Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4939ca9d-c23f-3761-b6f0-47587001bfa7.roa
File:                     4939ca9d-c23f-3761-b6f0-47587001bfa7.roa (raw, json)
Hash identifier:          EpOUD7TIy3j7rTH/Rgp0PwF0TFvq597/MdDdUvQsz64=
Subject key identifier:   43:94:2E:3B:EC:C8:D8:7A:05:2D:6E:AA:6C:A1:8E:B5:A3:C4:ED:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D165581B61A33A3044B7F040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4939ca9d-c23f-3761-b6f0-47587001bfa7.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        2603:23c6::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:58:1b:61:a3:3a:30:44:b7:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=52938ff9-a34c-49c2-ab21-ed300bf817e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:ed:8c:40:d7:22:84:d5:0f:e8:87:65:da:
                    83:ed:6a:1e:be:da:78:e4:cc:ee:48:df:1e:7a:fb:
                    ae:09:9d:1a:31:37:c7:0c:10:8a:61:6b:24:9b:3a:
                    6d:2b:97:42:19:b4:dd:51:a4:74:2e:e3:82:cc:99:
                    95:aa:7e:82:52:4a:1b:b2:4a:aa:9c:db:72:64:6c:
                    2e:40:70:90:07:28:72:75:1c:bd:90:04:b9:f0:72:
                    0e:86:b2:51:10:68:eb:6c:a2:5e:19:51:7c:38:d3:
                    67:e1:93:39:50:9d:b8:ef:c3:bf:b2:8b:96:a8:5a:
                    25:c6:b0:43:0b:5b:7f:55:c1:22:67:41:fa:0f:e0:
                    f1:2c:c5:fd:43:a2:8a:e2:d0:08:bb:4d:72:fe:03:
                    c9:4a:81:b9:10:14:fb:41:8a:80:61:d4:b1:3b:2d:
                    89:cb:a3:e9:f5:49:43:b2:3b:7d:43:a9:48:43:dd:
                    82:cd:4e:2b:c6:ec:68:7e:99:40:46:de:25:a6:3f:
                    a7:74:d1:bf:13:2d:f3:f9:74:53:a6:13:e7:81:0a:
                    27:83:4f:1b:fb:65:2e:37:b2:42:af:fb:cf:03:a5:
                    b6:e4:2f:05:90:d4:2f:c3:aa:0e:8f:6d:ba:ce:9f:
                    86:f5:48:00:4b:11:f4:ff:08:75:fd:42:be:aa:e2:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:94:2E:3B:EC:C8:D8:7A:05:2D:6E:AA:6C:A1:8E:B5:A3:C4:ED:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4939ca9d-c23f-3761-b6f0-47587001bfa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:23c6::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:25:70:13:d1:3f:2c:37:9d:b6:68:c4:dd:a7:ed:be:1b:8d:
         b6:11:85:2c:63:8f:67:8c:eb:b0:f4:0e:ee:a2:ee:75:22:c6:
         db:b3:93:a0:ec:0e:48:7a:55:29:bc:cc:b1:11:92:bc:a6:d5:
         3e:71:a0:a3:99:d4:d4:94:f8:f5:5a:da:91:01:a8:11:13:33:
         56:6c:5b:b4:cb:95:d1:91:5d:8a:c8:a7:60:bc:8e:91:e3:00:
         fe:2b:dc:6b:9d:00:a9:c6:ff:56:d2:66:25:1f:08:cc:66:25:
         86:4c:89:fe:19:ce:d3:3f:4a:a0:e9:56:cc:6e:4d:14:01:99:
         94:7f:40:c7:c5:92:ef:e9:98:a8:89:d5:65:25:22:97:c1:35:
         ed:81:ab:c8:1e:ed:6a:8e:13:6c:48:20:6a:ed:08:bb:af:21:
         fe:08:99:51:16:57:4e:14:e0:df:68:ea:43:30:9d:31:05:fe:
         a5:87:53:25:df:38:df:68:7b:77:10:c4:49:5e:95:ea:0c:9a:
         82:24:a7:55:d9:9d:aa:48:a0:7c:fb:f4:50:d0:9f:12:4e:e6:
         1c:1e:48:4d:99:60:48:c6:79:20:f8:6a:46:16:be:55:38:e0:
         8b:2a:60:eb:6e:06:18:c1:b7:df:1a:b7:78:9a:dd:9d:9c:51:
         da:c6:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:00:52 2025 by rpki-client