Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa
File:                     72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa (raw, json)
Hash identifier:          w/ceDxIaiVV/2fkQhSvsu1dXVEI0HyLMUH6QmTggDvU=
Subject key identifier:   67:DB:97:A3:47:6B:7B:6B:97:D1:3C:AD:36:C5:1B:A1:AA:CF:96:1D
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F432858498E648BB7B488674A3FC99F00
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     19651
IP address blocks:        2602:f9ec::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8b:b7:b4:88:67:4a:3f:c9:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=b2fcbc30-58e5-4f10-b076-94af67d05893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:7d:4d:2a:02:be:77:be:bf:09:c6:c9:f3:
                    ab:c3:9c:fe:d9:a9:40:aa:47:0b:55:f8:44:e5:03:
                    4c:5f:29:89:7d:21:86:3a:b1:bc:49:b1:6f:02:d5:
                    58:a1:9d:b7:e4:33:41:31:d4:55:51:17:75:dc:13:
                    95:1f:9f:96:8d:d3:ad:56:82:2c:71:4b:71:41:2c:
                    17:e7:08:cb:d2:d5:bc:f9:13:bf:fe:fc:e7:04:e7:
                    e2:9d:b9:6d:03:52:1d:9c:85:64:a7:93:82:34:37:
                    01:c8:8c:99:46:e3:18:7e:01:03:5b:7f:41:54:bd:
                    fc:7d:3b:9e:7f:33:0d:fc:7b:10:55:ac:7b:e2:b4:
                    12:91:75:60:c7:60:e3:03:f4:7c:73:17:81:c0:e8:
                    f3:c8:d0:a2:19:3f:70:da:0f:01:fe:69:1e:b2:30:
                    7d:c0:8d:27:fc:bd:e2:f6:8d:28:19:8a:9c:3d:ec:
                    c6:da:1e:12:8d:34:42:b1:0c:f7:5f:3e:1d:ad:17:
                    20:1f:4a:be:3c:f3:76:b0:a4:74:5b:64:99:7f:35:
                    56:c8:b8:87:a2:9a:9a:44:e4:85:53:4c:5c:55:e7:
                    53:6e:4d:1d:5a:1c:33:37:d4:9a:dc:1c:96:ff:79:
                    a8:dd:ff:f4:a1:fb:8b:2b:e6:db:48:b6:b7:e3:e2:
                    21:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DB:97:A3:47:6B:7B:6B:97:D1:3C:AD:36:C5:1B:A1:AA:CF:96:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/72dcbffd-aa50-3b47-a2bc-0a5442f9a835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d5:e1:33:fc:ee:6c:6d:c3:e0:6a:06:47:90:41:56:1e:a4:
         3e:8c:95:e2:f8:5e:7e:bd:1c:70:4c:a6:dc:da:50:88:18:10:
         29:33:48:8d:1b:72:9c:36:b2:6f:03:7d:dc:09:10:f1:37:e0:
         64:99:ec:fa:f2:40:4c:90:48:81:e1:8f:27:3c:0b:fd:d2:dc:
         f0:94:d9:11:9e:03:c6:10:ed:ef:93:71:79:8e:e0:5f:0c:35:
         42:b2:43:00:dc:84:2e:3c:c3:b5:b3:d2:9e:ac:aa:85:f4:a0:
         d4:94:5d:b1:bf:c1:7e:11:69:df:37:5a:b3:22:c3:5d:c0:e5:
         8d:eb:78:25:31:fd:24:23:41:e2:61:d4:81:28:c0:52:c0:de:
         7e:36:78:45:2a:1e:71:ab:95:34:a6:80:62:b8:f3:a5:c4:40:
         84:91:8c:c5:95:30:e5:49:25:5f:3e:d0:a0:d7:b4:35:f9:bc:
         da:70:d6:88:7e:50:30:30:63:22:a0:00:2a:2d:a5:d6:88:ce:
         69:f4:56:e7:c5:9f:4f:32:18:21:c8:cf:13:3c:e5:6b:2b:d5:
         8f:e3:71:e8:5f:8a:50:77:fb:02:e4:6d:02:99:20:a9:e8:2c:
         58:aa:b6:81:95:75:ae:c6:92:be:b6:6a:5e:9c:1c:02:eb:bb:
         93:3d:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:26:16 2025 by rpki-client