Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04ff0778-b9b9-3a6e-843f-401261bc73d6.roa
File:                     04ff0778-b9b9-3a6e-843f-401261bc73d6.roa (raw, json)
Hash identifier:          cEuvKpTMtZrUxsml6svKOFla1EuePJ2gY/ms9GICyf8=
Subject key identifier:   DD:15:BD:DD:80:98:22:81:0B:55:D9:BE:30:02:6A:33:5D:B1:6D:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07C4523C0724AA05C4FE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04ff0778-b9b9-3a6e-843f-401261bc73d6.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        2603:2246:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:c4:52:3c:07:24:aa:05:c4:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=922bdab0-f4f6-4f21-ba76-a43380124377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:e1:c7:bf:49:c3:3e:34:57:a8:d1:4a:d1:
                    0e:78:16:81:a3:19:07:f6:b0:c1:52:fa:c8:b0:6d:
                    d1:15:bc:3e:11:f4:77:24:3b:1c:7f:7d:88:14:21:
                    ba:82:b6:9d:53:49:6e:dc:3c:6d:c5:2f:b1:9b:7b:
                    1d:66:be:58:81:7b:6c:68:ad:de:04:2d:7b:87:f0:
                    30:7f:c5:1a:84:06:1d:6a:68:20:a9:45:7f:c9:ed:
                    68:57:b9:cf:2f:e2:cf:c4:b7:4b:36:c1:d8:bf:d0:
                    34:a4:ba:5e:db:f5:42:9a:6c:cc:e9:6d:62:e9:2e:
                    c1:4e:02:ad:a7:cb:05:e7:31:3a:31:78:6e:9a:9d:
                    2f:a8:2e:47:9d:cd:5e:30:38:5b:16:fd:69:95:99:
                    c4:c7:a8:86:00:47:d7:e1:af:93:c0:6f:61:b4:18:
                    31:85:36:29:e3:63:55:40:1c:cc:05:09:9c:ac:6d:
                    09:5f:52:2e:c6:cc:07:09:25:5d:ce:9b:20:39:48:
                    6d:3f:09:d1:42:07:01:f0:b1:4b:1e:07:a1:ae:b0:
                    2a:da:95:6d:91:c1:18:34:59:60:68:a6:96:3a:a9:
                    b6:3e:ed:95:f1:dc:a3:1b:84:c8:a5:a1:f7:8d:c3:
                    43:74:8a:dd:75:a6:56:48:df:83:5f:54:92:73:6d:
                    76:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:15:BD:DD:80:98:22:81:0B:55:D9:BE:30:02:6A:33:5D:B1:6D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04ff0778-b9b9-3a6e-843f-401261bc73d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2246:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:df:f3:c0:14:da:54:92:c9:a2:0e:e6:2a:5c:dc:d4:2e:7d:
         6b:9f:f2:06:4f:d6:41:73:3e:71:7b:c0:be:f6:c5:00:a3:0e:
         5a:07:4a:e7:b3:ed:6d:30:f7:9a:5c:eb:89:b8:8e:75:d7:b6:
         57:ea:14:ae:01:93:07:47:ca:bc:c4:ff:9e:ea:a5:37:1d:46:
         c6:64:92:83:42:b6:65:68:b7:6a:af:09:3e:46:3e:b7:40:a4:
         69:32:d9:da:22:04:86:6b:eb:ac:82:3e:1f:dd:7f:87:87:43:
         0e:a7:59:f0:9a:55:05:37:13:1f:10:10:85:77:f6:a0:c3:07:
         dd:7e:76:30:c8:79:28:0f:c6:76:ba:f3:ea:08:aa:27:34:d8:
         fe:19:9f:2c:12:8b:ea:ec:52:44:f3:95:b4:32:04:c3:9a:d6:
         b3:19:da:4a:fa:87:0c:9a:40:da:cd:4e:ab:6d:06:80:77:fb:
         93:f3:d4:ab:76:b5:e3:c7:b5:53:84:fb:c4:27:ce:d0:7e:e4:
         fb:fc:89:f4:21:62:07:80:4e:c3:b9:84:66:89:03:61:2e:65:
         21:a6:71:69:1c:63:41:a5:c6:f4:20:52:a6:d7:c8:c4:30:75:
         43:a4:aa:8d:61:b3:33:4e:50:b8:e5:a2:72:04:71:9d:54:78:
         17:9a:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:51:23 2025 by rpki-client