Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa
File:                     c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa (raw, json)
Hash identifier:          z5vF8EJiP3xU2xHsYZLlLMFqwEgvul5eeGHwwfma3ps=
Subject key identifier:   66:5E:F6:19:5E:84:6B:93:96:EE:42:18:4B:27:BD:2F:49:A9:A9:BF
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F43285849C0A4EAAF13400F7F714623C0
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     14490
IP address blocks:        2602:fa70::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ea:af:13:40:0f:7f:71:46:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=0ed7fa84-e42b-40cc-932e-d45387ebd37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:31:73:c3:13:a4:c7:d4:96:f6:4e:1f:63:
                    45:9e:34:76:bd:2e:1d:0a:4c:d5:9c:56:48:3c:fc:
                    90:4e:58:1d:b3:ff:9e:c6:77:26:39:52:be:04:09:
                    44:ad:df:de:80:02:57:e3:09:f0:68:6a:08:98:db:
                    d0:d1:a3:b3:61:a5:55:b4:f5:bc:c7:1c:c1:93:d3:
                    82:11:3a:2d:9e:7b:36:00:9c:eb:7b:d3:32:9a:90:
                    07:27:65:b3:a1:91:0e:10:3d:48:5c:a4:8c:1d:3d:
                    bf:73:cd:0f:a6:5d:2c:06:88:5d:16:38:06:76:62:
                    23:05:ab:d9:86:28:af:80:94:27:78:86:53:b4:37:
                    5a:14:17:8d:ba:09:e2:30:b0:77:47:a1:bb:72:7a:
                    1f:19:67:9d:42:66:bd:79:d9:e1:11:12:68:35:44:
                    be:2e:6b:d2:f2:b6:9e:ce:8c:1a:14:d5:89:df:4e:
                    46:e0:37:c9:5e:89:f0:fd:77:d3:ce:bd:cb:ce:b8:
                    cc:28:12:2b:b8:4c:4d:c7:49:52:a6:22:46:65:fe:
                    85:07:f0:ad:ab:88:67:e2:22:9b:f8:48:56:e6:5a:
                    a4:02:d0:a0:4e:4b:01:88:43:16:21:60:c5:26:11:
                    7d:8e:44:8e:e8:d2:59:0d:65:e0:4c:41:40:97:4a:
                    6a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5E:F6:19:5E:84:6B:93:96:EE:42:18:4B:27:BD:2F:49:A9:A9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/c683c6fe-8f20-30a3-9dfe-741f74e0ac01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:92:a4:9d:b4:b7:71:01:17:92:dc:47:d0:42:99:ed:b0:7d:
         b0:ef:d3:7b:7a:d6:8a:e0:4f:df:39:00:26:8f:1b:1d:8b:db:
         da:8d:67:f6:46:49:64:43:f9:2a:0c:8d:ac:f1:18:38:7b:13:
         97:f9:51:c2:75:c1:2a:7f:28:38:06:70:fd:89:c4:c8:38:eb:
         f5:07:ed:d2:f3:63:f5:05:f4:3b:73:28:c2:70:fb:bb:a3:30:
         b5:f8:cf:9a:13:da:af:af:c5:17:d5:71:0f:7a:52:4f:70:ac:
         e3:fe:70:10:fa:c0:74:c8:ed:e3:cc:e6:77:26:93:ad:f2:30:
         90:bf:fc:83:52:27:0a:47:33:70:d4:36:52:5a:a8:c6:d3:6a:
         e3:14:d2:f5:8c:dc:e1:53:59:64:0d:ce:20:8c:12:19:ab:0d:
         0f:51:ff:f1:a1:11:9d:46:19:4d:83:da:aa:86:bc:b5:26:7b:
         04:e4:f3:bf:a1:12:f4:c7:75:ec:94:30:3a:cf:ed:4f:0d:50:
         10:7c:a2:3c:f2:53:3e:34:43:3c:40:71:46:43:1e:1c:22:14:
         b4:f2:34:5f:5d:9c:3b:e0:de:9c:8f:9f:04:a7:dc:01:62:2f:
         37:4e:36:74:b7:ab:d2:c0:1c:47:72:0a:4e:7d:de:74:60:81:
         42:e8:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:23:40 2025 by rpki-client