Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/78391bf5-1171-35e1-9bef-eb0a933c67ef.roa
File:                     78391bf5-1171-35e1-9bef-eb0a933c67ef.roa (raw, json)
Hash identifier:          1UrECAVUDwtvYWITVPkyx7yJ8xi2pC5z3vT9ZH1B8ek=
Subject key identifier:   6E:F2:A1:21:AD:15:DB:B8:79:E1:35:37:71:D3:0C:EC:AF:FA:21:8D
Certificate issuer:       /CN=7526f790-ccec-40fc-afc4-9d600cb8a815
Certificate serial:       010D0C9F4328584A9FFB8699711E940B9983DE00
Authority key identifier: A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/78391bf5-1171-35e1-9bef-eb0a933c67ef.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     8075
IP address blocks:        2602:f742::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:86:99:71:1e:94:0b:99:83:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7526f790-ccec-40fc-afc4-9d600cb8a815
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=22a4be60-7c53-4dcf-81da-8422578f4cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:3f:bc:6c:91:46:92:14:52:ee:cb:7f:69:
                    db:b7:9a:54:db:9a:ba:2a:a7:1c:76:8e:4c:81:0a:
                    0a:d2:ad:e6:b9:97:b3:7b:0e:89:eb:dc:26:dd:aa:
                    e7:c9:0f:dd:17:64:bd:3d:af:58:cf:90:10:e2:0c:
                    88:5a:ea:ed:d5:21:3d:c2:2b:cd:58:2c:fb:bb:b7:
                    23:96:39:dd:17:2a:51:69:2f:f9:e8:46:dc:0f:ed:
                    06:ff:3a:62:77:89:1e:e5:21:82:27:01:57:c8:62:
                    bd:a3:ae:b3:a4:ea:e1:71:af:9e:52:e1:e1:55:b7:
                    9f:65:3b:fb:6f:fd:82:3c:55:3b:12:07:d1:d7:4f:
                    57:ea:01:ef:e3:de:0f:44:00:39:16:af:a3:9d:65:
                    26:9e:9e:24:ab:2d:3e:15:10:dd:22:08:34:66:f4:
                    18:02:a3:bb:12:67:b0:c3:f2:5e:69:0f:8c:a5:64:
                    bd:3b:c2:e3:ef:a1:45:39:a0:87:79:ea:03:1e:00:
                    3e:fc:9c:b6:6b:5c:32:9d:e1:2b:2f:a6:0f:a3:08:
                    2c:d6:16:21:02:07:c0:de:49:69:a4:7c:b5:40:82:
                    de:5b:bb:74:67:c3:84:3e:4b:14:f1:73:5c:70:bc:
                    fc:ac:ad:72:08:f5:64:cd:93:2d:af:a6:ea:44:b3:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F2:A1:21:AD:15:DB:B8:79:E1:35:37:71:D3:0C:EC:AF:FA:21:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/78391bf5-1171-35e1-9bef-eb0a933c67ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl

            X509v3 Authority Key Identifier:
                keyid:A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f742::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:33:41:ad:78:d2:b8:f3:bb:b4:f1:7b:6e:57:b0:37:bf:da:
         db:dc:02:6c:00:e1:7e:cd:a2:5a:37:d1:4d:77:01:8b:28:0b:
         c5:0d:8c:3e:aa:9e:c8:de:2e:bb:b0:1e:9f:77:0a:7b:96:cb:
         14:9a:c3:67:81:9c:5e:38:22:3c:b7:ca:f5:21:69:8d:97:0e:
         33:0d:b3:80:05:d4:a0:84:fd:e4:40:68:5e:ef:d3:da:ee:7a:
         f7:46:9b:8a:61:01:87:58:f1:c8:a9:8f:68:15:5b:ad:11:5c:
         c2:8a:bd:59:b7:de:3b:24:5d:80:fd:05:7b:55:20:bf:2b:0c:
         34:45:f9:a2:2c:ca:da:1f:25:19:3d:07:6a:3d:91:81:bf:18:
         53:48:f6:8e:29:73:84:e2:73:c4:f9:2e:31:25:ad:7d:c7:8b:
         6a:fc:55:20:ec:a7:57:4d:24:1c:63:ad:ae:82:29:b2:42:c2:
         e2:7c:9a:3c:3d:03:07:78:55:02:be:78:5e:24:af:35:0e:3e:
         02:58:e2:b6:53:cf:eb:04:fd:50:5e:be:af:b1:a8:80:33:ec:
         ee:20:0a:82:b5:c2:af:47:bb:f9:b9:46:5e:38:0f:8f:d4:35:
         06:bf:39:c4:97:04:04:fd:5b:d1:e5:2b:c1:06:5f:73:ee:23:
         f8:e4:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:16 2025 by rpki-client