Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ab74fe1-d2bd-35cb-96fa-4a937a275b17.roa
File:                     0ab74fe1-d2bd-35cb-96fa-4a937a275b17.roa (raw, json)
Hash identifier:          xU3aldJLxtiwZQJpwLpjqNd6fYe8anwl/8sVLeiwFLI=
Subject key identifier:   2C:F2:CF:28:AB:36:6D:BC:76:89:B9:09:D7:EA:98:0B:12:53:3D:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75A2770263C01DB8C2A680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ab74fe1-d2bd-35cb-96fa-4a937a275b17.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        2603:3001:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:a2:77:02:63:c0:1d:b8:c2:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=c94a8069-be38-4061-97f8-0ac8a38c6662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:65:21:53:2e:9a:b6:ba:69:91:e8:cc:d7:
                    d2:a5:52:fb:29:2a:75:f4:5e:69:83:90:a1:4e:a6:
                    28:7a:df:ff:a3:56:55:66:5d:e8:9b:c0:89:36:6c:
                    6d:bf:c2:d3:56:d4:76:4e:93:07:4f:f7:c7:e3:7a:
                    2c:4b:7b:fe:b9:f3:49:dc:15:1b:ec:c2:9c:0a:0e:
                    f1:4e:45:39:9c:fb:04:2d:d6:eb:1e:a3:83:91:6f:
                    16:eb:23:98:7d:50:84:1d:44:d3:8f:40:8e:da:e4:
                    a8:3b:a1:20:98:87:dd:39:d1:69:b2:28:4f:da:c5:
                    33:14:c3:49:c2:8f:9d:1c:bd:45:da:bf:ff:12:0c:
                    41:9b:84:df:87:eb:8e:f0:c3:90:e6:f5:fb:46:7b:
                    30:b8:7f:39:e5:4f:17:c5:be:b5:3f:10:75:ed:6c:
                    e0:19:89:4c:90:d2:45:6e:bf:63:f3:44:23:d9:f5:
                    d0:f3:cc:5b:5d:b9:b8:2b:fe:94:30:fd:89:69:9e:
                    cd:77:ee:b0:0b:2e:34:3b:80:b2:41:37:fd:79:1a:
                    57:c0:7f:b0:46:c1:28:fb:32:2c:f5:97:86:05:bd:
                    1f:02:15:b1:16:90:04:ca:6e:5b:6f:27:79:14:e0:
                    32:ef:3c:28:04:12:c2:90:3b:3c:5b:94:45:ee:3c:
                    91:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F2:CF:28:AB:36:6D:BC:76:89:B9:09:D7:EA:98:0B:12:53:3D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ab74fe1-d2bd-35cb-96fa-4a937a275b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3001:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b1:1c:0a:80:37:47:41:1e:86:fd:b3:fa:07:ad:01:c9:5a:
         3b:ec:3b:f3:94:69:e8:03:f1:af:64:e4:34:d9:48:02:24:36:
         5a:2f:c9:85:2d:c4:87:63:a2:ef:20:1a:b9:78:ae:85:e5:3c:
         d8:0d:3f:b1:7c:12:6f:99:98:95:ca:66:44:de:5e:fd:33:50:
         55:36:6d:84:d9:64:c1:2e:04:19:41:4f:ea:75:5e:0e:f8:65:
         d2:15:28:f2:85:18:da:63:81:d9:92:49:88:b7:c4:6c:58:66:
         f7:dc:d0:af:2e:b0:1e:98:81:e6:c0:88:0c:8b:6d:cb:27:68:
         d9:b2:5c:6c:2e:5d:df:42:35:d2:62:e3:62:e3:7b:a5:e2:c7:
         3e:16:a8:7a:e8:42:27:b5:72:dc:64:bf:c3:88:b2:35:cd:f5:
         a2:74:ff:18:b8:ea:13:97:cc:bd:6d:fa:ed:ce:63:62:98:3b:
         24:b2:d9:47:cc:85:98:92:dd:c4:39:58:4f:65:66:c2:9d:6e:
         3c:fc:47:70:8e:22:e5:f2:3b:f6:92:03:24:08:c1:d7:42:31:
         c8:da:f2:a3:c9:ee:c9:dc:23:05:fd:c8:87:bd:21:e6:a9:fb:
         28:3e:42:3b:f8:1c:67:e9:60:9d:a6:7c:c5:45:a0:b5:b9:c0:
         87:90:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:56:28 2025 by rpki-client