Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/07f32588-d6b4-3250-8be3-5e0ce175231a.roa
File:                     07f32588-d6b4-3250-8be3-5e0ce175231a.roa (raw, json)
Hash identifier:          lr8Rpj/MmIRuJEcvUzIEnLfuzuggGW/qrINm7la11IA=
Subject key identifier:   2D:F1:36:F9:02:43:91:40:1E:7A:EE:AB:D2:64:AD:38:11:89:36:14
Certificate issuer:       /CN=f6a6838a-15aa-48f4-960c-d9d0071829af
Certificate serial:       010D0C9F43285849955F254676CC360D77898680
Authority key identifier: 21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/07f32588-d6b4-3250-8be3-5e0ce175231a.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        2602:f95d::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:25:46:76:cc:36:0d:77:89:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a6838a-15aa-48f4-960c-d9d0071829af
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=19173c63-4a5a-418f-889a-0dc5ede151ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:67:8b:55:a2:50:f4:78:4c:72:d1:59:8c:73:
                    b1:91:97:63:c4:46:af:41:17:e8:7e:af:48:a8:9c:
                    c2:d2:1b:31:20:62:b4:36:b3:27:25:92:d5:38:db:
                    0e:c8:99:49:80:8e:2b:e1:df:fd:5a:b5:64:cf:f3:
                    8d:57:f7:43:f9:dd:f1:a1:9a:df:68:94:92:ad:5b:
                    ed:e7:e1:58:25:38:78:ee:91:8d:05:5e:e7:60:27:
                    f0:f9:5a:7f:a6:a5:8b:13:01:2d:0a:70:db:12:44:
                    f6:04:45:a2:00:3b:1f:85:38:fe:db:dc:4d:b4:fd:
                    cc:95:3e:c2:3e:b4:74:b6:e7:db:be:df:a1:f4:be:
                    5e:d1:70:4c:7d:87:31:6f:3a:2a:b7:9a:ec:45:c6:
                    14:ef:c0:5e:5a:c6:a0:25:97:e7:1b:89:6a:8b:07:
                    e7:e0:b5:80:e1:12:2b:c6:1f:fe:ba:10:e4:6e:7e:
                    06:85:c2:ca:ff:67:71:fe:b6:a4:89:bb:26:e2:e1:
                    05:08:ac:cc:8a:c1:78:b8:99:e3:80:a6:47:f3:6d:
                    cf:3a:1e:47:a8:6f:27:18:c2:24:41:5a:13:74:42:
                    de:00:41:3f:ad:d4:95:17:f6:51:71:00:8e:53:77:
                    21:c1:26:40:d8:7c:b7:59:ed:d5:f9:00:77:db:ad:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F1:36:F9:02:43:91:40:1E:7A:EE:AB:D2:64:AD:38:11:89:36:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/07f32588-d6b4-3250-8be3-5e0ce175231a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.crl

            X509v3 Authority Key Identifier:
                keyid:21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95d::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:0a:4a:a2:d2:c6:e7:98:4e:04:34:17:d7:1c:13:19:fb:11:
         1c:29:aa:d8:9d:b6:8e:99:a1:1c:33:a5:d8:91:c2:b7:9c:13:
         9b:a7:3a:98:71:d7:af:88:5f:0f:c9:5e:63:5d:8e:ff:ba:f4:
         44:3a:37:0d:bd:9b:97:c0:b4:06:79:4b:52:1e:fd:34:f0:af:
         0a:a6:1a:82:39:87:63:19:07:e2:5d:ba:05:30:f2:8b:15:7f:
         5f:02:a1:3e:74:97:88:e6:44:73:2a:72:7b:7e:3d:07:a5:cc:
         f5:4a:38:bb:1f:44:53:6b:42:53:a5:ed:39:bd:00:19:43:b0:
         df:bb:1f:a1:98:6a:a8:b0:b9:13:21:69:87:a8:c1:23:25:af:
         6f:4b:b4:27:bb:37:67:f5:e5:81:e4:8b:64:04:c9:03:6d:7e:
         fc:6a:c8:69:ac:b9:6c:07:01:d3:7f:7b:fb:1a:9e:69:9f:ab:
         fd:a9:02:6b:0f:13:74:4d:77:2f:a7:05:84:06:c2:d4:1a:05:
         d9:c7:16:ed:ae:78:3d:6e:47:46:4c:2d:d7:2c:5f:4b:45:0f:
         58:d9:d1:f3:e9:27:1c:5d:57:9f:15:f3:50:1f:80:67:ec:76:
         96:b9:da:7e:f8:d3:2e:54:f5:ca:10:7c:bd:e6:ca:2a:c3:dc:
         d2:5a:df:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:57:20 2025 by rpki-client