Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02eadd27-3f6a-3b99-8c67-8f7895b41d38.roa
File:                     02eadd27-3f6a-3b99-8c67-8f7895b41d38.roa (raw, json)
Hash identifier:          znXMHKQTHXtX/ahK8aVHlwNwyRVM/YNc8j2O+SFDQCc=
Subject key identifier:   85:50:A6:49:66:68:28:C6:BC:11:D1:F9:8D:D4:2F:44:56:9F:0D:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430E5127A13D29A0AED9200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02eadd27-3f6a-3b99-8c67-8f7895b41d38.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        2603:300c:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:e5:12:7a:13:d2:9a:0a:ed:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=53553c1b-43da-4c14-9234-19cac69a2964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:23:d8:3c:62:a9:56:33:4d:09:f3:84:0c:
                    ea:42:53:e0:65:fa:f3:94:56:70:6d:02:bc:1b:0c:
                    64:9a:fd:0c:fe:b7:11:e8:73:c0:03:1c:ba:d7:2c:
                    c7:33:6d:15:2f:b5:9d:75:70:b1:2d:29:79:1d:88:
                    e7:68:6f:46:74:83:b6:13:ef:fb:42:ba:4a:89:11:
                    3e:c0:3a:ea:aa:dd:77:b2:e9:56:56:ab:61:be:ad:
                    88:2b:db:ff:9b:bd:3f:9b:3f:e5:ab:1b:4f:e0:ca:
                    ad:d9:83:73:b9:01:f4:44:55:02:f8:79:96:e2:0b:
                    64:5b:4d:6f:fb:69:f8:ff:6d:37:13:55:89:d5:8e:
                    bf:a8:6a:a7:70:2f:09:f0:2a:14:84:bf:29:e9:5f:
                    78:93:0f:ae:23:81:37:82:f6:2a:d5:18:fe:72:36:
                    60:1b:4d:ef:e0:23:94:81:24:9d:49:2b:54:37:1f:
                    0e:88:b2:5d:94:7b:6d:14:49:ec:4f:b4:e0:90:bb:
                    c0:7e:ca:32:7d:e8:1d:5d:f3:8f:c2:c5:d9:e9:86:
                    1a:86:79:ed:83:ed:1d:87:26:2e:ac:b1:54:32:e1:
                    5f:d4:60:f2:7f:ae:0b:1a:6b:40:49:1c:9e:f0:5d:
                    ec:86:6c:8d:91:8e:48:e7:10:0c:2d:c6:82:ad:2e:
                    e7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:50:A6:49:66:68:28:C6:BC:11:D1:F9:8D:D4:2F:44:56:9F:0D:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02eadd27-3f6a-3b99-8c67-8f7895b41d38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300c:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:23:46:3c:83:b7:5e:b5:4f:89:16:e5:69:b1:ca:8c:41:84:
         86:54:1b:40:d0:ff:ce:a3:35:c6:db:47:30:43:ee:be:f6:b7:
         06:ab:41:f8:d3:31:07:18:c7:cf:e5:35:78:7a:c9:41:c4:0f:
         49:32:2a:76:70:14:da:54:6e:fb:94:f1:ca:7b:d2:89:03:92:
         97:7b:36:e6:fc:72:9c:4e:83:97:86:d1:6f:3d:f5:4b:89:8e:
         60:8b:c3:3e:ba:12:a3:b8:9b:59:4f:e3:67:da:d1:8d:5e:c5:
         3a:5f:12:3c:47:88:07:d9:a4:87:52:55:67:69:c0:74:7a:e6:
         51:6e:5d:05:9a:61:dd:20:5d:45:88:a9:49:87:1b:4b:97:79:
         10:91:53:c3:21:a4:c5:81:4c:2a:32:86:58:cf:23:7e:e8:3b:
         3e:c5:98:39:13:ff:64:45:d5:b6:c3:d6:3f:3d:80:a9:d7:4b:
         1f:1f:26:cc:61:e1:cc:0d:34:32:8e:bd:ce:20:d9:e1:a1:4d:
         ca:6a:4d:59:d0:3f:c4:24:0b:62:16:d4:f5:3f:49:a2:c0:c4:
         ee:95:5c:f3:78:fe:60:72:bf:64:56:79:89:1b:4a:24:58:de:
         b9:fd:c1:12:4c:1e:6e:bb:51:3c:ef:90:7e:cf:d8:c2:c3:50:
         5b:c6:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:53:43 2025 by rpki-client