Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b7db0c72-8ee6-3880-b91f-479afc67e884.roa
File:                     b7db0c72-8ee6-3880-b91f-479afc67e884.roa (raw, json)
Hash identifier:          dRR2QKsL6JpY0Oca1d3wOrP+cjorNzHf6j7MysJVygY=
Subject key identifier:   D0:1B:87:CF:A1:0D:6B:7B:10:3F:5B:C6:BB:E9:33:DA:3F:2E:44:D3
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858498CFF0FE917E3FAF086729200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b7db0c72-8ee6-3880-b91f-479afc67e884.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     0
IP address blocks:        2602:107:604::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:0f:e9:17:e3:fa:f0:86:72:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=ae04db78-7d6c-4d62-a8b5-0e835b09a82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:8c:e8:28:79:b8:c7:66:f5:06:3a:3e:10:
                    ca:65:56:48:be:53:fa:94:e1:bd:68:ca:1f:14:8d:
                    82:ed:15:f8:d3:a3:5c:31:20:28:bd:a4:73:96:bd:
                    f6:73:9b:74:1b:a7:f7:1b:ed:2f:fc:c0:0b:26:7c:
                    e5:f2:1e:ab:d3:c3:1c:af:b0:ec:ad:d8:df:52:4a:
                    7f:15:8a:d0:32:7c:5d:da:ff:15:76:f2:6e:5d:75:
                    ca:a7:1b:dc:a3:6a:cc:40:91:fb:89:90:0b:6f:19:
                    f9:c8:e9:f8:20:ec:62:07:cf:d1:49:d5:ea:eb:1c:
                    3a:6e:8d:85:6c:20:a7:c1:49:19:4d:51:5a:2e:d8:
                    62:86:13:b0:66:d6:11:0f:7e:39:1d:24:96:79:8f:
                    6d:d3:61:0b:b4:3b:65:97:37:9e:28:00:08:ea:47:
                    3d:be:78:1a:66:fd:ba:f5:ab:22:57:df:b6:37:10:
                    bf:72:0d:ad:a7:0a:be:59:0c:23:c2:30:44:d6:5b:
                    26:03:a4:37:3a:39:24:85:7c:f4:36:05:d6:45:9f:
                    ba:5f:2e:67:6f:f7:eb:3b:1a:22:4f:a8:8a:ca:4f:
                    27:3a:ee:70:7b:88:7c:97:33:fe:5a:d9:bb:3c:94:
                    7e:92:fc:ab:11:00:bd:1b:4c:d3:b0:85:ed:b1:ce:
                    31:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1B:87:CF:A1:0D:6B:7B:10:3F:5B:C6:BB:E9:33:DA:3F:2E:44:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b7db0c72-8ee6-3880-b91f-479afc67e884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:604::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:6a:ee:29:bc:a3:7f:3b:34:60:66:63:4e:81:6d:dd:ae:
         f8:25:e5:0b:68:84:01:6d:5d:a2:c5:8d:9f:73:a6:56:9d:ee:
         74:05:3f:df:a0:be:b7:c0:d3:f1:ae:03:5a:f7:df:98:e3:c5:
         25:1a:96:95:a4:9c:77:52:f4:47:b0:51:dd:c4:ef:b5:55:23:
         bb:c8:4c:11:c8:53:a4:77:7d:cb:01:27:e2:84:e7:e4:31:5f:
         4f:86:fe:3c:d6:bb:fd:8a:45:10:71:a2:56:58:62:14:41:f2:
         33:be:b6:d6:c3:52:0a:3f:d6:9b:59:98:f4:bd:b0:10:80:e0:
         b4:c3:e4:47:d5:8d:22:cb:85:a2:24:b5:2e:f0:39:e2:db:ae:
         4f:f6:53:67:6f:59:4a:f5:22:2d:3b:03:51:2c:ed:aa:0d:96:
         b3:31:79:03:83:e0:4c:9a:a5:bd:71:7a:3e:eb:3e:d1:9a:cd:
         32:89:fd:ad:7d:36:1f:b5:33:07:d5:96:f1:52:17:ab:e7:19:
         29:63:72:97:37:0a:69:d7:d2:47:49:81:c2:22:0b:75:2e:b8:
         9d:b3:5c:c7:42:97:48:62:90:c9:b7:0f:7f:ca:c4:79:f8:f6:
         b6:26:d1:af:7e:b3:76:91:b9:04:07:4d:a1:72:dc:4b:85:82:
         df:77:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:55:47 2025 by rpki-client