Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/7acb1c8a-d3e8-3da1-a91e-c69bea6982ee.roa
File:                     7acb1c8a-d3e8-3da1-a91e-c69bea6982ee.roa (raw, json)
Hash identifier:          VE632ja2Xs7Q1hXuqisecqT7BXnv5SFm1+Dh6/EeaoA=
Subject key identifier:   67:25:EE:C6:B9:E5:31:9E:55:82:20:76:61:2E:21:5B:78:7B:8F:49
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F4328584A46A5A8D99DA46C309EE576C0
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/7acb1c8a-d3e8-3da1-a91e-c69bea6982ee.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     1024
IP address blocks:        2602:fca7:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:a8:d9:9d:a4:6c:30:9e:e5:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=9055a338-c1d4-4615-84cc-f93566d262e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:60:61:28:e7:da:be:2d:93:86:e3:95:a1:f9:
                    7a:25:1a:e7:84:47:2e:f3:4d:cc:dc:0d:cc:dd:a9:
                    20:d8:a6:cc:10:da:98:c7:d2:35:9f:a4:32:44:af:
                    fd:5f:d5:d5:45:14:72:25:33:18:d8:f4:67:7d:1a:
                    de:61:d0:d8:f6:42:8d:6e:3f:3c:16:71:58:45:cd:
                    ce:32:55:cf:a8:5b:85:d5:58:09:51:ee:62:10:64:
                    03:8f:19:cd:55:07:6b:98:86:2d:50:4f:c0:05:18:
                    2c:96:be:c8:f4:91:c6:a8:3b:da:19:ee:9e:43:36:
                    60:92:e8:18:77:fb:06:da:0d:73:36:0e:35:e1:49:
                    f6:78:f4:9f:c8:b7:f3:17:77:6f:06:98:dc:74:32:
                    0e:52:d9:28:24:e3:e9:20:76:30:01:a7:5a:8c:5b:
                    98:3a:1b:af:65:1f:c1:74:74:10:f2:6b:a0:65:a2:
                    50:a2:b2:7c:a6:80:0f:83:d3:ab:8f:68:cc:a7:ef:
                    8d:dd:7b:78:f0:0b:bf:ca:c3:4b:da:5f:1d:33:76:
                    c7:e7:88:be:13:65:43:13:42:90:73:28:6a:7f:f4:
                    b6:de:f9:4d:d7:de:ad:2d:f1:cb:14:dd:5a:6b:fc:
                    e9:34:d9:4c:ab:95:ae:34:dd:58:3b:6d:4a:08:fd:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:25:EE:C6:B9:E5:31:9E:55:82:20:76:61:2E:21:5B:78:7B:8F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/7acb1c8a-d3e8-3da1-a91e-c69bea6982ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ce:32:64:bc:bb:f5:46:88:dd:f5:c0:d7:7e:2b:7a:20:26:
         20:95:b5:26:c6:36:14:ad:c9:71:08:6a:66:da:97:b1:00:89:
         78:0d:f4:0a:d5:e8:3d:72:20:85:a1:9c:6d:e3:c5:4c:82:90:
         91:71:88:c7:2a:81:e1:4c:90:cb:ca:0c:19:45:1c:71:45:fa:
         c7:9b:88:d5:26:24:7c:96:36:e5:55:55:34:4b:5f:1c:d4:22:
         60:21:e0:37:92:e5:23:d0:9e:8e:82:80:c6:65:2f:fd:66:ae:
         46:de:64:47:ce:22:39:2b:3c:13:ae:3c:0a:3c:d9:88:b6:1e:
         9d:19:0a:18:92:08:ab:30:85:a3:87:73:42:33:e0:af:d2:67:
         76:b3:4a:6f:44:88:97:b5:da:44:d4:09:28:68:cb:c3:11:e3:
         56:d3:40:23:c4:b3:39:bc:cf:7a:c0:4a:ff:56:d9:29:eb:36:
         cd:91:22:63:17:b8:f3:ca:e9:f4:85:af:b2:2c:b9:6f:31:f5:
         3a:a9:3e:1a:ee:73:b2:46:9c:97:c8:22:d9:8b:0b:a1:26:dc:
         15:37:dd:7a:ce:e5:43:c7:73:88:f9:d9:5b:f7:f0:3a:1b:9c:
         38:ce:52:cd:db:af:2d:bd:da:85:eb:5f:42:b6:51:bb:cc:1e:
         9e:61:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:38:50 2025 by rpki-client