Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/12e6a6ed-e896-354e-b104-74b147e8cb49.roa
File:                     12e6a6ed-e896-354e-b104-74b147e8cb49.roa (raw, json)
Hash identifier:          GuINt6B2IoOffQFaJ2fUyFwSWdzddMkajuZKeJCRfyQ=
Subject key identifier:   81:A7:AB:CF:CC:B1:5C:23:D5:9E:21:82:45:2E:52:B8:CE:1F:18:D7
Certificate issuer:       /CN=76577e62-26cf-4652-b145-46ee5148cca5
Certificate serial:       010D0C9F43285849C4D4C5831D7D570B23460FC0
Authority key identifier: F7:77:2C:6D:C1:CD:10:63:7C:FC:AA:BA:7E:96:CE:98:E8:71:0F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/12e6a6ed-e896-354e-b104-74b147e8cb49.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     395281
IP address blocks:        2602:f8cf::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/76577e62-26cf-4652-b145-46ee5148cca5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/76577e62-26cf-4652-b145-46ee5148cca5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c5:83:1d:7d:57:0b:23:46:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76577e62-26cf-4652-b145-46ee5148cca5
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=424e6226-e21c-4d21-8764-e4798720ac2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:66:4a:8b:2c:ed:97:e1:e5:ff:91:e8:1a:31:
                    9c:5b:ee:70:00:6a:3b:c8:b3:88:ef:7d:cb:a5:2e:
                    c0:78:b1:c1:51:75:ff:70:c9:1f:a9:50:dc:c3:af:
                    67:fd:19:22:ec:8b:e6:03:b1:da:96:39:de:6f:8a:
                    c2:81:3e:ae:a0:15:1e:b7:78:a0:50:e1:bc:41:a9:
                    b1:d5:36:f6:b9:3b:10:ec:6c:3b:80:cc:74:9b:85:
                    94:8a:46:4a:16:06:5b:de:8e:cf:0f:d2:48:c6:d0:
                    41:c3:b7:34:4e:44:3a:ee:ec:52:54:b3:aa:91:08:
                    97:e2:03:2a:b3:c1:3a:d6:5b:2f:6b:e5:3a:1d:aa:
                    69:5d:18:ec:19:b5:dd:ea:e8:84:e4:74:35:1d:c0:
                    ef:a5:5b:8c:ed:5f:35:a7:0d:e9:e0:87:58:d6:32:
                    4b:0d:dc:c9:c6:d0:fe:0b:74:9d:49:b4:69:d7:90:
                    18:7b:5c:b4:d6:27:a4:7c:de:ca:24:85:4b:07:58:
                    59:4e:44:7a:2d:78:05:cd:9d:43:60:8e:e0:77:67:
                    58:97:01:6a:a4:9e:65:97:32:ce:7f:02:e2:d1:4e:
                    05:1b:28:c3:bf:33:c9:6f:1d:fe:3a:31:e4:4f:ed:
                    81:62:ed:1a:ad:b8:9e:82:5c:65:d1:d6:1a:07:59:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A7:AB:CF:CC:B1:5C:23:D5:9E:21:82:45:2E:52:B8:CE:1F:18:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/12e6a6ed-e896-354e-b104-74b147e8cb49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5/76577e62-26cf-4652-b145-46ee5148cca5.crl

            X509v3 Authority Key Identifier:
                keyid:F7:77:2C:6D:C1:CD:10:63:7C:FC:AA:BA:7E:96:CE:98:E8:71:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76577e62-26cf-4652-b145-46ee5148cca5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8cf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:5e:37:fc:4c:7b:4b:7e:da:85:df:20:bf:e6:79:2e:92:
         eb:18:4e:d9:7d:90:b0:a9:6b:3a:cd:e8:2c:c6:c8:82:a5:f8:
         72:68:2e:95:b6:b6:c7:46:14:2a:02:2e:95:e1:90:a1:bf:cd:
         51:c0:7d:5f:3f:bd:e3:64:75:0e:6a:d2:86:df:bd:dc:8c:ca:
         8a:73:8d:2c:63:04:06:58:d7:f8:c4:67:c5:4d:88:bb:45:7b:
         6d:84:bd:b2:dc:33:2e:4e:da:21:31:d6:9a:e6:49:00:06:ad:
         da:5e:5f:26:1d:39:d8:d8:b1:8e:58:88:cc:5d:b0:99:56:45:
         e4:18:16:47:97:7a:44:2b:77:a7:31:8d:e1:cc:b9:1d:36:22:
         21:32:c8:7f:6b:4e:2e:ca:36:f2:38:bd:8a:24:e6:41:3e:98:
         c2:87:3f:48:6c:79:28:42:66:13:12:2c:d8:bf:88:18:2f:20:
         ba:72:e2:02:18:4a:f4:af:9c:9a:42:fa:04:c1:76:25:e9:1c:
         7a:a5:6e:a4:d8:ee:cf:f6:ba:4d:d3:af:5f:7e:a2:c7:92:60:
         04:7e:37:35:60:0e:55:7b:0b:4f:18:10:b0:61:cf:59:10:44:
         ea:74:60:24:fd:ec:54:25:95:b2:a8:94:bd:93:af:ab:83:9e:
         5a:87:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:02:48 2025 by rpki-client