Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fe0baa6-bf6d-3e14-b3d1-8177ff2bd439.roa
File:                     1fe0baa6-bf6d-3e14-b3d1-8177ff2bd439.roa (raw, json)
Hash identifier:          hzvTQPUQz+qIN4aDoutu1bTA45+H8ssrKGAOGSjkOH4=
Subject key identifier:   2D:7C:CE:81:41:E6:97:AC:A0:62:C9:8E:A5:F2:DE:62:95:C8:F1:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA4B08ED40AE5CD1D53340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fe0baa6-bf6d-3e14-b3d1-8177ff2bd439.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        2603:2409::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:4b:08:ed:40:ae:5c:d1:d5:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=ef697452-3ee8-40be-86fc-2da5d9be9af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:c5:e3:7b:29:14:be:91:aa:d5:9d:8c:51:
                    fa:61:00:78:db:13:50:8b:70:29:dd:10:72:e4:47:
                    35:98:c1:ec:c1:aa:ca:83:c9:95:2e:b0:57:e5:2b:
                    cc:47:4d:a1:32:13:55:d4:a6:09:25:55:8d:1f:a7:
                    37:62:d5:95:bb:6b:86:61:e6:a7:47:50:8c:f4:1f:
                    70:d7:b0:de:53:5a:80:aa:10:f3:4f:7f:47:59:f3:
                    07:a7:5e:fc:cf:23:d6:0b:72:d6:79:eb:2a:5c:3d:
                    15:c6:4f:00:ed:8c:d2:76:3f:33:22:06:9a:92:b0:
                    b3:98:c8:aa:76:eb:37:e0:66:8c:08:09:cd:b1:2b:
                    98:72:4a:ce:a0:4e:fd:0d:39:e2:46:99:3e:4f:e7:
                    e1:0b:9c:36:57:2d:50:6e:82:67:29:19:ff:29:f4:
                    a6:dd:77:14:5c:0a:bf:e6:6d:9c:4e:43:38:fe:32:
                    68:09:e3:f8:53:65:97:2f:46:b4:00:cf:76:a9:86:
                    2b:c4:2c:ca:15:57:a9:49:ac:3b:15:ca:a6:a7:b8:
                    d6:4d:f2:cd:33:f3:9e:df:53:e2:96:35:ff:95:85:
                    1c:fc:d9:15:c0:d4:fc:72:d3:12:93:ac:64:b4:50:
                    03:50:17:cf:6d:5f:32:4e:eb:7b:a1:e0:e4:05:4e:
                    f4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7C:CE:81:41:E6:97:AC:A0:62:C9:8E:A5:F2:DE:62:95:C8:F1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fe0baa6-bf6d-3e14-b3d1-8177ff2bd439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2409::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:74:dd:0b:c5:21:71:49:d2:77:5d:17:a6:c2:88:a7:8a:30:
         33:d4:10:13:56:64:6c:96:5d:8d:06:4f:cd:23:e4:0a:ef:97:
         2a:e7:79:01:a4:c8:f6:8a:e0:96:51:74:a9:6a:3f:74:f4:5d:
         21:4d:6c:e6:58:50:18:c6:1f:3f:61:6c:3a:41:a3:98:be:01:
         06:ea:83:37:66:45:7b:e6:69:28:d8:ef:cd:27:f2:0b:6c:95:
         55:37:7b:ea:9f:d0:70:8c:ca:a9:f5:37:aa:3b:f2:15:0c:64:
         2c:6e:88:9f:de:96:70:05:f9:11:5f:da:ac:e1:80:5c:53:04:
         30:e2:eb:75:f6:a5:0b:5b:a6:64:d1:ea:11:f4:b8:a2:22:fe:
         8f:6d:65:49:1d:f6:99:ab:41:4d:ad:b5:69:32:95:29:a2:1e:
         9b:de:9a:e8:53:14:48:74:76:eb:4a:5f:e6:55:87:54:59:d6:
         78:60:b5:f8:4c:76:24:ef:c4:56:6c:21:25:ae:b8:aa:8a:10:
         5f:94:db:ff:f3:92:e8:62:05:d6:34:dc:b8:bb:af:b9:b6:d1:
         0c:bc:ef:b5:0b:4f:9b:b2:31:85:36:3c:0d:a9:a7:e7:f2:99:
         5d:f7:cc:36:86:03:00:a3:c5:02:38:fe:d4:e0:0d:1b:27:b6:
         7d:e3:52:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:25:01 2025 by rpki-client