2b:17:52:80:
                    81:43:56:79:2f:b3:2c:e4:b9:19:21:48:1c:1f:6b:
                    a4:f6:ea:c0:23:76:fd:3d:2d:ac:24:67:8b:2d:26:
                    d1:6a:bc:7d:fa:f0:95:c1:cb:ac:44:d5:0e:21:78:
                    fd:19:f6:ec:50:97:1b:a3:13:85:d0:02:88:42:4d:
                    38:7f:0c:37:91:39:49:f5:36:18:a7:3f:23:5a:34:
                    28:95:a3:b4:30:b8:96:69:c7:25:5a:35:b3:e8:94:
                    61:ce:76:83:06:95:d7:75:cf:33:fb:59:be:b7:83:
                    10:b5:48:33:a7:ff:45:4b:b5:fd:b3:10:38:c8:82:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:33:B1:E7:96:D3:2F:EF:18:19:B5:14:B2:E3:BD:53:CE:5C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/400ab649-3959-3e08-8eb1-04630167fca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b3:61:cf:07:fe:11:be:bb:80:20:b4:8f:84:04:bb:92:b9:
         88:12:02:b7:40:4b:57:65:a9:48:d7:5c:1b:07:9b:6c:98:be:
         90:56:8d:ea:c2:95:69:a9:46:bb:c3:c0:2f:e1:11:26:35:49:
         a8:9e:d2:01:7e:14:10:e4:b4:84:9c:af:94:af:63:8b:be:48:
         67:34:df:03:e2:15:ca:d8:69:2b:53:84:8c:f6:df:a3:d7:a1:
         af:e5:5d:98:7e:b1:76:56:d2:32:1a:81:9e:6f:4c:f7:df:86:
         88:1c:f0:a1:22:c0:1d:de:b9:05:f9:ae:71:b0:45:0c:d2:5f:
         db:1f:f5:03:55:a2:d2:54:87:59:25:d4:9d:b6:77:20:af:ff:
         e5:ef:9e:2a:8f:d5:78:fa:f8:32:97:92:9e:1c:21:a7:b2:64:
         46:8e:d5:40:56:2b:29:88:5e:6a:0f:07:cd:ce:e6:b6:70:83:
         6e:b6:ec:41:f4:98:10:84:92:4b:b1:e1:66:5f:58:38:ea:aa:
         b5:63:56:ce:c1:2f:8e:21:42:b3:c6:fa:91:8c:72:97:e1:b6:
         ec:b3:da:7c:eb:62:b9:e1:cd:0e:29:e3:c9:4c:65:20:da:40:
         36:54:5c:55:3d:d3:f9:d0:14:1e:01:fd:d1:b9:5c:7d:44:2a:
         f6:a7:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:28:35 2025 by rpki-client