Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa
File:                     6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa (raw, json)
Hash identifier:          GGUC/bL0+yBNnx5rtRNguDXANciEPK8rJ/gbOHdhxm8=
Subject key identifier:   13:DB:08:8A:4C:FF:AA:7D:75:C3:57:F3:C4:63:DA:1D:47:8B:9B:21
Certificate issuer:       /CN=78f2a37d-9624-4031-908c-08f70f9830f9
Certificate serial:       010D0C9F4328584A03A5536C95722B0BFF2D86A0
Authority key identifier: 77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     399794
IP address blocks:        2602:f9f2::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:53:6c:95:72:2b:0b:ff:2d:86:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f2a37d-9624-4031-908c-08f70f9830f9
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=c8a0b523-17b7-4fc2-9653-72f3335bf16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:e3:6c:e3:de:ce:1d:ad:44:1a:4c:6d:d8:
                    c3:f0:91:35:d1:94:39:dc:0e:6d:7c:85:2f:ea:21:
                    9d:e4:85:07:02:36:c5:ee:bd:22:bf:44:4f:47:b4:
                    95:f5:69:4a:6f:42:43:96:53:75:e3:a7:34:00:c0:
                    e1:4b:8f:79:0f:64:73:12:06:b3:75:eb:31:de:3a:
                    83:47:93:31:19:0f:1f:3f:62:5d:59:0b:7a:98:c4:
                    50:73:cc:87:2a:1c:95:13:f4:18:3d:5c:2e:bf:e5:
                    ee:36:60:21:29:64:56:a3:2c:f4:91:f5:bd:d4:60:
                    81:08:57:c5:f0:4b:c5:64:02:5b:30:92:b6:2f:df:
                    7e:1e:ed:b7:bf:76:69:ba:39:ba:98:8c:22:19:2d:
                    21:c1:f8:3e:00:1c:04:b4:cd:f9:36:d9:7e:94:29:
                    59:ed:b0:89:fb:bc:66:b1:4d:ec:86:eb:14:a2:50:
                    ee:b6:f5:b1:3d:7f:56:d9:f1:b4:b6:68:f8:7c:f3:
                    e3:fb:50:a4:99:96:26:d9:b8:d6:d5:b1:8c:d3:94:
                    1c:50:d9:b4:cf:a3:3f:b4:37:85:ca:cc:be:05:3d:
                    65:65:8d:07:72:61:e8:76:f6:d1:79:af:ca:16:0d:
                    52:9d:b3:a7:24:fd:54:44:84:d9:cb:af:3e:c7:2b:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DB:08:8A:4C:FF:AA:7D:75:C3:57:F3:C4:63:DA:1D:47:8B:9B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/6a761f86-d2f6-375e-8b37-52b4d7d0a670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.crl

            X509v3 Authority Key Identifier:
                keyid:77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:bb:7c:ea:14:c0:72:01:28:bb:6e:2e:3a:bb:be:c3:3b:51:
         61:9c:e4:35:d0:1f:31:54:4c:f7:b5:4c:72:31:b7:02:2c:d3:
         55:af:f2:41:c2:ef:41:58:03:5e:29:d4:48:bc:69:6d:18:c8:
         fc:63:86:e0:ef:5c:d7:82:bc:66:c8:75:fe:5e:45:15:eb:3d:
         46:b4:ff:c5:da:f9:d3:86:bb:13:a1:84:06:14:6b:7e:e9:7a:
         e1:5c:e9:0e:12:2e:77:f1:dc:f0:1b:44:29:83:44:77:3b:47:
         cc:b1:0a:7d:72:07:cb:5a:ca:0b:24:a7:a4:88:d6:8d:ef:7c:
         52:96:93:97:35:08:3c:55:73:49:27:b9:f1:50:0d:40:43:c1:
         e3:d6:47:e1:64:ea:2c:4b:5d:40:1c:08:76:68:66:d1:e5:58:
         7d:af:a2:fe:b7:21:1b:55:bc:cd:15:b9:c3:05:c3:4a:19:88:
         57:cd:d6:03:b4:d6:2a:8d:92:3f:55:29:e6:9c:1e:00:d5:ca:
         0c:e5:bb:9c:d1:87:ef:8b:6e:97:95:3e:aa:9a:9e:d4:59:37:
         1c:6d:6f:26:88:56:9b:32:a6:7a:27:c6:3f:7f:71:aa:0f:2d:
         b7:12:24:22:03:8f:fa:1e:33:d8:73:e1:7d:d8:43:86:b4:e0:
         c9:4e:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:45:36 2025 by rpki-client