Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3476b5c-14b7-37dc-b0f3-0bf163f22d82.roa
File:                     f3476b5c-14b7-37dc-b0f3-0bf163f22d82.roa (raw, json)
Hash identifier:          /XK4qUKCCtnu1eydwS8pVPJ+shZTKsbrTgeNd7MZw6o=
Subject key identifier:   44:58:5B:A9:C5:73:01:87:A6:23:B4:29:B6:85:80:17:C7:A7:0A:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB6DB71812A04F057B3B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3476b5c-14b7-37dc-b0f3-0bf163f22d82.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        2601:483:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:6d:b7:18:12:a0:4f:05:7b:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=b87ba37f-2b81-4088-a751-f5098f749f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:1e:64:5d:29:0d:4a:0d:1d:98:2f:37:01:
                    8d:4f:d9:46:08:9e:aa:d1:c2:c6:8d:c3:0d:ed:66:
                    a7:1a:86:aa:c0:f8:ae:2d:a1:a6:a0:9d:b4:b0:4e:
                    66:55:a2:a5:1f:56:e2:8a:fa:97:f2:64:67:e2:42:
                    63:34:25:fb:07:1f:1d:ff:fd:13:ad:d0:56:79:55:
                    6f:59:73:c9:3c:1b:c8:b9:d2:7f:60:1c:03:37:64:
                    46:6b:6a:24:e3:f7:c6:b1:2e:e8:34:d2:c6:89:0a:
                    26:c3:9f:2e:e7:eb:4a:f8:37:0c:ae:e9:56:80:f8:
                    ad:aa:c8:c4:7a:0f:d9:64:44:d9:c2:5f:5e:a0:74:
                    ba:20:16:34:10:28:9b:4a:79:f8:c9:22:8b:61:ef:
                    88:38:8b:77:a7:c1:76:89:4b:a8:71:5a:a9:03:ef:
                    cf:2b:f9:ca:7c:42:f0:d7:96:36:c7:26:00:2f:2b:
                    41:a9:be:e7:d1:29:11:09:de:30:87:08:17:82:be:
                    c3:f2:54:ac:bc:c7:f4:91:22:01:22:76:ef:03:04:
                    f3:59:1a:e0:25:20:e3:35:87:b9:52:44:48:bd:e9:
                    5b:88:d8:8d:48:89:ab:4b:c8:d0:a0:e5:18:bd:5a:
                    d6:b2:cf:a0:16:ac:5b:be:16:7a:3a:66:e4:e7:52:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:58:5B:A9:C5:73:01:87:A6:23:B4:29:B6:85:80:17:C7:A7:0A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3476b5c-14b7-37dc-b0f3-0bf163f22d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:483:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:41:b9:58:6f:b8:69:1e:f7:63:9a:dd:95:14:0a:5b:fb:37:
         24:6b:35:95:e8:a2:8b:2b:97:e6:bc:d2:ad:f2:ef:0a:b8:36:
         53:d6:23:f8:3a:aa:c2:af:1b:b9:15:5f:80:47:1b:37:84:3d:
         a2:70:2f:91:f1:c3:3d:6a:fe:e2:9b:ac:b3:7c:e8:fa:03:5b:
         5c:7e:d8:48:fc:34:af:08:bb:bf:a4:0a:a2:3a:3e:fb:69:90:
         4e:73:db:15:7a:46:b9:73:67:3a:5d:65:31:0e:2b:d3:76:f2:
         e7:88:d1:10:2f:43:77:b5:e9:de:21:57:07:4c:af:ad:5f:e9:
         7e:2a:ec:fd:a5:24:85:42:f6:3c:47:29:38:8d:18:bc:97:02:
         cd:fd:13:c6:c9:e7:75:27:a5:85:7f:b3:b1:6b:8e:cf:8b:8a:
         7a:c6:06:2f:26:11:8a:b2:d8:4a:7d:46:a5:87:fa:d1:00:21:
         ce:8b:9f:16:42:56:fe:91:7b:ff:db:c9:50:c3:6c:bb:d4:d3:
         1b:46:90:92:32:33:67:09:cc:46:0f:99:bb:0c:87:c7:c1:84:
         0a:b4:c6:0b:4a:ea:79:d5:81:e1:23:31:b6:16:fb:8f:ad:bc:
         0d:31:5e:76:bf:10:b9:8f:f1:94:06:3f:01:d3:b4:df:00:80:
         d8:c3:08:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:17:59 2025 by rpki-client