Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/773711fe-d16a-3264-8aa5-6b74483fd17e.roa
File:                     773711fe-d16a-3264-8aa5-6b74483fd17e.roa (raw, json)
Hash identifier:          yfmOh0j+MTgxFDkOmPi3dFie5HczkZijAlF4aSX24ZA=
Subject key identifier:   3D:B4:15:DA:A3:D7:D6:19:76:BE:30:95:7E:28:E3:A4:74:58:5F:A8
Certificate issuer:       /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial:       010D0C9F4328584A1465712CE7485DFBC12C4A00
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/773711fe-d16a-3264-8aa5-6b74483fd17e.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     1097
IP address blocks:        2607:77c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:71:2c:e7:48:5d:fb:c1:2c:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=b876eba5-0786-4ed1-a132-a02d1d1e32f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:e9:cb:f8:3f:c6:37:dd:d7:fd:0a:1a:66:
                    57:ab:94:3c:41:39:9c:82:41:39:bb:70:b2:48:80:
                    46:33:ba:51:81:6c:ae:a3:fb:14:0c:d8:8c:b6:2d:
                    73:4b:19:2b:3f:4f:5f:30:2e:72:78:0a:24:4a:10:
                    10:68:34:6d:01:32:4e:6e:64:9d:28:d0:a4:2d:8c:
                    6d:27:d4:4e:0f:ad:2a:df:f1:e9:64:aa:e6:46:16:
                    f1:12:e5:33:af:e4:16:8f:82:90:c7:f0:32:8d:65:
                    83:2a:ec:75:5e:4b:f7:0e:06:5a:18:12:cb:6e:88:
                    b2:7a:38:e3:cb:16:4d:20:a8:89:52:ec:a5:a6:ce:
                    b1:87:1c:45:f3:fd:86:ad:4d:28:2c:5f:fa:78:c0:
                    1a:ab:31:fe:ec:2c:b7:d9:cc:fe:8f:c5:c3:38:a6:
                    c4:d8:a3:94:07:f0:f9:5e:f7:5b:95:de:e7:b4:6f:
                    c1:16:a4:b2:00:df:b2:10:92:50:db:54:3e:b3:6a:
                    de:a3:56:da:ee:5f:6a:67:74:fb:55:55:d4:d9:cb:
                    7d:7a:35:59:3f:37:dc:bd:f7:c8:b6:06:72:bd:3f:
                    fd:0e:5b:95:a1:bb:ed:ca:bb:54:51:08:fc:5b:34:
                    29:26:b2:58:c4:0a:47:5a:26:25:f4:b9:4d:06:e8:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B4:15:DA:A3:D7:D6:19:76:BE:30:95:7E:28:E3:A4:74:58:5F:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/773711fe-d16a-3264-8aa5-6b74483fd17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl

            X509v3 Authority Key Identifier:
                keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:77c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:03:41:85:97:93:1d:f8:bc:d8:6b:3c:a1:6a:a5:b5:6a:26:
         ff:e2:46:52:60:20:22:54:21:65:5b:a9:be:c5:f1:1b:0c:2c:
         8a:b6:12:d0:bb:a5:5e:07:93:4a:08:d4:2d:f0:d2:c8:08:78:
         6c:42:08:27:08:40:66:93:fb:35:86:93:fc:d9:5f:47:6c:52:
         af:14:fd:28:05:8c:86:b4:5d:7e:ba:a6:16:e6:db:10:1e:eb:
         b3:af:8f:3c:68:ec:ea:61:44:80:44:3c:76:e4:9d:60:02:92:
         9f:9e:bf:b6:f9:c4:02:87:c8:cb:11:87:4a:a5:fe:4a:7b:0f:
         10:45:dd:45:f0:0f:40:2b:e4:0c:ff:a8:32:a0:ef:de:3f:a1:
         37:6b:d5:3d:a6:70:fd:d7:20:8d:ef:4d:d7:de:90:c1:a2:17:
         14:bd:4d:e6:48:31:a8:e0:f9:de:4b:04:2b:fa:9b:4c:90:19:
         9c:f0:6b:42:05:c7:27:0d:4c:bb:90:75:43:43:fb:60:20:f9:
         97:b3:13:9a:3c:79:7d:d6:bb:0b:e9:1a:79:78:3f:cb:29:75:
         14:01:1f:d6:87:a8:18:5d:0b:72:1a:7b:d2:97:e6:98:3e:9f:
         86:21:3b:b2:3b:9e:0e:0d:50:ea:64:2d:70:5c:81:e9:66:51:
         f7:aa:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:53 2025 by rpki-client