Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa
File:                     c733dc09-d02d-3a61-84c0-81f6e8142032.roa (raw, json)
Hash identifier:          imc6Bw8iW8NpBDJif0XwfBxMILKJwO9wljZ72n2nwoo=
Subject key identifier:   9A:F5:24:43:1F:B0:CA:C1:A4:B2:F1:FF:B4:C4:53:A8:0B:DE:BA:FB
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584A23C00B930950D4D0B9176C40
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2602:277:3ee::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:0b:93:09:50:d4:d0:b9:17:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=4171f856-7783-453a-91e5-be296391fc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f4:f0:3b:58:ed:be:44:55:dd:86:d5:e2:22:
                    a0:b9:16:09:8c:08:ba:06:c0:52:32:3e:eb:11:49:
                    f2:75:72:d5:f2:39:95:32:fd:b4:9e:a7:b7:0e:5b:
                    d4:a0:72:aa:50:53:12:d3:89:95:82:e7:53:19:f7:
                    1d:ef:68:fb:86:b5:f1:27:d3:8d:e4:39:9a:bb:98:
                    32:20:97:a5:26:5d:b8:29:27:f5:9f:9d:4d:a8:0a:
                    c2:79:8d:9f:f5:ef:01:44:5c:d3:bb:d5:9d:e4:20:
                    cc:8a:18:71:51:0c:12:03:6f:26:ab:a8:71:4c:9c:
                    ff:dd:83:c2:3f:c9:2b:ba:2d:cc:6e:32:10:54:c8:
                    4d:74:57:be:23:7b:dc:8c:57:9e:73:f8:83:c9:4d:
                    df:a4:28:2d:69:47:f0:79:54:3e:34:22:14:94:32:
                    85:53:36:0b:42:fc:b2:45:48:3f:e6:3f:13:d6:9a:
                    6a:84:60:1a:4c:9e:45:be:77:b6:84:b1:6f:63:8b:
                    87:18:64:e4:3a:64:9c:20:1c:a0:c1:d2:94:9e:2a:
                    a6:a2:92:56:f9:49:14:63:f2:60:d5:f2:0b:bc:6a:
                    a5:00:73:84:5c:3d:b8:23:59:60:ee:f1:0a:9f:73:
                    af:78:d9:ca:0d:b1:4a:da:69:c6:68:bf:ea:3e:9e:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F5:24:43:1F:B0:CA:C1:A4:B2:F1:FF:B4:C4:53:A8:0B:DE:BA:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:3ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:19:45:00:9c:ec:e0:a8:d9:17:99:be:b6:ba:54:20:a4:43:
         21:07:8c:34:ca:f8:51:b4:28:99:f6:3f:12:8c:3d:36:de:bf:
         3b:f8:bb:4d:39:1e:be:69:73:ef:e2:dd:a4:dc:7c:65:8c:d1:
         35:09:4d:65:72:18:f1:0d:9b:e8:d5:e2:6f:3e:cc:42:8b:72:
         f7:c5:17:22:2a:44:4a:fb:02:fc:b9:c4:ff:7c:1e:cd:07:a6:
         b7:c6:c8:c1:cb:c2:02:17:b7:23:91:2e:2c:e2:fa:30:db:9e:
         26:0f:86:04:f8:8b:ab:f4:4f:5a:6b:47:a5:76:9b:ab:20:d5:
         b4:25:c4:4a:3c:6c:df:4b:de:4a:16:e8:08:4a:d2:d2:2a:5f:
         13:8b:62:bc:c5:8e:60:d4:32:d2:de:97:44:c6:c4:64:ea:da:
         0e:9e:95:d7:6c:e0:49:8c:73:10:04:e9:7a:7a:3a:26:50:af:
         6e:f1:8a:6c:6e:85:d8:6d:b5:3d:b7:18:5b:0c:7d:b1:4a:81:
         31:f8:11:92:e0:88:dc:7d:98:f9:13:ba:ea:00:b7:39:ed:88:
         eb:ab:11:30:d6:dd:f0:4d:23:83:10:52:2c:93:39:72:d3:f3:
         1f:53:3c:82:02:91:ec:d7:fa:d6:7a:9a:1d:e5:1c:2e:de:63:
         69:fb:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:23:09 2025 by rpki-client