Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46f856f5-a9fa-3549-9b50-8a5f492081f5.roa
File:                     46f856f5-a9fa-3549-9b50-8a5f492081f5.roa (raw, json)
Hash identifier:          CQw8v/p5/lUKr4nKGFMs6q3O5z96nch6xvOT7imb6kg=
Subject key identifier:   BD:29:09:C4:58:95:23:DB:A3:9C:0A:78:6E:03:10:27:9F:20:D0:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF25D896E88A3248D0B620
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46f856f5-a9fa-3549-9b50-8a5f492081f5.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        2601:41:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:25:d8:96:e8:8a:32:48:d0:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a2c856db-1e62-40ea-bb63-356441395072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:97:eb:88:cc:5a:d2:26:01:33:52:48:5e:
                    df:09:b4:64:0c:a0:20:1b:b5:ac:cc:76:3c:c7:c7:
                    fd:bd:7c:d9:ac:40:de:f6:a9:cb:c1:cf:eb:2a:0e:
                    d1:52:5a:02:64:46:f2:f2:62:82:47:f6:28:ef:68:
                    29:a5:50:42:13:f3:5e:99:7c:2d:a9:19:1f:7c:22:
                    47:55:01:17:87:db:b1:a4:08:24:81:6c:43:fb:35:
                    2b:85:c8:8d:6e:52:ac:b1:b9:4f:80:eb:32:c6:0f:
                    a1:56:35:fd:25:84:33:82:0f:2e:a2:aa:53:54:14:
                    10:41:02:5a:e1:1f:7b:1d:a1:5b:23:3d:ea:99:ed:
                    ad:1c:6f:dc:a8:19:05:9a:e5:b3:a3:e4:81:7d:99:
                    c2:57:be:8b:7a:9a:48:ec:91:b3:d1:89:16:d1:92:
                    90:2e:0b:fb:a1:6e:96:f7:45:ba:32:e7:06:59:ee:
                    1d:47:66:ff:b5:3a:14:9e:17:2f:77:36:f0:9d:62:
                    ff:d3:1d:8b:26:ec:ff:e0:34:f8:cc:b9:87:d8:ab:
                    b8:f2:88:45:13:27:c4:a6:5c:6a:9f:1a:1b:54:ef:
                    c0:3a:6d:57:b9:45:ff:b7:be:b1:ef:eb:43:15:21:
                    60:8b:a9:64:ee:b5:2d:7d:f5:1d:a8:f5:34:8f:cc:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:29:09:C4:58:95:23:DB:A3:9C:0A:78:6E:03:10:27:9F:20:D0:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46f856f5-a9fa-3549-9b50-8a5f492081f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:41:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:75:90:91:39:a9:9d:ea:34:c8:81:c9:80:b4:fc:df:33:ad:
         fb:7a:57:1c:49:26:3f:cd:5c:cc:e9:62:4c:f3:2a:fd:cf:c9:
         39:29:24:e0:e4:76:72:78:ac:0e:83:19:66:66:0b:0d:cf:ae:
         65:bc:7a:7e:1d:0e:03:b6:9b:d2:7f:73:72:16:a0:5b:c2:83:
         93:19:c7:c0:40:74:78:10:fd:12:35:0e:d9:9e:c1:37:4a:f0:
         b4:5d:cf:5f:b1:f3:65:a1:ab:0a:ec:e4:ca:57:82:2c:27:2e:
         ee:13:f4:6f:4f:67:9c:a0:da:a6:40:c2:c1:e2:36:94:60:c9:
         44:d0:be:95:42:02:cd:ab:31:37:86:26:23:dd:3a:e6:dc:15:
         72:67:cf:85:4c:8f:34:1f:b8:77:30:fd:a4:8f:26:21:c1:79:
         b5:de:98:7c:a1:35:34:87:b6:42:1f:3b:14:56:00:d4:af:19:
         24:0b:8c:fd:44:22:c7:f7:2b:e2:e1:a9:42:84:51:91:e0:15:
         a6:37:67:3b:cd:68:f7:7e:01:55:c6:ac:25:2a:cd:c7:0a:65:
         b0:95:c6:42:ce:e9:f9:ed:8a:7c:7b:fa:2f:8d:c4:7a:60:ba:
         5c:e1:e6:24:17:f4:c5:3c:89:bc:c3:1e:50:66:f0:28:eb:d1:
         9f:8c:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:28:01 2025 by rpki-client