Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/f7bdad51-4291-3156-9d34-def56833dace.roa
File:                     f7bdad51-4291-3156-9d34-def56833dace.roa (raw, json)
Hash identifier:          ZW1U0Bnoar2ac8GASg8O4aPcS94PHOZHqGFNh4dKZzE=
Subject key identifier:   70:01:73:9A:09:83:41:95:A3:48:A7:FB:D8:05:2D:84:BF:27:32:87
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584B80B752FFCFDCB172290CA880
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/f7bdad51-4291-3156-9d34-def56833dace.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     14618
IP address blocks:        2602:277:d00::/47 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:52:ff:cf:dc:b1:72:29:0c:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=21ed93a2-ec07-47f7-9b1b-3a46f32a9554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:90:3b:66:8e:56:58:d2:09:66:42:4d:49:
                    20:f7:bd:bd:fa:9d:20:cf:4f:96:c1:86:74:78:fb:
                    0d:5d:1a:3d:ca:8d:eb:64:d3:34:a4:78:cb:92:c1:
                    f2:db:61:56:cd:5c:26:74:ca:15:60:6f:6c:16:ca:
                    c5:d8:c3:da:bb:9a:53:69:e8:77:67:8b:36:c8:c2:
                    49:60:49:3b:ca:c8:e2:98:2d:fb:c1:9e:77:b6:80:
                    8b:7f:53:7c:97:ec:b4:0b:fd:dc:48:ae:6c:03:5b:
                    b7:a9:98:80:28:ba:9b:28:00:24:6b:66:67:82:95:
                    f3:99:37:0a:e3:16:1f:30:41:e0:ca:33:5f:28:5f:
                    6e:ef:cb:ae:6d:39:02:b6:42:00:e0:27:c1:cc:b1:
                    a8:2c:63:c2:09:60:16:22:17:81:be:b7:d5:2c:e1:
                    37:b9:a3:23:29:39:5e:22:d2:b7:72:46:b1:b9:f9:
                    7e:97:90:b3:b1:8c:b3:f4:75:c3:6f:c8:c5:71:06:
                    42:7f:d5:d2:5f:57:d9:e4:ea:e5:11:19:dd:cb:d6:
                    d4:73:a4:09:84:e7:f5:08:8a:87:31:3b:0e:b2:0e:
                    1b:cb:6e:e0:58:6e:68:57:54:0b:97:20:b5:7e:92:
                    f9:8d:fa:f5:5e:e2:7c:f2:ee:fb:b4:61:2a:44:19:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:01:73:9A:09:83:41:95:A3:48:A7:FB:D8:05:2D:84:BF:27:32:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/f7bdad51-4291-3156-9d34-def56833dace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d00::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e7:04:fa:e6:2a:d4:49:4f:e9:48:8c:ec:c2:c4:4b:fe:b9:
         d7:c6:bc:29:d8:7b:46:0a:aa:8b:28:9b:1b:04:35:8b:b4:9f:
         32:36:65:e7:4f:eb:e8:59:50:f6:fc:ce:c9:3f:69:1f:91:53:
         a2:c4:5b:b4:47:4e:26:ab:06:e1:4d:be:61:d4:a6:28:4e:10:
         6c:cb:00:b4:12:1c:79:9f:bc:be:8b:df:8d:44:8e:2d:19:5b:
         7d:84:71:63:4e:9d:a0:4a:a1:04:bb:84:f0:8f:37:8b:c4:d2:
         90:04:2d:5f:01:ee:c5:bc:5a:64:9b:86:bd:97:8b:af:5e:b2:
         22:8b:37:04:58:43:d7:b1:b8:25:2a:2f:63:32:ee:8f:ea:4d:
         68:d3:d0:2d:44:82:e1:62:3f:92:d5:37:55:7f:00:6c:fc:ac:
         8d:e3:53:34:d2:6a:83:4e:a1:ab:18:5b:d0:b0:c6:05:03:fd:
         4c:f3:fb:92:de:57:6a:2b:a1:30:c3:4b:f9:d6:39:6f:9d:a8:
         80:43:a8:d5:4a:7a:8a:a0:8a:8b:9e:10:99:cb:3b:6c:06:c7:
         c6:13:a4:9a:fe:b7:85:7d:b9:14:a1:04:ff:43:97:d5:5e:92:
         9b:5b:ed:3e:8c:65:61:80:37:62:6b:79:ba:38:e1:eb:10:05:
         38:42:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:04 2025 by rpki-client