Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/40a34f23-c1b3-3f04-be13-a7bb7bd1c274.roa
File:                     40a34f23-c1b3-3f04-be13-a7bb7bd1c274.roa (raw, json)
Hash identifier:          QNEdaioQJZX3ciZjYhwkrW7rqY1y/YwG5lWFTZq7JT0=
Subject key identifier:   26:80:40:85:D2:A3:AA:47:96:76:66:D0:BF:73:15:B3:41:FC:E2:D3
Certificate issuer:       /CN=7526f790-ccec-40fc-afc4-9d600cb8a815
Certificate serial:       010D0C9F43285849A0551591BCD6999B4089C580
Authority key identifier: A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/40a34f23-c1b3-3f04-be13-a7bb7bd1c274.roa
Signing time:             Wed 23 Apr 2025 23:14:36 +0000
ROA not before:           Wed 23 Apr 2025 23:14:36 +0000
ROA not after:            Tue 22 Jul 2025 23:14:36 +0000
asID:                     396982
IP address blocks:        2602:f742:7f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:55:15:91:bc:d6:99:9b:40:89:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7526f790-ccec-40fc-afc4-9d600cb8a815
        Validity
            Not Before: Apr 23 23:14:36 2025 GMT
            Not After : Jul 22 23:14:36 2025 GMT
        Subject: CN=c8fa5cbf-26b9-488f-8535-04e802a1de19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a0:38:1a:3e:a7:9b:8d:f1:3a:6f:98:16:85:
                    c6:f7:4a:4c:5f:2a:f2:eb:6a:85:7e:a2:83:c8:f1:
                    81:64:d5:70:d3:c5:d9:79:04:5b:1e:be:e6:4f:d2:
                    ee:0b:88:67:ae:66:6d:09:18:b0:44:73:29:a9:2b:
                    c0:a8:c0:b1:5f:a9:3c:47:02:10:7e:09:12:b0:22:
                    31:e1:99:4a:bd:03:c6:4b:0e:66:bf:9c:16:eb:6b:
                    82:7a:f9:fc:6b:83:35:03:6b:52:e4:80:d0:37:63:
                    6a:52:3f:28:4f:cf:41:78:ff:4c:26:ca:0c:88:ec:
                    2f:e3:35:22:d7:ce:38:8d:12:5d:61:15:bf:68:97:
                    11:6a:d3:0f:73:8c:92:ba:08:07:25:b9:74:93:e1:
                    35:3a:20:0a:95:27:5f:fb:e7:0b:c7:76:8e:d8:aa:
                    01:2a:1d:51:d3:68:af:ff:f1:ee:b5:35:86:95:65:
                    72:f7:b1:db:2a:99:f9:f8:a4:3a:47:02:a1:e8:0d:
                    d5:f6:a4:94:c6:e0:ab:10:84:cb:f6:5c:e4:a1:7a:
                    5c:3d:91:f7:9a:88:8d:f9:ec:7c:35:03:e2:ab:7f:
                    c6:49:9d:e7:16:d9:b6:06:ad:b9:bd:12:03:06:6e:
                    f0:dc:86:a7:8e:e5:84:02:f3:bb:71:a3:96:ac:71:
                    1f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:80:40:85:D2:A3:AA:47:96:76:66:D0:BF:73:15:B3:41:FC:E2:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/40a34f23-c1b3-3f04-be13-a7bb7bd1c274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl

            X509v3 Authority Key Identifier:
                keyid:A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f742:7f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7f:57:a6:8f:d0:4f:fb:b1:92:89:f3:f8:ea:04:a2:e9:d8:
         e0:3d:1e:64:70:d1:ef:b4:ac:ad:6b:ee:f6:2d:03:21:52:9f:
         cc:b6:ae:04:cd:af:b1:37:d8:8a:43:dc:9e:75:04:04:2b:c5:
         a5:65:cf:90:89:d1:48:a1:8b:59:de:44:c4:74:2d:aa:47:42:
         8c:72:77:85:48:6d:e5:08:fa:7d:d9:1f:12:94:62:2e:0e:78:
         ca:2e:b7:6b:23:b6:dd:44:c4:a3:7c:a3:ad:7f:6b:19:86:1c:
         df:8b:c6:23:be:24:51:67:8e:20:22:57:4f:8a:ab:d2:42:0d:
         f3:3d:42:aa:d7:c0:fb:43:35:34:4a:aa:21:99:f0:f6:77:cd:
         95:7f:9b:ff:76:06:90:ab:45:b3:82:65:af:da:d8:ab:fd:44:
         67:7b:a2:03:30:ea:ff:5a:9b:b2:a2:6e:04:19:d9:9b:57:74:
         4c:f4:e9:81:70:b1:13:ab:71:7e:e8:40:c8:98:ee:fc:d6:0d:
         82:c8:59:4b:2b:0e:f4:33:d8:d0:e2:d0:6b:2a:7a:9d:6f:c9:
         e3:dc:b5:d4:65:3b:72:ee:24:60:ae:54:bf:9c:cd:5a:b9:0a:
         ff:73:94:d7:52:5a:b0:3a:15:3f:a3:03:a8:55:16:bd:44:99:
         6b:08:40:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:46:12 2025 by rpki-client