Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/c43dc423-d5f3-364e-a1c3-aabfe95c6689.roa
File:                     c43dc423-d5f3-364e-a1c3-aabfe95c6689.roa (raw, json)
Hash identifier:          LWa4S1Sn6IdqAf669FRzpJ4eX7Gnu6BQoyGaA+qnV6I=
Subject key identifier:   6B:65:3A:2A:5B:F6:A7:C2:36:3F:E4:DE:B8:73:74:4B:63:4F:55:65
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F43285849BC74AD3BC5FB907B2670ABE0
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/c43dc423-d5f3-364e-a1c3-aabfe95c6689.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     53727
IP address blocks:        2602:f982:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ad:3b:c5:fb:90:7b:26:70:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=0865180e-91e7-4150-8706-eb0fe053a8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f0:e8:50:fb:0b:38:44:c3:3d:75:64:23:bf:
                    e1:f3:e1:a6:a5:f6:7e:98:b3:3b:90:d9:bf:ca:c2:
                    b5:18:af:91:58:d9:bb:78:39:21:f5:05:a8:ff:97:
                    1a:5c:05:a7:8d:c9:0f:b5:e1:41:93:37:9c:53:69:
                    6e:17:ef:bb:7a:8e:30:be:97:41:e3:3a:f6:7a:9a:
                    30:5c:7e:29:6b:fc:02:e4:01:c9:5c:61:b8:85:78:
                    da:0d:b2:1c:14:65:18:7a:a1:84:36:be:a0:d2:04:
                    93:65:74:a9:48:74:eb:31:ba:7e:94:f6:0f:96:0d:
                    15:58:9b:f1:e0:20:c2:32:a6:cb:a5:7d:7b:b6:00:
                    33:ef:60:da:46:d6:08:15:a6:f0:61:0b:ed:36:da:
                    3a:11:04:de:70:91:d1:f1:da:ec:ac:8b:1a:b8:20:
                    73:d7:94:a4:4e:ce:fe:21:28:86:bb:a0:aa:33:e0:
                    62:a2:e9:d5:76:45:02:00:a5:29:f8:6d:ea:ed:d1:
                    fb:0c:84:20:dd:5f:68:22:91:c1:e4:e0:55:61:fe:
                    b0:ea:bd:e5:32:65:4c:27:d0:94:ad:5d:14:c6:d0:
                    8d:1a:f5:63:e0:32:a6:c4:d6:30:00:dd:30:5d:b7:
                    71:ab:db:8f:19:3a:9d:b6:db:5e:69:4a:89:ec:52:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:65:3A:2A:5B:F6:A7:C2:36:3F:E4:DE:B8:73:74:4B:63:4F:55:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/c43dc423-d5f3-364e-a1c3-aabfe95c6689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c8:fb:1b:cb:f8:ce:49:0d:8a:dc:29:4c:15:fb:c1:2a:68:
         2b:55:19:e7:dc:1c:6c:f8:9e:c5:4e:03:e6:3f:b8:6c:d8:26:
         c8:09:6e:f7:e6:93:84:0d:83:e1:80:15:c8:6c:f7:4b:21:26:
         0c:30:4f:ee:5d:00:c3:d0:40:b1:c3:e0:b2:05:50:1c:4d:ea:
         29:52:22:75:3c:fb:ac:dc:ed:da:bd:fc:5d:08:b9:f7:d2:57:
         2f:0e:c7:c4:60:43:42:78:b8:cd:44:e3:cf:b7:c8:6e:a8:6d:
         b4:20:2f:6d:69:7e:a5:2e:bf:a5:1f:fc:88:73:02:d5:b9:71:
         df:2a:06:bb:19:4a:b3:d7:72:cc:66:28:02:63:76:a0:96:1a:
         df:9a:4e:91:14:4a:34:9c:c0:5d:6c:cf:cd:67:65:0a:7e:db:
         d4:40:aa:1d:2f:07:37:45:c7:c7:6c:e4:0d:b3:0c:f3:5e:7c:
         68:3a:97:02:40:77:93:bf:5c:fd:8e:64:df:fc:c2:a4:06:ba:
         94:0e:39:91:52:24:ac:48:d1:ad:f0:83:87:10:82:0a:e0:3c:
         6e:02:e3:c7:4f:39:df:c0:ea:5c:79:3d:ce:31:02:15:2e:e5:
         64:24:48:ad:a4:da:26:58:1c:b3:df:04:48:d2:6b:c5:16:07:
         5d:dc:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:04:30 2025 by rpki-client