Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7c85fa-e9c3-3d88-a8d1-299abe7711f6.roa
File:                     be7c85fa-e9c3-3d88-a8d1-299abe7711f6.roa (raw, json)
Hash identifier:          qNW496n+DecuzNIWMiBdxua96RXLjZHjNpfcGD3gMSo=
Subject key identifier:   A2:31:5E:1A:5E:C7:57:E0:CD:7C:07:DF:11:42:A6:70:D4:68:5C:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC2CD32CCDB0CBBBAF3180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7c85fa-e9c3-3d88-a8d1-299abe7711f6.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        2601:444:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:2c:d3:2c:cd:b0:cb:bb:af:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=19a26c00-66e7-47bb-af27-01bb31b32147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:d1:d7:6a:59:62:99:ed:43:f6:ff:4e:14:
                    06:63:15:db:bc:77:6c:75:fe:c4:7d:c6:ef:f8:5b:
                    09:57:8a:d5:3e:06:4a:37:11:c1:2d:05:fe:ec:bf:
                    24:ef:ea:d1:5d:bb:3a:d1:2a:51:29:37:6e:90:bb:
                    97:51:4f:94:95:ad:6c:b9:59:c1:22:15:57:e8:08:
                    db:a3:c0:2c:ae:42:1f:42:34:3e:b1:3f:df:5e:98:
                    76:9a:ac:84:dc:a2:67:ef:8b:2e:8e:78:b3:08:03:
                    c8:a5:2f:31:c0:84:69:bc:90:9c:06:be:84:51:4e:
                    9d:a8:c9:73:9e:92:ae:45:0a:3d:6e:c8:ff:9b:4f:
                    a4:64:2c:64:c4:ed:85:94:47:6c:3a:9e:a4:bf:22:
                    db:9a:78:7b:6c:57:c2:51:e7:e6:c6:85:e6:a9:a5:
                    b4:65:d7:0c:5c:6e:33:dd:ba:23:5b:77:fe:fb:07:
                    74:4b:fa:ae:c2:42:9d:d5:dd:e3:cf:92:34:5c:16:
                    44:53:26:e1:6a:8c:38:4a:c1:55:63:c1:e1:5b:3c:
                    25:22:32:a7:8b:16:6a:50:ee:cb:9c:16:e9:ce:8d:
                    b5:cf:e8:25:af:fd:ff:a9:53:31:4e:da:21:32:be:
                    5f:96:d4:ba:d9:48:7b:fc:2b:f0:89:f7:ff:de:b3:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:31:5E:1A:5E:C7:57:E0:CD:7C:07:DF:11:42:A6:70:D4:68:5C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7c85fa-e9c3-3d88-a8d1-299abe7711f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:444:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:54:19:21:cb:2b:e5:d5:02:ac:20:e5:e1:40:af:2f:4d:01:
         33:6d:69:de:60:21:2e:6a:e8:b1:cf:61:5d:c9:54:f4:eb:39:
         3e:a9:4a:ea:5d:2f:51:5a:3b:d9:ec:23:5f:6e:d0:d5:61:a1:
         1c:0c:9b:a9:d2:af:c1:b8:7a:02:51:01:37:7b:ba:74:c9:4c:
         85:79:3d:97:ac:5f:db:dc:ca:5e:76:00:ed:3a:6b:3e:3f:7c:
         a7:b5:50:ab:47:3e:57:05:14:93:7d:c5:c9:f6:17:46:e5:52:
         8f:7f:c9:6f:ae:2f:08:3e:af:60:0d:97:8a:11:5d:2b:ca:3c:
         c1:57:29:e5:b1:5a:f4:d1:14:59:cc:8b:14:f7:41:ae:cb:82:
         bc:d2:00:1e:64:12:55:ec:9a:bb:74:b3:dc:35:63:49:9a:1d:
         a4:e7:51:97:2f:96:a3:4b:be:e4:5c:60:f6:52:5a:96:34:d4:
         22:58:f2:c2:8e:ed:e7:06:91:0c:c6:28:be:ae:b8:e8:ac:cf:
         48:2f:73:da:09:0a:a8:a8:b5:8c:c9:89:ce:6e:5f:c1:34:f0:
         f9:9a:0a:b6:01:9a:fb:5d:0a:09:6e:b1:67:04:b8:26:62:a7:
         3d:38:f8:36:aa:b5:02:83:16:bc:a2:d0:d2:af:2f:ea:eb:c1:
         51:7b:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:11:29 2025 by rpki-client