Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa
File:                     0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa (raw, json)
Hash identifier:          byDdpx20nBRCe9UagVSl45A3S1GeRyT43+2iZm1p+TI=
Subject key identifier:   4E:F8:BD:8D:89:E8:88:06:8C:58:9D:F7:12:B6:AF:93:B6:AF:C2:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB7342D9E970B72B3BA440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        2603:3011:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:73:42:d9:e9:70:b7:2b:3b:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=b3898929-8efd-41f8-b77b-ef648a1e0e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:37:a4:a2:3b:a9:97:57:30:fd:4f:40:ae:
                    d0:bd:f0:78:6c:96:bc:a5:e8:27:01:db:00:17:a0:
                    2b:d6:85:71:07:d0:21:c2:70:1d:5e:34:d4:77:4b:
                    04:87:77:e9:ea:3f:8a:d6:3c:22:44:fe:19:14:b8:
                    dc:66:be:cc:07:08:5f:63:0f:75:99:70:33:a4:94:
                    91:53:d8:bf:97:e6:6e:ca:67:51:fe:14:aa:cc:00:
                    0b:3d:06:15:4b:b6:86:61:e1:70:65:1f:4b:65:61:
                    ba:43:96:61:1f:57:04:92:d9:6e:48:3b:86:a8:76:
                    a7:8e:28:6f:57:7b:59:a8:7a:dc:1b:b8:a2:70:f9:
                    54:71:a5:c7:29:89:59:b1:7a:f2:12:f4:1b:07:ab:
                    c6:72:b9:19:eb:6f:67:f5:a5:28:13:97:c9:57:9b:
                    c0:0d:55:dd:09:00:7a:73:d5:7d:ef:c3:fc:b3:30:
                    7c:0c:e6:46:92:73:dd:f3:9a:b2:a5:0c:1c:6a:71:
                    5c:d1:f9:77:af:53:7a:a6:0f:ed:bd:b3:23:4d:b3:
                    51:03:7f:9a:f1:2d:0a:d1:2f:ce:90:19:10:50:4f:
                    f7:e4:ac:47:4e:26:5f:2b:3e:7c:3c:22:fe:39:87:
                    f5:1e:11:09:60:64:2e:53:57:98:b1:c3:37:f2:4d:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F8:BD:8D:89:E8:88:06:8C:58:9D:F7:12:B6:AF:93:B6:AF:C2:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c8d152f-2f8a-3727-89a2-59a32b10bee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3011:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f5:30:ed:21:41:29:bb:c9:bd:49:f1:7e:86:0c:0e:6d:c8:
         41:7e:e2:35:0b:42:19:3a:98:d1:63:0d:75:bb:b2:0b:9c:69:
         9b:80:bb:01:5e:c9:71:f7:de:95:45:05:1a:32:af:fa:f7:b4:
         04:17:a0:8f:da:86:5e:e5:e8:50:6d:22:25:8b:c0:e2:82:04:
         88:8e:96:4a:6c:76:db:52:a8:03:60:85:a4:c5:56:71:45:84:
         12:1d:c4:3e:27:91:d1:99:ca:70:6c:db:ce:d0:be:df:9f:99:
         0e:f5:c8:31:f5:04:2f:0c:01:b7:d8:bd:dd:de:4a:52:1b:24:
         c2:4e:ce:e2:fb:78:13:eb:e1:a4:89:5d:2a:ac:4b:8d:05:97:
         6c:18:da:98:09:7d:01:88:ec:5b:92:d9:d1:34:c7:37:26:f2:
         3d:24:32:9d:36:87:36:4a:db:e7:69:37:00:53:73:9e:e2:86:
         b5:8b:26:9d:cd:ca:c4:ce:c5:31:79:0e:a2:d8:cb:39:9a:02:
         21:3a:64:40:67:68:11:12:da:96:22:e9:4b:2d:27:1c:ae:ff:
         9c:1f:61:42:52:4e:ba:dc:71:ea:b2:ab:79:ac:7d:74:ce:5c:
         ac:dc:73:24:ca:b6:69:6f:1c:08:c7:94:5a:ce:6b:aa:56:74:
         b4:50:2d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:06:59 2025 by rpki-client