Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa
File:                     cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa (raw, json)
Hash identifier:          5mfG9Xkr4ee+U1X6hWh++RroCXGBvTFCZyKOo94k0AM=
Subject key identifier:   9A:5B:A6:80:E1:32:DB:B8:A4:24:BE:CD:7A:F2:3B:2D:8D:A9:2A:8C
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858498CFF0717BD50744ED2B95740
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     36829
IP address blocks:        2602:fc64:ca10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:07:17:bd:50:74:4e:d2:b9:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=3aec6554-d0e8-43d7-9445-c07d60f1f100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7c:12:4e:05:96:9f:e7:3e:5b:c5:e0:12:97:
                    2d:e1:3f:4a:86:3d:04:c1:e5:e6:8e:5e:64:fb:74:
                    f0:9b:aa:26:b2:b2:81:2a:b4:29:f8:4b:a8:1f:75:
                    db:ee:b3:2f:09:61:ff:2d:ac:d6:b8:d5:3e:49:9a:
                    49:80:b3:7a:7a:3f:9c:48:06:10:e5:02:24:b9:3a:
                    60:13:eb:b5:68:3c:1a:04:83:9f:ca:b4:f8:1b:9c:
                    5c:e2:f4:81:4d:c2:40:f4:a8:33:1b:f8:85:a7:ee:
                    3f:b6:72:a9:10:21:d3:4e:7b:ad:55:4b:9c:93:7c:
                    85:3e:56:be:c5:93:8a:36:16:eb:9c:de:78:0f:75:
                    4d:f7:b7:04:fd:65:f5:98:8d:b4:73:9f:8c:1e:a3:
                    4d:fe:44:f1:69:1e:f1:18:6a:e4:6e:58:e8:d8:9c:
                    18:89:d3:18:64:c5:e7:5f:e8:b0:bc:48:1b:ef:85:
                    b1:dd:ca:16:c6:ad:90:45:c3:d9:38:bd:49:e5:c1:
                    95:a3:bb:ba:5c:b7:37:3a:71:ee:0d:ed:ea:25:52:
                    28:43:bf:cf:c5:3a:91:ec:86:6a:1b:4b:b6:65:3a:
                    48:f4:4c:6e:87:3a:57:44:24:de:33:03:21:10:c4:
                    55:66:42:bc:e5:3b:cf:d9:7a:82:b4:09:75:fa:de:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5B:A6:80:E1:32:DB:B8:A4:24:BE:CD:7A:F2:3B:2D:8D:A9:2A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc64:ca10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:01:f2:37:3f:db:48:47:b6:eb:18:c4:0f:e2:a8:73:28:59:
         7e:a1:a4:57:88:3f:b2:45:e5:10:0f:eb:d4:0b:aa:34:64:b5:
         df:65:4d:0a:f9:f5:63:8e:71:79:1b:96:a3:25:f5:70:94:11:
         4c:47:ab:3d:b2:bd:b0:24:73:58:1e:dc:cf:d7:cf:fe:f6:7b:
         ce:fd:62:b5:e6:84:2c:af:e2:71:15:78:66:57:f7:73:20:44:
         d6:79:37:a4:5b:c1:52:0f:10:64:ee:9b:b8:12:a2:0c:87:05:
         dd:82:c7:15:aa:0c:d5:fe:35:6a:c7:65:c2:1e:ed:7a:fc:a2:
         0e:ee:68:13:3d:82:19:94:29:39:9b:9f:1e:b4:23:33:04:4d:
         97:e3:c8:9d:56:b8:fc:e6:e9:94:2e:6a:47:c4:56:0f:7c:84:
         09:ee:5c:13:5a:bb:fa:d7:05:81:d6:cd:5e:48:eb:cc:b3:11:
         bd:5c:20:34:f2:24:26:2f:20:fc:4b:f6:3f:31:d0:df:62:aa:
         db:f4:f6:ef:1d:d2:fe:6c:96:0c:db:ca:55:45:7e:96:4d:e1:
         97:e6:e0:68:3a:df:34:c9:bc:26:11:5e:6b:f6:2a:c7:a6:db:
         e4:f6:51:61:02:ba:da:01:7a:10:28:f6:79:25:8a:96:bf:cf:
         34:a8:59:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:50:48 2025 by rpki-client