Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa
File:                     48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa (raw, json)
Hash identifier:          VefNHmUpW6ULzNwh8nHgrRpgeL8iPHQqQkxvE+BRTwc=
Subject key identifier:   8C:AB:0E:18:32:BD:A4:F2:99:35:8D:33:AD:32:2B:39:B5:6D:17:E7
Certificate issuer:       /CN=e7dfb913-c249-4fb1-816b-a01434dbe079
Certificate serial:       010D0C9F4328584A00DAC006D5A85EEF5EB621C8
Authority key identifier: 28:06:C8:9F:CB:16:D7:4B:E9:C4:87:26:1A:6E:F5:F6:62:5A:5F:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     26533
IP address blocks:        2602:fa76::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/e7dfb913-c249-4fb1-816b-a01434dbe079.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/e7dfb913-c249-4fb1-816b-a01434dbe079.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c0:06:d5:a8:5e:ef:5e:b6:21:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7dfb913-c249-4fb1-816b-a01434dbe079
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=4c7a6b3c-80d9-4cec-bbfe-557de96d8609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:ed:0f:02:98:d1:49:66:e4:bf:c9:c7:8b:
                    18:7f:2e:61:e8:57:98:f7:22:ee:98:de:25:1e:bf:
                    20:c4:27:1f:c3:2f:a9:fd:71:f6:8b:15:ef:b8:6b:
                    17:15:9c:e0:7e:02:2b:5c:11:7c:f9:2f:2f:9d:45:
                    99:1a:7d:15:84:a4:4c:e2:4d:b5:66:f8:4a:71:b8:
                    3b:e3:b0:b6:d7:7b:24:54:26:bc:a3:29:97:95:4b:
                    7f:40:ca:20:0b:1a:f9:88:2f:0f:4e:65:7e:31:6f:
                    1d:97:e0:af:ef:39:39:49:d0:61:8c:42:99:8d:c9:
                    b4:e7:63:e0:58:9e:23:b9:ea:66:6e:87:f5:7b:06:
                    2e:04:76:1f:73:06:94:5a:4c:a5:ca:a1:5c:93:fb:
                    ae:d9:47:84:ee:8a:13:85:e6:e9:d4:a3:08:69:eb:
                    1c:b4:27:ab:0a:57:72:be:c7:23:55:00:22:59:d6:
                    d8:88:7f:8d:48:46:4b:37:b5:9f:dd:42:78:45:36:
                    96:b4:c5:37:9a:11:ed:13:4f:55:1c:62:9b:d3:19:
                    6b:b2:32:cc:bc:60:43:4b:1a:90:4d:35:fc:e8:ac:
                    3b:be:ae:92:ad:bd:af:7b:52:66:9a:b2:ba:31:fe:
                    56:d2:1b:2b:8d:82:03:cc:3a:3d:8a:54:9e:4f:21:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AB:0E:18:32:BD:A4:F2:99:35:8D:33:AD:32:2B:39:B5:6D:17:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/e7dfb913-c249-4fb1-816b-a01434dbe079.crl

            X509v3 Authority Key Identifier:
                keyid:28:06:C8:9F:CB:16:D7:4B:E9:C4:87:26:1A:6E:F5:F6:62:5A:5F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa76::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a4:eb:be:5b:27:4a:a3:95:e2:c4:8d:dc:7f:a3:38:fd:8d:
         f4:fa:4c:84:a0:e4:fe:c0:f5:f8:03:b5:61:ae:0b:85:1c:24:
         3c:d3:52:07:f5:b7:3f:d9:70:ad:0f:e1:ad:d2:9c:ce:67:63:
         c7:c0:22:d8:1f:ea:17:f0:c1:a3:0e:36:11:cd:3c:3f:b5:9f:
         f2:73:9b:cd:ad:34:24:02:74:94:47:dd:79:bf:1b:14:b0:37:
         5c:c3:de:3a:60:bd:b3:6a:2f:dd:51:13:ae:e5:90:43:2d:63:
         32:28:1c:87:9d:77:19:02:0a:aa:99:b2:4b:fd:68:b0:d8:81:
         eb:24:02:d9:d1:3a:28:97:03:85:9b:6e:e5:a1:c9:a7:53:f5:
         26:36:76:aa:d4:3d:99:94:4b:cb:cc:ab:0a:24:18:6e:40:85:
         c9:ca:7b:d0:86:32:fa:6d:ef:f0:ec:4b:94:94:08:6f:94:c7:
         ac:63:f7:b3:f2:de:2b:87:3a:74:f1:4e:9f:10:f7:47:f1:19:
         c4:2f:50:f7:ee:60:5b:84:38:9f:12:dc:03:cf:36:03:fc:e3:
         16:99:44:6f:62:f6:55:b3:6f:da:52:7a:48:7a:69:73:84:df:
         c6:7b:f7:c8:4d:3a:5f:e4:ef:11:ec:21:02:50:6c:99:65:15:
         71:37:e6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:04:48 2025 by rpki-client