Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/d7ccb4be-417a-3235-8990-2844f3fdfc20.roa
File:                     d7ccb4be-417a-3235-8990-2844f3fdfc20.roa (raw, json)
Hash identifier:          AFOr5phqoBw7Edd7W+lFvawQfyRScsGreatDO0FUxy8=
Subject key identifier:   20:74:2E:C3:52:AE:74:0C:25:D7:6B:60:90:6A:BC:3B:3F:92:0B:64
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584A4AD5965A748D3B686A09E400
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/d7ccb4be-417a-3235-8990-2844f3fdfc20.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        2602:277:3d2::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:96:5a:74:8d:3b:68:6a:09:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=95b8fcaf-2a1d-474f-8946-47f08b991e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:d2:19:0e:cb:55:64:bb:54:1d:5c:c3:99:
                    ef:99:49:c3:82:0a:ec:31:6a:f7:f2:a5:e7:b3:0c:
                    ed:0b:7a:77:65:ab:5b:56:fa:b5:18:4d:c4:68:31:
                    b0:9c:1b:b0:14:b3:1f:d2:04:53:45:c6:6e:96:a4:
                    2b:96:e2:82:0e:a4:7e:fe:a1:a4:40:d1:d8:54:d0:
                    71:53:02:c0:72:b6:fa:c4:e3:ed:1f:b2:78:60:0c:
                    bf:6d:06:50:14:bb:18:43:60:a6:20:54:1b:f5:86:
                    50:f4:1f:63:5b:cc:0c:05:94:71:aa:9d:ca:8b:50:
                    c3:30:fb:df:b5:52:bd:c6:9f:a2:16:a4:54:01:f3:
                    90:43:59:ee:ee:e2:51:cc:a4:67:dc:a0:74:03:53:
                    0e:1f:99:23:a4:7a:0c:50:35:af:d0:96:43:66:13:
                    2e:87:e9:37:96:e1:ff:89:21:10:9b:5b:7a:f9:7b:
                    ee:9b:b1:d6:3a:17:e4:d6:34:65:ee:f5:8a:1c:9e:
                    e8:d7:86:29:b5:8b:e4:93:6e:f0:9d:b2:d1:e9:f1:
                    7b:e8:ca:4e:b0:34:cc:65:92:63:12:4d:d2:8f:e7:
                    01:1b:5e:6e:d8:4b:17:8c:a4:66:7e:e3:3b:2e:7c:
                    6a:2b:30:6e:ea:3c:aa:de:82:99:0d:fc:b7:e4:83:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:74:2E:C3:52:AE:74:0C:25:D7:6B:60:90:6A:BC:3B:3F:92:0B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/d7ccb4be-417a-3235-8990-2844f3fdfc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:3d2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f7:c3:29:ee:3f:c0:ab:e7:ae:f9:58:bb:4a:a0:fd:44:d6:
         e5:36:c2:a0:c3:40:c2:d3:74:ea:0b:18:d2:f0:f0:0c:d3:eb:
         09:a8:49:f9:84:dd:52:7c:f9:64:8f:2e:a4:8e:ad:1a:1e:7d:
         49:b3:f0:4a:bd:d8:28:18:97:01:48:b7:c9:1c:99:fb:71:bc:
         61:5c:7c:79:0c:e5:11:d5:a7:43:77:35:a8:e0:4b:d3:05:64:
         9f:38:6f:5b:2c:4b:fb:7b:93:32:91:ad:97:8f:fc:91:59:ec:
         9b:54:26:da:3e:42:78:fc:d0:1f:9c:7d:d8:9c:c3:93:a4:12:
         31:9f:6c:93:8f:b6:7a:69:57:5c:e3:37:16:f2:83:a8:1e:31:
         d6:77:82:ea:ee:4d:15:7f:20:78:46:63:fc:bd:82:a0:cc:d2:
         3a:35:27:d6:5b:1e:4b:33:76:20:dc:4b:41:b7:f7:8a:05:e1:
         e0:14:af:8a:93:a7:f7:be:54:2d:d4:c4:1f:a6:c3:40:d4:81:
         da:ff:95:0f:9a:5c:c8:48:82:bf:1e:05:b0:ae:01:76:6d:e7:
         a9:b1:0b:a3:d6:5f:be:24:a5:8f:37:60:a8:db:9a:05:32:74:
         1a:64:31:d3:35:b8:84:03:70:8b:21:2b:cc:97:ce:e9:6d:0b:
         86:c6:de:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:27:29 2025 by rpki-client