Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa
File:                     381fe162-8140-3694-81fa-38c3b160b29d.roa (raw, json)
Hash identifier:          p5QUzCII1L3qi1KDZLdqB+MjeYILn4zwfvK7yINzzTY=
Subject key identifier:   16:45:E2:74:F6:66:A8:29:6E:F9:A6:54:11:E6:F3:C6:6A:7E:D1:DE
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F4328584A549B16DECF36306DF3E2CA60
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     400861
IP address blocks:        2602:2da:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:16:de:cf:36:30:6d:f3:e2:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=9b1a9fba-0695-4330-942d-7881d49b00be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:7c:b9:07:4e:8f:e1:a7:51:b0:9c:d1:d0:
                    1f:ec:b7:5e:e9:91:9e:d2:78:84:c0:01:44:fe:d4:
                    dd:eb:b6:99:55:bc:ab:c6:54:0d:08:ef:c3:ee:aa:
                    ce:e2:b0:7e:49:d6:56:6c:3f:d8:06:75:87:20:04:
                    91:59:19:7b:90:7f:6b:12:8e:3a:f2:2f:47:3c:f6:
                    38:96:5e:36:c5:42:05:b8:d5:f0:28:58:31:da:84:
                    32:c5:59:48:71:61:17:f0:34:a7:53:14:0a:07:25:
                    e8:11:00:c6:f2:4a:39:fe:37:b5:94:36:33:fe:77:
                    2b:6d:91:f5:de:60:a2:f9:87:46:45:8f:8e:2d:a0:
                    2d:27:1a:15:64:b9:df:ef:4a:cb:0b:a1:c8:8a:ec:
                    f3:3c:a2:a8:2b:b6:a4:0f:4a:a0:66:1c:d3:88:b6:
                    87:58:6a:0d:fc:21:e2:15:7f:ab:38:2b:9f:be:63:
                    49:a4:af:f4:01:2e:2a:e0:83:06:e8:37:27:64:b1:
                    64:e2:73:2d:f7:75:a6:76:bc:cc:a1:e6:24:2e:cf:
                    de:ae:35:9a:4f:2a:f5:48:3b:08:eb:04:14:8f:44:
                    ef:23:c1:5c:4a:9e:59:21:49:ef:b1:2d:32:7a:68:
                    73:48:a9:41:0f:4a:ca:6f:ca:72:a2:a6:9e:7a:20:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:45:E2:74:F6:66:A8:29:6E:F9:A6:54:11:E6:F3:C6:6A:7E:D1:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/381fe162-8140-3694-81fa-38c3b160b29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c9:5e:69:36:7e:08:de:ef:be:23:d0:4f:c6:13:3f:5a:ff:
         7b:fd:7d:13:51:6a:a1:d3:e9:23:a5:e1:15:6c:46:63:33:8c:
         35:85:78:ad:c4:f1:70:9d:48:40:b6:94:e2:66:20:80:2b:18:
         8d:0a:d4:19:ed:4e:dd:35:46:59:71:18:c4:bc:96:14:81:a7:
         5b:fd:9d:38:cd:48:d5:4f:d5:bc:4f:e8:16:15:cd:ee:d1:69:
         40:f3:3c:96:34:ae:b8:dc:b5:d5:20:76:a8:bf:52:4b:f7:57:
         96:d0:a1:9e:a0:d1:b6:96:c8:ee:b5:8c:d5:dc:22:a1:17:d3:
         fc:7b:d2:ea:e8:3e:a0:b0:37:a4:18:0a:36:8f:a9:8e:b0:1a:
         b8:3e:b7:32:b5:7d:df:d3:37:c7:19:b0:03:67:48:dc:c5:31:
         b4:19:63:84:b4:b4:50:4b:c8:ab:ac:30:7d:9c:86:61:dd:97:
         e9:d8:49:84:39:72:61:51:30:0a:46:e0:d2:ea:5b:74:86:ca:
         49:83:35:d8:9c:e9:f8:a9:c1:3b:91:74:48:38:88:f5:94:32:
         42:18:24:a1:8a:0e:e4:9f:a6:6b:bb:19:86:aa:04:4b:8c:0d:
         38:d6:0d:7b:3b:a9:a2:4a:a1:be:e2:9f:57:02:00:dd:77:bb:
         d2:80:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:38:37 2025 by rpki-client