Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/74f5b5c3-5536-3396-9029-ed677b8e6ca9.roa
File:                     74f5b5c3-5536-3396-9029-ed677b8e6ca9.roa (raw, json)
Hash identifier:          dUfJRhWNBL1vj2IlHNWhu2Id1cOF/PufD7bkbsUl16A=
Subject key identifier:   B7:94:B2:F2:A0:C3:85:07:35:EC:CC:FB:4B:EE:91:A2:27:1A:F7:2F
Certificate issuer:       /CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d
Certificate serial:       010D0C9F432858498E64886745B2264D69F19FC0
Authority key identifier: 6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/74f5b5c3-5536-3396-9029-ed677b8e6ca9.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        2602:f8d4::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:88:67:45:b2:26:4d:69:f1:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=0ccbde68-1b7a-495c-a5a9-9f7bf1238f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:e9:58:d2:4e:fa:de:fd:e3:58:c3:40:06:
                    cc:34:3b:42:81:ce:c5:8b:01:aa:07:8e:a1:88:c5:
                    f7:5a:2f:4e:10:35:60:1f:3b:82:bc:11:c0:d0:3d:
                    fb:87:c0:82:c6:14:ad:ba:31:da:83:24:5e:06:ee:
                    58:5f:7a:35:93:6c:84:fa:1e:ae:01:06:3a:51:f0:
                    c3:57:87:a6:34:f8:1d:ea:39:fa:a8:b7:a5:f3:57:
                    f9:5d:b9:1b:93:06:5e:9b:76:cf:b7:c2:86:bc:72:
                    c2:84:fc:18:75:ac:42:3d:6c:5b:81:82:25:5a:1c:
                    c6:0b:14:d7:7d:f4:44:9d:9a:11:cb:61:dc:1d:94:
                    82:25:1a:5b:b5:46:85:a6:5f:9d:cc:b4:db:ad:52:
                    f0:e3:18:a5:2b:ee:c4:c6:63:e2:1f:4d:75:21:8f:
                    51:ff:06:c3:74:60:ed:74:97:45:68:3f:82:32:5a:
                    ca:23:00:6e:d3:75:48:5c:a7:19:a7:b3:a6:2c:73:
                    ef:e8:80:e6:59:da:30:c6:3d:73:83:99:18:07:87:
                    10:e7:48:95:bb:5b:0b:e5:3b:37:b1:cc:0b:c0:fe:
                    56:50:5c:c6:03:23:dc:c2:23:88:3e:39:22:c8:04:
                    f9:de:96:ff:2c:0e:3b:1d:69:49:62:c6:a1:f4:15:
                    00:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:94:B2:F2:A0:C3:85:07:35:EC:CC:FB:4B:EE:91:A2:27:1A:F7:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/74f5b5c3-5536-3396-9029-ed677b8e6ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d4::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:42:ec:a9:86:75:f5:b7:de:2e:23:77:dc:84:df:8b:49:34:
         ec:9a:f5:60:2c:04:05:48:8f:29:de:30:75:87:38:3e:30:5d:
         47:61:34:e1:7a:f9:2e:3b:93:0a:8d:c5:04:7f:e2:e2:31:68:
         71:29:c9:63:af:8f:32:b5:bc:e3:bc:dc:f1:0e:cf:4e:5a:ec:
         eb:3d:06:e8:7a:bf:97:03:e3:94:a0:1c:03:97:45:74:ae:55:
         8d:33:ac:73:2a:04:12:06:32:70:d9:2f:01:ae:af:cf:e5:51:
         2d:c7:1c:a8:ef:49:ca:d2:15:fe:d4:87:2c:14:76:59:3f:36:
         de:6c:e5:2a:48:a0:49:ee:5a:b0:89:64:b7:bb:ee:4d:34:09:
         cc:37:ee:68:f3:ce:b0:d5:aa:9e:fe:73:24:85:c2:fc:59:5b:
         4c:2c:6b:87:04:49:06:00:7b:eb:0c:ed:62:1b:dd:96:97:fb:
         cd:ea:36:0e:3a:b4:45:56:2f:0f:9f:d4:9e:50:04:71:5b:34:
         d6:c4:c8:53:ee:86:cb:b9:31:83:3c:c0:f3:a5:b4:6f:e9:87:
         dd:02:fc:34:70:ac:de:b3:e6:f2:5f:0b:45:41:2b:bc:f1:fb:
         9d:7f:5c:90:6d:e2:63:82:a1:79:05:a8:fe:9e:9b:b2:a5:96:
         29:19:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:30:04 2025 by rpki-client