Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4652994e-67bf-3996-b0f4-45e676421927.roa
File:                     4652994e-67bf-3996-b0f4-45e676421927.roa (raw, json)
Hash identifier:          vN1F0TqighDIz6iynTMw1Ea5lmI9eMHCuSAM5k8Jt1U=
Subject key identifier:   77:7F:57:0A:A1:79:F4:08:10:5F:56:24:C4:E0:76:57:A6:8F:2A:FB
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584986046A1E05D7E402CCB92680
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4652994e-67bf-3996-b0f4-45e676421927.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     13778
IP address blocks:        2602:282::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:6a:1e:05:d7:e4:02:cc:b9:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=a6f49b70-247e-42d7-a103-15debd485f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:77:34:e4:73:da:47:29:f9:e1:73:e9:c1:
                    10:9b:53:7d:05:42:55:28:15:09:50:3a:05:87:dd:
                    fe:0c:93:a9:d5:9e:e5:9c:91:3d:36:32:50:7a:7c:
                    16:ab:86:bb:71:76:d5:02:03:8c:f4:48:b1:05:69:
                    08:c5:07:ae:e7:03:aa:8f:c2:12:b6:6f:b4:83:fb:
                    7d:6c:dd:a1:03:13:89:46:fc:47:d7:65:c5:17:dd:
                    ac:47:82:e9:e8:71:6e:99:a1:9b:59:17:ff:3c:a1:
                    83:0d:89:7e:96:36:51:0a:6e:8e:75:f0:86:19:75:
                    d5:a7:43:83:39:38:fb:5f:d0:c1:61:e8:64:87:35:
                    22:ee:65:8e:a9:4e:8d:a1:eb:63:2d:3a:6c:c1:ca:
                    52:fb:3d:18:a2:40:88:6a:01:34:c9:32:dc:cf:79:
                    b9:07:a9:fc:28:03:34:3c:14:1c:7e:9f:cb:cd:b6:
                    d1:69:4e:7d:70:68:6c:d3:bb:81:b5:f6:03:6a:fb:
                    6e:99:cd:54:ab:d9:f8:a3:08:d3:f0:81:82:d8:0b:
                    82:f2:c8:b1:ce:0e:a1:fc:3d:c7:f1:1f:c8:02:1c:
                    9f:fa:d6:bc:74:a2:fd:48:a8:b7:d9:81:48:05:14:
                    70:66:2a:59:0e:10:6b:af:fc:64:30:f4:70:d0:b9:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:57:0A:A1:79:F4:08:10:5F:56:24:C4:E0:76:57:A6:8F:2A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4652994e-67bf-3996-b0f4-45e676421927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:282::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:e5:cb:18:b8:26:45:40:e8:cb:f0:57:21:ec:65:99:46:
         2d:19:d9:0b:c8:52:f7:9c:c0:f9:bc:ff:8a:59:b8:10:e4:55:
         96:b3:28:03:da:02:77:85:17:8c:7a:cc:06:83:a1:ed:85:51:
         af:f7:68:50:64:62:ca:23:20:f4:59:a3:e1:1a:7e:a8:35:6e:
         b1:a0:9f:85:e1:85:af:47:9e:ee:88:2e:4e:9f:7e:16:3e:33:
         6b:74:19:83:44:6d:91:32:d4:5c:b2:36:02:07:7d:6b:88:24:
         0e:e4:84:fa:a6:ed:30:49:cf:51:8d:d0:f5:be:8a:64:02:34:
         03:3d:a9:be:ca:7e:e4:0b:ed:dd:40:8f:fb:fe:a9:d4:94:0b:
         19:a2:89:75:49:24:e0:bb:19:8f:02:47:43:f0:a4:24:c4:33:
         d1:88:16:ac:71:37:3d:cb:53:0e:a1:34:0c:a0:43:56:ae:1d:
         04:d1:2e:88:56:0d:24:64:2c:d7:da:08:5a:5a:00:43:cb:4f:
         3a:1f:6a:b4:29:bc:0e:6c:0f:c9:ec:17:9c:ce:d3:61:57:75:
         6f:25:9c:3a:32:5f:dc:38:c5:56:4d:96:58:bc:e6:af:c2:f5:
         ed:de:ff:19:8a:ec:86:bf:b1:18:61:f0:22:db:06:91:54:3f:
         e5:d8:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:25:51 2025 by rpki-client