Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/a7657824-c051-321c-8734-3026e72e5a25.roa
File:                     a7657824-c051-321c-8734-3026e72e5a25.roa (raw, json)
Hash identifier:          GrxXzGvFSE6e5a/huEDWE/ubIwzbEZEza62W4xmyWiQ=
Subject key identifier:   37:CE:E3:73:C3:C4:9E:35:5E:CA:8C:97:B2:81:DD:6B:F8:3D:78:03
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F43285849EA851EDDBA34BBA15B4E76D0
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/a7657824-c051-321c-8734-3026e72e5a25.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     211562
IP address blocks:        2602:fc26:68::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1e:dd:ba:34:bb:a1:5b:4e:76:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=246024ef-baa5-44f1-88cb-0091d8285439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:67:09:ba:9d:c9:10:55:ae:af:62:6c:30:cb:
                    1f:95:ff:41:71:95:14:df:6e:e6:39:23:3f:fa:33:
                    e6:25:40:e2:5a:ad:0d:e4:c5:c4:6a:a5:f7:5b:c4:
                    a5:bb:f2:fd:30:e4:dd:72:81:96:08:78:a6:f2:a4:
                    4c:f4:86:71:fa:f9:0e:76:32:48:cc:18:78:87:d2:
                    7e:79:9f:61:f7:80:10:e8:16:92:27:08:31:1a:57:
                    0c:07:5d:73:0c:0a:ac:57:6f:eb:68:e2:91:f8:4a:
                    a3:ce:80:b2:1d:29:bc:06:b3:be:23:96:39:1f:de:
                    50:dc:75:d1:a1:9a:1c:f9:15:cc:7e:c7:d8:33:70:
                    4f:2a:cf:6d:9c:de:73:55:c5:74:d8:68:6a:f9:78:
                    77:bd:8b:ea:ad:a6:4a:0c:d7:90:36:6d:6f:22:97:
                    72:4b:3d:d5:fb:91:14:60:e4:84:76:87:55:74:15:
                    3c:28:00:4b:fb:0a:3d:50:ed:1f:01:4e:a3:7b:ae:
                    b0:0a:ed:75:d5:77:11:0c:e1:05:7a:11:8e:96:cb:
                    a4:7c:7a:12:e9:6c:56:6a:2f:99:33:9c:26:50:ea:
                    6f:02:d5:73:95:94:19:fc:32:dd:dc:f1:32:ee:5d:
                    60:c9:6d:cf:9f:cb:fd:33:d0:10:d1:91:db:b2:be:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CE:E3:73:C3:C4:9E:35:5E:CA:8C:97:B2:81:DD:6B:F8:3D:78:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/a7657824-c051-321c-8734-3026e72e5a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc26:68::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:7c:3d:83:c7:89:a2:30:4a:8b:53:6e:68:fa:b4:f3:d6:
         20:96:6f:db:19:9d:18:95:68:21:de:fe:7d:b4:53:35:33:2b:
         7c:9b:53:74:85:3c:e0:21:92:57:52:04:01:4e:76:ad:8c:0b:
         22:ba:80:6a:e7:db:d5:81:1d:8d:31:2a:65:3e:4f:e4:09:e1:
         cf:cc:8f:09:cd:63:e8:73:c2:d0:92:4d:4b:30:1f:44:c7:80:
         dd:99:95:82:99:fb:26:13:e5:6d:d3:c1:c0:37:81:9e:ef:0e:
         44:53:ab:e8:97:e4:f0:04:91:67:21:65:af:7b:f3:f1:11:6a:
         4c:eb:64:7e:34:2d:59:df:59:82:c8:64:53:91:5e:55:84:6d:
         9e:4e:42:f2:dc:b3:05:a3:cf:07:bb:9c:f6:57:dc:d9:f7:ba:
         21:63:80:5f:fa:2b:ef:2a:18:78:32:b3:c9:68:2d:e9:f8:87:
         07:b0:0c:dd:49:f2:dd:0b:d3:85:e4:21:b5:c2:8d:29:bd:40:
         e7:9c:61:cc:aa:b9:8d:2e:e9:01:45:0f:f4:3e:61:c1:2a:ce:
         fb:0b:e2:2d:f0:5e:db:5c:e0:26:0f:3b:1a:31:93:16:4a:27:
         3a:ec:75:a3:e6:e3:fd:93:16:56:e8:1d:39:eb:7e:6e:a1:3a:
         32:ad:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:04 2025 by rpki-client