Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb7f170-27f3-30f3-98a7-78eb31f8bab6.roa
File:                     4fb7f170-27f3-30f3-98a7-78eb31f8bab6.roa (raw, json)
Hash identifier:          A4Hta8ZK4S+86I/qXtuLwRECblUUQD6vHP4XUayUIbY=
Subject key identifier:   97:AD:67:FA:29:20:75:EB:A6:88:19:F3:A7:CE:B1:22:3E:C7:3A:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07C4F9BCAF3C2662B57780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb7f170-27f3-30f3-98a7-78eb31f8bab6.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        2603:2800:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:c4:f9:bc:af:3c:26:62:b5:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=5da91e88-20e8-4d42-8e83-713c7682bc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:df:07:e4:df:6f:a2:b2:47:74:4b:f8:71:
                    8d:dc:b2:fa:a9:29:e7:d6:e3:bf:10:ef:ee:f3:0f:
                    b4:2f:59:1f:1d:76:3e:ea:15:43:87:9d:36:f4:76:
                    0d:50:b7:7b:d5:df:71:94:f8:60:a4:c6:a8:89:65:
                    b2:f4:73:ce:b0:4d:02:2d:be:f7:19:12:44:02:e7:
                    9e:ff:74:55:76:ba:20:38:a1:d0:93:ae:a3:d9:f6:
                    79:51:6f:fc:f8:8a:16:1e:7f:d8:d3:99:22:71:ce:
                    96:4e:d8:8b:2e:15:f8:be:a6:33:86:8b:ac:3b:c4:
                    0a:10:3d:6d:c5:01:ad:66:71:c4:7b:b0:2a:a5:8c:
                    e1:0c:47:6e:89:a5:cc:23:7a:7d:1b:3f:67:02:c6:
                    80:70:5c:e3:83:54:e3:07:a6:3a:0a:86:78:00:fd:
                    7d:02:e0:a5:c6:be:67:78:f7:5a:4a:54:e0:c7:4b:
                    c4:42:c4:8c:6b:19:0e:62:32:74:94:49:fc:2d:26:
                    97:bd:ca:66:9d:99:46:58:b4:2f:73:83:12:01:f0:
                    c0:b6:2e:02:bc:25:43:6d:6a:b7:1f:7e:f4:a4:3b:
                    a3:fb:e5:f5:3b:15:8d:86:dd:ef:b3:e0:43:9a:bc:
                    88:3a:f7:13:15:bf:91:47:a0:7a:c4:91:61:49:a2:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AD:67:FA:29:20:75:EB:A6:88:19:F3:A7:CE:B1:22:3E:C7:3A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb7f170-27f3-30f3-98a7-78eb31f8bab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2800:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d2:f7:37:6e:f7:d8:41:c1:ee:2f:db:f2:15:d5:6c:d4:28:
         9f:02:cd:2f:bc:ac:cf:98:67:c8:d8:62:09:23:36:89:18:a8:
         2f:7d:8e:9f:f7:51:3a:f9:a2:ee:b7:86:70:bd:e3:9d:15:93:
         ea:22:89:e6:2d:3c:6c:80:43:68:48:d1:14:48:89:69:dc:90:
         7e:81:c5:32:19:0f:c0:d0:bc:54:4d:3a:ec:8b:42:ce:e8:ec:
         3d:31:b0:2c:31:be:3d:0c:8d:62:26:36:f1:d1:50:5f:65:55:
         8f:83:27:8e:74:cc:f2:a1:77:ba:5c:7c:dd:3d:e2:a6:e0:5e:
         bd:1a:85:8f:bf:1b:15:cc:c5:f3:90:48:76:91:d3:8d:48:f4:
         41:bb:66:d0:c5:cb:99:24:fb:e5:b7:43:cb:51:c6:2b:da:51:
         55:11:d0:af:06:6b:04:30:16:cc:c2:48:f2:33:6d:0d:37:6d:
         94:54:5a:6d:57:ba:e2:b5:70:88:bf:6e:cb:78:2f:7b:6f:cb:
         2a:bb:51:99:eb:26:c9:4d:d4:78:a8:b6:4c:95:80:b4:8f:ec:
         f2:c9:3d:ac:30:91:ea:dd:ce:a9:43:59:e4:10:6e:3a:b0:64:
         f5:c5:c3:e9:e0:65:ad:dc:bc:02:4f:20:25:75:96:dc:00:f0:
         63:93:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:45:15 2025 by rpki-client