Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
File:                     85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa (raw, json)
Hash identifier:          hq2CsyLKissrApy7MwbgeroxSGVjS/vnKNlcUss5/i4=
Subject key identifier:   0B:0F:0F:E1:F5:C8:2C:EC:F4:41:61:AC:D9:C7:EB:2F:10:F0:06:00
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584A9D30E22596D870DCB5FC8780
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        2602:277:d00::/47 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e2:25:96:d8:70:dc:b5:fc:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=0c9eb0ce-dd77-4012-8251-b5d03d090d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:0d:cc:6a:9b:54:8a:e8:10:10:b0:2f:ec:
                    c6:5d:11:9d:a9:8c:a2:03:eb:29:31:04:30:40:73:
                    8f:b6:ea:73:a0:67:5c:88:c5:2d:a0:35:28:f2:17:
                    a8:1b:19:bc:51:c0:cb:16:49:83:04:5b:ad:dd:38:
                    13:94:12:19:b1:83:1e:df:6f:6d:8e:15:34:02:4d:
                    6e:34:1d:1f:f4:eb:d0:31:63:de:1e:8d:99:aa:0f:
                    e4:bf:da:c3:2b:54:03:dd:b6:47:86:50:e6:66:e7:
                    1d:90:84:b2:ad:fd:5e:7c:63:93:2a:7b:c2:b4:7c:
                    7a:53:ad:14:dc:a5:4c:10:d3:2c:2c:2a:eb:53:b8:
                    07:89:ae:75:fa:bb:c2:f0:7b:39:18:01:c6:20:fa:
                    7d:14:7a:e7:9f:e7:6a:df:ec:89:86:49:76:f6:c7:
                    42:00:fb:85:32:aa:15:48:3b:83:6b:2f:f6:8a:65:
                    2f:6c:ef:4b:eb:f3:d6:95:fb:71:82:5e:05:8f:c5:
                    26:01:1a:77:ac:e9:bc:06:2f:c3:bb:62:ba:75:0d:
                    ef:d1:be:90:47:38:16:43:a6:8d:b3:32:e1:de:eb:
                    32:c3:34:9b:d7:93:44:70:1f:71:6c:0c:2a:c2:64:
                    10:07:d4:54:63:24:e6:18:16:24:d3:75:48:2b:0d:
                    4a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0F:0F:E1:F5:C8:2C:EC:F4:41:61:AC:D9:C7:EB:2F:10:F0:06:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d00::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:30:1b:4b:b1:6a:36:d4:ce:b2:5a:62:89:07:53:5b:bf:6a:
         10:60:94:52:c2:37:85:db:27:58:5e:ee:9b:41:1c:ea:a1:3a:
         49:01:92:0d:be:6a:f0:43:6c:a0:e2:2f:c3:ae:0f:b5:80:6c:
         42:f5:0d:06:f8:37:d3:55:b3:45:67:a3:3c:76:80:77:7c:a3:
         00:bf:16:d5:91:8c:06:bb:0d:bc:d2:e7:ae:8e:0d:a1:7b:ec:
         1f:da:35:41:fe:5e:59:6c:95:70:7d:2a:5f:10:15:19:0d:13:
         b2:ac:e5:83:24:53:e7:22:b3:9d:77:6e:4c:a0:e6:70:32:50:
         87:9c:fc:b8:83:18:09:72:f6:b9:9f:6c:b4:33:88:7f:39:34:
         1e:59:85:c9:dd:84:d6:ce:28:24:e0:81:e4:ab:4b:a1:31:c4:
         4b:71:a4:d1:c8:56:04:42:02:ca:c0:d2:ef:4d:f7:0b:6d:5e:
         87:d7:8e:aa:50:df:ec:db:7d:c5:69:5b:c4:ab:80:eb:55:ea:
         99:81:4a:a6:ad:50:c9:75:1d:79:94:aa:d6:30:fb:81:16:fc:
         08:1d:3a:49:a1:c4:3c:32:ce:94:43:77:04:ba:2e:8c:4f:56:
         3f:da:6e:c7:06:77:73:6d:28:67:c0:de:08:4e:74:d6:32:bc:
         59:08:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:31:53 2025 by rpki-client