Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38f48b17-c9de-3423-98ca-882fa50f9db9.roa
File:                     38f48b17-c9de-3423-98ca-882fa50f9db9.roa (raw, json)
Hash identifier:          +lFzqxJfq8OkQ1wQLZajxt+QtaNXRkJVP9MuV1Ek924=
Subject key identifier:   CA:17:98:A9:86:DF:04:85:EF:17:55:81:52:42:47:E5:26:24:D8:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D1655BBC8E0A5847D3042100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38f48b17-c9de-3423-98ca-882fa50f9db9.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        2603:3014:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:5b:bc:8e:0a:58:47:d3:04:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=b410efb1-369f-42bf-acf6-3ceac12d3a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:86:82:60:63:99:c1:d1:6b:57:0a:aa:93:
                    2c:40:44:01:79:ea:08:02:26:72:8b:c4:71:c8:84:
                    6c:77:2f:be:a2:94:88:fd:91:75:94:b5:02:34:a5:
                    a3:07:9d:aa:08:ea:75:14:5a:29:9c:8b:52:28:8d:
                    79:8d:32:b3:9c:39:f7:c2:24:db:48:e2:8e:6e:12:
                    ae:cc:6f:dd:00:16:fb:25:23:86:05:b0:a3:2d:c7:
                    eb:8d:2c:09:bc:1c:ad:3f:09:64:00:f6:01:8b:ce:
                    0d:a5:27:4d:d1:79:c5:c3:67:78:fb:2b:28:9d:54:
                    70:69:fd:5e:32:19:16:b8:90:33:81:2f:7b:e8:a5:
                    79:6c:61:1f:e0:8c:9d:08:e9:5a:95:b8:46:e3:96:
                    a1:f8:0d:a5:74:56:59:39:b3:a8:c0:7e:af:87:1c:
                    f3:91:5d:94:9e:74:07:5d:d2:24:e0:c9:5f:63:f7:
                    ff:a2:92:97:ac:1c:91:41:3d:1a:8e:9f:82:93:76:
                    37:7f:78:df:62:de:a1:8f:eb:69:9d:af:de:f2:45:
                    33:71:a4:05:91:e2:54:4a:bf:7c:f3:68:8e:09:5c:
                    7a:3d:16:5e:08:cf:0e:16:92:5b:12:ee:a3:67:56:
                    b1:98:c3:27:d4:02:94:d2:0a:8f:95:09:75:ce:ad:
                    0a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:17:98:A9:86:DF:04:85:EF:17:55:81:52:42:47:E5:26:24:D8:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38f48b17-c9de-3423-98ca-882fa50f9db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3014:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:87:f8:d2:f7:f9:94:22:c5:58:3a:bf:95:69:f3:44:5e:bf:
         f4:75:3a:07:ea:20:67:91:e1:4f:a0:8f:dd:22:91:40:9c:05:
         ca:e7:ce:37:e2:12:b9:8f:f6:de:31:b0:74:bc:31:0d:88:da:
         67:3b:f9:53:b8:e2:c3:78:6b:e1:0c:82:d6:6d:3d:40:92:4b:
         fb:c3:2c:6b:b6:cd:cc:1b:89:92:a3:af:7c:18:bf:6e:32:a9:
         c5:1b:1f:4b:8b:ec:d8:7d:86:12:ad:6c:f3:4c:e7:6f:da:ee:
         55:f5:16:33:71:56:74:2b:85:81:b1:99:23:5a:61:83:8c:16:
         21:c0:ee:22:4f:aa:b3:7e:44:e6:40:81:38:7d:60:c8:c7:c2:
         02:bd:ee:1e:a0:3f:9b:a7:97:fd:c7:10:77:67:5f:17:ff:3f:
         ce:37:64:68:28:2a:75:7f:29:96:bf:a8:eb:66:6b:af:1b:e2:
         c4:98:47:e2:9e:68:54:9d:7b:6e:c3:27:b6:c8:43:89:98:59:
         fa:0f:c0:a7:30:ba:3a:0c:f1:84:a4:dd:46:e7:71:4b:cb:05:
         d5:82:1c:ec:00:a9:07:ad:c4:ac:e2:ee:0d:93:f7:5a:5a:b9:
         3e:a6:9c:be:88:11:7d:7b:b2:0e:79:30:9d:73:8d:b5:94:96:
         aa:55:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:56:15 2025 by rpki-client