Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/16fa16a8-44e4-3c39-9eb1-7d5b762531d4.roa
File:                     16fa16a8-44e4-3c39-9eb1-7d5b762531d4.roa (raw, json)
Hash identifier:          jZ/LzXPiLlXkHHFlI+C/IjJk8y7sLAjirpOxZBgdxRc=
Subject key identifier:   12:49:CF:C0:DC:B9:85:2A:88:AC:76:05:5A:EE:B4:D0:0A:2D:0E:78
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F432858499DBF2F432E706D99BD32A700
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/16fa16a8-44e4-3c39-9eb1-7d5b762531d4.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     14618
IP address blocks:        2602:fcd8:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:2f:43:2e:70:6d:99:bd:32:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=a8630a68-17da-4f4e-afb2-f5fe042a5623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8f:85:a2:45:51:bd:4b:8f:71:3f:dc:3a:da:
                    56:15:ef:83:5f:7a:78:36:41:70:ac:b8:34:56:4f:
                    65:14:87:75:d9:f2:b4:d9:35:69:e8:a2:42:e7:98:
                    5e:73:07:85:6a:1d:b4:9e:09:f4:e3:4c:9d:39:0d:
                    64:b7:4a:bb:25:5c:f5:3d:91:f4:8d:c2:81:a5:02:
                    b0:d2:60:3f:7e:41:0c:c5:f3:b5:56:f4:42:f9:6e:
                    28:c7:d7:d8:f4:fd:50:43:b4:8e:0f:b4:ab:c4:da:
                    1f:48:37:86:f2:dd:54:69:d3:9b:e9:fd:9b:86:6d:
                    bb:1c:35:28:e4:d1:91:6e:23:85:e1:ae:07:8f:28:
                    31:c0:35:18:dd:88:06:a2:63:38:ca:16:05:1b:76:
                    fe:d0:f6:92:42:71:0f:16:f0:77:26:20:b6:e2:5c:
                    09:8f:cc:86:e3:c7:31:8a:2d:13:1b:41:8e:a2:f6:
                    d2:ef:b2:59:2b:a6:37:0f:74:2d:47:27:c1:98:ac:
                    78:7f:45:5f:38:87:c9:21:97:4d:4c:bc:b1:2a:3d:
                    70:7c:dd:3f:56:ec:90:88:83:ab:c1:ee:7c:06:2b:
                    ef:97:1f:38:d3:29:8d:f5:20:77:24:19:bf:96:2b:
                    65:4a:f3:35:58:5b:62:1c:10:00:ad:b9:00:6e:ce:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:49:CF:C0:DC:B9:85:2A:88:AC:76:05:5A:EE:B4:D0:0A:2D:0E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/16fa16a8-44e4-3c39-9eb1-7d5b762531d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd8:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:8b:89:70:03:1f:75:69:47:c3:94:a4:3f:47:11:4b:07:
         57:0c:d5:e9:9b:f0:c8:cd:4d:6f:91:bc:49:0a:e2:49:a8:3a:
         42:ff:96:42:7f:2f:55:b0:e3:f9:c3:63:80:97:f7:27:56:6b:
         bb:47:ef:89:a7:4a:33:d9:e9:8b:77:4e:52:c4:0b:aa:14:30:
         c7:1a:dc:06:a5:53:82:bb:14:23:2b:fc:f4:1e:d0:51:ec:4c:
         9b:52:1e:5a:1c:7a:14:57:50:d8:99:02:30:4d:d1:d7:8f:9b:
         58:0d:52:7e:b8:3a:79:65:da:b6:7b:06:96:ff:3f:2b:46:a9:
         b1:8f:24:2a:fc:71:0e:ce:83:8d:97:4c:52:a9:05:a0:f7:42:
         17:a0:d1:86:5d:d7:67:f4:cc:6e:55:89:11:cb:d6:98:aa:15:
         9c:b7:47:bc:f6:e8:b2:8c:c5:52:b5:cb:9e:14:40:6e:35:10:
         9c:04:dc:58:85:ae:9d:45:75:53:d8:d8:f3:9f:68:68:f2:fb:
         e2:35:2e:df:58:24:dc:a3:d8:29:f9:67:30:eb:12:6b:fc:0b:
         b2:b6:8c:54:70:ed:84:2b:af:65:58:c5:45:03:78:54:5a:2f:
         07:6d:0e:a2:fd:73:ab:2a:55:17:a2:c4:c1:6e:12:81:3d:10:
         25:77:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:20:36 2025 by rpki-client