Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/1b00d980-cc85-3a33-8b9f-1f4001aec77d.roa
File:                     1b00d980-cc85-3a33-8b9f-1f4001aec77d.roa (raw, json)
Hash identifier:          LcGUSFpDD167VN9IFQ+4MAsFRIjogl+Rs8XEzFCLXbc=
Subject key identifier:   10:A3:DD:53:D6:D2:EE:7D:55:02:EF:D6:55:03:00:5D:65:BB:F9:BE
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F43285849C545D234961CA9C2C6FA31A8
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/1b00d980-cc85-3a33-8b9f-1f4001aec77d.roa
Signing time:             Wed 07 May 2025 04:48:45 +0000
ROA not before:           Wed 07 May 2025 04:48:45 +0000
ROA not after:            Tue 05 Aug 2025 04:48:45 +0000
asID:                     400402
IP address blocks:        2602:fa8a:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c5:45:d2:34:96:1c:a9:c2:c6:fa:31:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: May  7 04:48:45 2025 GMT
            Not After : Aug  5 04:48:45 2025 GMT
        Subject: CN=693b1407-12c8-47c7-816f-a4d371106053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:71:88:a3:12:17:b2:ad:46:a5:49:39:a4:
                    b4:e0:db:34:76:a4:7a:5c:da:09:0e:cd:a9:ba:2d:
                    e2:7e:9c:25:59:e6:cb:47:7a:19:fe:12:1d:fd:3d:
                    52:96:36:cf:a5:ca:3d:a9:f2:c0:3b:10:7e:f5:03:
                    aa:04:d2:e3:9a:e8:27:e1:06:2f:63:de:3d:cb:c6:
                    b6:ab:26:33:02:05:d4:6b:f3:5c:b4:e7:2f:67:53:
                    b9:f6:dd:4f:3a:c1:4f:dd:22:c4:10:c4:0e:e1:c5:
                    a9:6d:4f:bd:89:be:3b:75:4f:2b:46:bd:f3:36:3f:
                    aa:7a:a8:73:c9:32:d1:bf:de:1f:b0:1e:54:11:97:
                    7c:6a:0e:81:90:56:b3:aa:44:e7:9a:ac:4e:93:95:
                    e3:b1:3c:63:c6:6c:77:04:87:d5:c1:78:c5:52:62:
                    6f:8d:90:72:94:46:17:38:1e:bb:2d:eb:a9:7d:f4:
                    eb:45:d3:84:15:d5:d9:25:bb:23:b8:63:4a:cb:d9:
                    31:47:49:f2:35:38:6c:56:6a:64:bb:62:a3:ca:c9:
                    a0:a0:84:06:37:bd:7b:fb:db:ff:9e:d7:a2:a0:c3:
                    f7:f8:d0:61:bb:8b:61:75:c5:8d:c6:3f:d4:a0:11:
                    fb:d9:5c:0d:24:93:fc:0e:d5:a0:5f:cf:08:f4:37:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A3:DD:53:D6:D2:EE:7D:55:02:EF:D6:55:03:00:5D:65:BB:F9:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/1b00d980-cc85-3a33-8b9f-1f4001aec77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:dd:f2:95:35:65:1b:86:8b:e9:1f:57:34:13:25:6b:01:f0:
         2d:9d:c3:37:10:85:86:d8:a9:3b:f0:97:87:85:8e:c3:90:04:
         5e:b0:98:77:3b:c5:47:6b:e9:ad:c1:73:62:17:a0:c7:34:1a:
         28:7c:9f:a0:d5:72:8b:cc:69:ec:fa:ec:03:50:de:1d:88:93:
         93:78:9b:62:b7:b0:d4:7a:58:c0:73:3c:68:4c:d1:23:6f:8d:
         00:a7:55:4c:ff:aa:d2:07:7a:7b:44:ba:57:cc:57:56:d5:2e:
         62:fa:d4:a7:dd:81:3e:c1:dd:8d:58:e5:4f:69:09:08:0f:73:
         f6:b4:b5:96:81:61:01:2f:22:0f:ae:bb:39:07:ca:d6:cd:43:
         fb:15:48:05:e8:0f:9b:67:84:13:b4:bc:85:94:01:8b:31:3d:
         c4:93:ad:c9:dc:8a:7b:fb:0b:ac:c7:38:f4:e6:53:ce:cf:8f:
         78:79:64:3d:0f:23:88:e9:ce:e7:5d:0f:8a:05:36:5a:4a:0b:
         10:d6:30:cc:c0:61:20:a0:43:1a:2a:d4:a9:6e:81:65:c7:c9:
         e1:36:81:a9:c5:b0:21:bd:68:a3:83:c4:36:26:63:22:14:b3:
         81:2c:eb:8c:eb:9e:ae:bc:ae:95:18:9b:74:b6:c0:c2:40:db:
         74:60:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:17 2025 by rpki-client