Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa
File:                     ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa (raw, json)
Hash identifier:          ARkgy+9ugpTYTTXwr3xUepk3J8EP7LaplAs5PjEawVQ=
Subject key identifier:   3D:EC:AD:11:53:AF:97:84:07:CB:FB:B1:FD:AD:8F:24:36:E5:07:21
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F432858498769B5CD647BE5F795C78B00
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        2602:277:d0::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b5:cd:64:7b:e5:f7:95:c7:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=a87c632d-ae74-4288-8edd-2845c9883f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:29:7f:63:0e:cb:8c:24:df:2d:ea:1f:d2:38:
                    e4:f1:10:fd:9c:6f:14:75:89:db:3d:fa:68:49:35:
                    ea:28:27:03:60:84:b3:25:87:00:a6:63:75:9d:c7:
                    1c:57:40:a8:15:60:37:e0:32:ea:31:f7:fd:ab:bd:
                    db:b0:04:ef:70:a5:e8:49:e1:f1:16:39:56:9d:83:
                    a0:c9:a1:ef:8e:d1:4b:67:d7:ba:e1:2b:00:cf:76:
                    d4:22:7e:ca:1d:b3:8d:f3:53:1b:f3:1d:e5:77:93:
                    5b:bf:38:2d:bf:10:30:36:7c:34:e6:64:3e:b0:b9:
                    c7:e8:7a:5f:65:08:6b:d1:a7:66:2c:4a:87:a9:23:
                    0c:3c:c1:6a:5c:f8:27:76:34:01:6c:f6:fd:98:dc:
                    c6:71:9f:13:71:8c:eb:93:1e:c9:a0:92:0c:b7:09:
                    cd:f8:88:6b:99:fa:a8:ed:4e:01:31:fb:a1:98:c7:
                    70:d3:2e:1f:9b:ea:c7:73:6b:07:91:0a:1a:25:bd:
                    ff:b0:f5:2f:65:af:e0:0e:7f:6e:5a:d7:f4:fe:20:
                    84:4a:25:9a:5b:c9:c9:7d:13:61:66:46:34:48:ee:
                    62:27:30:82:16:f0:72:44:8f:66:25:61:a0:a0:2b:
                    a7:ab:7d:20:39:3b:f6:d7:18:d3:1d:42:58:12:10:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EC:AD:11:53:AF:97:84:07:CB:FB:B1:FD:AD:8F:24:36:E5:07:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:cc:15:53:69:c3:58:97:38:81:0c:62:72:da:6a:0d:77:
         e8:7b:45:81:76:ea:d6:8f:a0:1f:16:04:13:dd:63:26:ad:be:
         ce:47:a7:c6:1d:9c:cf:69:53:b4:fb:40:08:36:3e:47:3b:46:
         86:7d:ea:39:7f:9e:af:92:bf:d3:c0:65:e4:11:1d:0f:33:0f:
         e6:90:77:2c:8d:e1:e8:4a:92:d3:0c:f3:8b:4c:ea:1c:45:ea:
         ad:aa:88:ac:69:08:88:7f:92:03:22:c6:17:3b:3d:a6:2c:f3:
         53:c2:ca:86:36:4a:8d:38:94:82:0c:20:84:86:24:9b:72:eb:
         de:c8:9f:7c:b1:98:6c:c1:3b:e2:53:e0:68:0a:7b:47:c4:27:
         ae:81:23:dd:af:81:b3:95:1f:1a:cd:40:d8:45:25:69:8e:c7:
         cb:76:29:08:f2:2f:f6:ff:7e:c3:f2:56:8e:a3:e5:53:43:5d:
         1e:4c:1e:81:3f:e8:98:29:3f:b4:c4:e3:ed:da:a5:f9:9b:bf:
         df:26:6e:c8:3a:c6:54:a2:bf:7e:ae:ca:b7:5e:d8:a3:6f:b4:
         2b:13:bf:1b:bb:2f:8e:75:30:70:7c:f3:d4:43:e8:bf:a1:9d:
         3e:0a:e1:a8:2b:c3:85:e0:eb:5b:7f:43:bc:26:32:36:6d:f8:
         40:7b:6c:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHabXNZHvl95XHiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2
ZGUzMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
YTg3YzYzMmQtYWU3NC00Mjg4LThlZGQtMjg0NWM5ODgzZjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSl/Yw7LjCTfLeof0jjk8RD9nG8UdYnbPfpo
STXqKCcDYISzJYcApmN1ncccV0CoFWA34DLqMff9q73bsATvcKXoSeHxFjlWnYOg
yaHvjtFLZ9e64SsAz3bUIn7KHbON81Mb8x3ld5NbvzgtvxAwNnw05mQ+sLnH6Hpf
ZQhr0admLEqHqSMMPMFqXPgndjQBbPb9mNzGcZ8TcYzrkx7JoJIMtwnN+Ihrmfqo
7U4BMfuhmMdw0y4fm+rHc2sHkQoaJb3/sPUvZa/gDn9uWtf0/iCESiWaW8nJfRNh
ZkY0SO5iJzCCFvByRI9mJWGgoCunq30gOTv21xjTHUJYEhA3YwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD3srRFTr5eEB8v7sf2tjyQ25QchMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx
MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvZWQwZjFhYzMtNmRkYy0z
NTRkLWE5MTgtYzdmZTRkMTY3NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj
MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl
NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi
MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdwDQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIBOzBVTacNYlziBDGJy2moNd+h7RYF26taPoB8WBBPdYyatvs5H
p8YdnM9pU7T7QAg2Pkc7RoZ96jl/nq+Sv9PAZeQRHQ8zD+aQdyyN4ehKktMM84tM
6hxF6q2qiKxpCIh/kgMixhc7PaYs81PCyoY2So04lIIMIISGJJty697In3yxmGzB
O+JT4GgKe0fEJ66BI92vgbOVHxrNQNhFJWmOx8t2KQjyL/b/fsPyVo6j5VNDXR5M
HoE/6JgpP7TE4+3apfmbv98mbsg6xlSiv36uyrde2KNvtCsTvxu7L451MHB889RD
6L+hnT4K4agrw4Xg61t/Q7wmMjZt+EB7bC4=
-----END CERTIFICATE-----
Generated at Tue May 6 13:16:33 2025 by rpki-client