Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/1c665ba1-5ff6-38d7-b9bd-ecf95ff8c6ad.roa
File:                     1c665ba1-5ff6-38d7-b9bd-ecf95ff8c6ad.roa (raw, json)
Hash identifier:          gEc/Tm92HW9k4PEoHTNQsJMTu/yHzuGVwJ704hzpVaU=
Subject key identifier:   0B:78:04:9E:6D:5E:78:01:3D:F7:99:9A:97:F4:67:D2:25:AC:89:03
Certificate issuer:       /CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
Certificate serial:       010D0C9F43285849EBEA47F92498A410DC034700
Authority key identifier: C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/1c665ba1-5ff6-38d7-b9bd-ecf95ff8c6ad.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     399765
IP address blocks:        2602:f75c:fc0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:47:f9:24:98:a4:10:dc:03:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=6140fc9e-c67d-47a0-a7e4-84aa1911a56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:85:1e:66:b1:34:b7:3f:3e:c4:95:99:f7:
                    c4:59:d7:14:3b:33:b2:6b:de:cc:ed:f5:17:46:1f:
                    0c:a0:36:44:65:08:39:7f:f9:80:b9:8f:69:0a:54:
                    5b:17:df:b5:4f:82:a5:62:19:59:8e:8f:52:76:d2:
                    4e:4f:ed:e4:b9:87:90:66:cd:8b:eb:e8:04:bd:9b:
                    b9:6a:5d:f2:cc:80:1f:64:57:d1:68:da:32:9e:c1:
                    00:8c:b1:85:cd:46:4d:80:59:c6:fc:70:8f:f6:84:
                    33:4a:90:e4:49:9e:c7:71:e0:72:5e:17:4e:d1:6f:
                    ff:35:24:b7:e6:3c:1a:b9:ec:89:b7:c4:88:d9:2c:
                    12:61:80:47:c6:26:ea:48:bf:7d:3a:1c:93:30:9b:
                    2a:e6:c1:34:84:dc:2d:76:8c:7b:7b:73:6b:55:69:
                    00:d8:55:e1:be:69:6b:ec:73:90:5d:94:09:d6:59:
                    8d:ba:d3:9c:9b:65:58:2d:44:f0:ac:0a:b9:9f:78:
                    a8:b7:96:23:a4:3e:3d:5c:23:76:f2:f8:f7:5f:46:
                    80:87:80:01:b6:b1:1b:76:4c:be:4b:c9:a0:95:f3:
                    47:36:a3:fa:d8:ed:35:3b:3d:d2:ab:c4:57:ef:25:
                    e6:02:0c:10:a7:e7:50:13:6f:9d:5e:27:09:a8:73:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:78:04:9E:6D:5E:78:01:3D:F7:99:9A:97:F4:67:D2:25:AC:89:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/1c665ba1-5ff6-38d7-b9bd-ecf95ff8c6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl

            X509v3 Authority Key Identifier:
                keyid:C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f75c:fc0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:81:49:a2:03:31:04:92:d8:e0:c3:a8:40:e3:f1:2e:c3:4e:
         c9:2c:09:d8:83:e8:0e:8a:df:88:be:cb:05:21:b2:28:f2:b0:
         10:d2:57:67:58:db:46:70:04:10:a6:6c:bf:c9:a3:b4:bc:46:
         a0:22:65:e5:ff:7a:17:fc:10:81:db:e6:0d:b9:be:e3:fb:47:
         1b:27:ca:d0:f9:55:e5:bf:73:8d:63:23:5e:ff:f0:1b:76:a2:
         4b:36:98:5c:83:d8:4d:5b:65:fc:a8:99:fd:28:e9:38:84:76:
         f5:22:7d:6d:d0:6a:38:2d:0a:30:0f:68:1f:a1:03:1d:fe:c8:
         20:4b:28:25:46:12:fa:10:c8:2a:8c:d3:cf:3b:1c:18:6d:68:
         9e:4f:93:38:b8:4e:22:f6:26:c2:51:e5:44:9c:17:5a:23:57:
         51:ab:7e:b8:19:b8:ed:74:a5:c9:19:92:48:24:e6:69:e9:be:
         0c:12:f5:f9:f4:39:57:75:de:2b:55:5a:7f:12:8c:81:8b:e4:
         0b:81:30:ff:48:34:1e:e8:22:e6:15:62:f9:f5:50:08:45:d5:
         a4:6d:1f:b6:6f:5d:fa:b4:99:f9:41:98:7e:fc:0d:4b:fd:85:
         67:7a:37:96:12:32:a7:24:e6:6a:f9:24:7d:cb:a5:48:f3:53:
         69:6d:72:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:35:15 2025 by rpki-client