Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa
File:                     a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa (raw, json)
Hash identifier:          /iCmFuD1WiAH3eh6n+cfENZOra1rFj3lriSlzSE/xcs=
Subject key identifier:   59:12:CF:96:90:68:ED:C7:4B:72:33:CE:6F:EA:6F:99:11:0B:8F:FA
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F43285849A1EF6CF89B591D86B88427C0
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     11721
IP address blocks:        2602:fa8a:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:6c:f8:9b:59:1d:86:b8:84:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=c6704317-4178-448b-9a75-82ea0ccbc195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:44:b3:27:57:73:71:5e:f4:c2:76:54:56:
                    25:d2:38:c9:ad:4c:3a:b0:17:18:0a:85:8e:6e:2f:
                    ab:47:9f:d7:0a:ff:df:94:0a:fa:e2:ed:77:08:0b:
                    66:b3:d1:ad:73:c6:48:74:1f:7b:fe:3d:3b:38:cf:
                    d5:47:57:80:99:49:7f:ac:a7:54:a5:a6:57:ea:dd:
                    0e:94:b9:64:be:70:b7:fc:0a:a9:32:63:7b:24:23:
                    d1:99:fa:17:e2:ef:ab:a2:c3:fd:fd:58:e1:cc:cb:
                    b0:2b:cc:22:ba:ee:6e:2d:3a:41:24:17:6b:83:dc:
                    92:17:ed:69:c5:c9:ca:6c:9a:ec:fe:c8:62:81:fe:
                    b7:0a:a6:ad:3d:a9:4c:c7:91:96:ee:3e:6d:64:b8:
                    ef:fa:c3:30:d7:fa:fc:74:f8:f6:41:c9:bf:3a:35:
                    ae:32:30:1a:d9:33:62:42:bc:25:68:ad:1e:ae:f5:
                    b7:f2:87:73:70:19:4b:2d:35:a6:71:32:e8:84:59:
                    5d:23:23:66:a6:c2:09:17:50:d0:39:95:68:51:10:
                    83:26:71:8d:b1:b0:7a:c2:ce:ac:fa:a2:d3:b1:96:
                    64:bc:5e:d9:62:59:ff:c8:4c:0b:2d:35:5e:bc:a3:
                    ba:a3:ac:bb:04:4e:05:e1:cd:4d:2e:59:b4:d8:47:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:12:CF:96:90:68:ED:C7:4B:72:33:CE:6F:EA:6F:99:11:0B:8F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0e:1b:8b:cd:2e:4b:d3:0f:63:45:6f:c8:2f:20:95:f5:be:
         66:83:ab:a0:2b:64:e8:a8:37:ae:b7:82:a6:06:0c:ea:f6:4c:
         25:2e:08:8f:7d:59:48:82:92:54:2c:70:01:c9:bd:05:d4:b3:
         2a:d3:53:91:ae:06:71:bf:da:a6:cb:47:21:f3:c7:36:f8:93:
         b9:56:f1:c2:11:09:ba:a3:c8:6d:8a:2c:f5:7f:95:e8:68:f1:
         26:6f:cf:62:32:d8:9c:7c:78:2c:7a:4e:5e:91:13:3c:92:e0:
         7d:2b:72:1d:a5:56:54:12:dd:df:57:b4:70:d3:0b:79:32:42:
         c1:16:2e:01:17:d1:1b:47:88:de:d7:d1:62:39:a1:f8:77:d5:
         f3:35:de:94:7f:75:f9:32:c0:a5:cd:fa:ca:89:98:da:8b:a9:
         85:a5:e1:89:8f:db:d0:ee:5a:56:b1:ed:ea:6f:c4:8f:11:d4:
         81:a0:70:0f:0e:97:fd:f5:d2:74:de:8c:f1:87:9e:5c:82:e5:
         45:69:a3:27:ff:ef:17:3a:2b:8c:22:9b:f4:68:2f:d0:3c:7c:
         94:21:5b:27:f0:61:3b:15:6e:91:4f:c5:7d:c4:4d:5f:01:44:
         11:e7:4b:9f:2a:cf:68:d0:65:59:43:71:33:31:8f:6b:4c:1e:
         35:99:96:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:53:28 2025 by rpki-client