Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52727798-55fe-31e8-b806-4fb6ed495240.roa
File:                     52727798-55fe-31e8-b806-4fb6ed495240.roa (raw, json)
Hash identifier:          +vOnKP/r0dPvVLjMomYCYnoiUASNOnzdFlZ27nsR2I4=
Subject key identifier:   70:3F:D9:3E:49:DD:BD:7C:B1:A5:7D:D5:D6:A9:95:D5:3C:90:59:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0608017CD6C1F22B518720
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52727798-55fe-31e8-b806-4fb6ed495240.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        2601:43:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:08:01:7c:d6:c1:f2:2b:51:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=4ce6078b-75a8-420a-9a9c-0de95cbc6d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a3:28:32:78:d3:3e:e6:20:cc:96:b6:fa:8b:
                    0d:56:6c:a4:5e:49:ca:06:58:03:e7:51:df:13:91:
                    a8:0a:84:c8:60:b1:17:bf:81:86:b2:a2:9d:49:40:
                    6a:44:a0:e9:dc:9a:ad:4d:8e:0b:f7:e3:0c:e2:01:
                    9e:1f:a8:7d:b1:f2:a5:eb:82:e0:a2:6a:54:13:94:
                    d7:e4:6d:8c:aa:e4:cc:41:2d:f6:70:50:d9:06:d6:
                    62:fa:a6:72:b4:84:2e:27:ec:7b:2c:32:fa:57:14:
                    ec:f9:95:0a:73:93:cc:e5:ba:eb:fb:a9:8d:37:c5:
                    28:e4:98:10:49:d8:57:5d:50:35:94:c1:75:33:87:
                    3b:3b:f1:c1:5e:82:e3:9e:b7:62:f9:cf:26:fa:6e:
                    8c:0a:03:e1:21:d4:f6:81:bb:da:b0:82:f5:b5:a1:
                    63:81:32:80:7b:92:f3:e4:33:77:bd:7d:ea:34:0f:
                    6e:33:51:04:74:c6:7f:a7:99:69:78:38:ed:9c:32:
                    f2:73:c1:7d:65:c5:91:6c:ac:d3:80:94:f6:8d:ba:
                    94:78:03:15:ea:78:da:7a:55:5d:4d:26:cd:5f:2b:
                    c4:8d:da:ac:ca:b5:b8:08:ae:d3:36:1d:70:da:07:
                    98:a2:7e:2b:53:74:dd:d5:f1:b0:fd:0b:07:b1:6d:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3F:D9:3E:49:DD:BD:7C:B1:A5:7D:D5:D6:A9:95:D5:3C:90:59:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52727798-55fe-31e8-b806-4fb6ed495240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:43:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:e7:25:f2:1f:c8:19:89:b8:9f:ee:96:c0:b3:71:d5:9a:dd:
         8b:9a:3e:b8:31:71:e4:78:2f:e3:77:a1:6f:2a:05:52:f3:2d:
         4e:d4:1a:02:a3:ce:5a:19:3f:6d:ad:8e:33:c1:ed:50:5e:52:
         45:85:2d:04:7e:6b:a2:65:3d:56:53:14:b0:ce:1a:07:30:dc:
         1f:0b:03:7b:ab:c6:cb:d2:cf:a8:a2:6c:01:10:49:a3:6b:57:
         5f:6e:c1:29:61:78:a1:6e:56:bc:91:3a:a7:a7:37:9b:f1:3a:
         b0:be:80:e8:9b:45:87:b3:fb:1c:16:ee:e1:2f:14:1b:f5:94:
         83:fb:84:22:bd:32:a7:4d:1c:0e:0a:14:9e:8d:73:01:cf:a9:
         6b:80:df:21:62:33:06:e1:35:04:0c:98:fc:7c:b9:5e:48:91:
         75:4e:2b:73:12:00:52:11:1a:12:de:5c:1e:46:a3:00:de:04:
         df:35:b0:5d:e7:e8:7e:c7:9b:0a:1d:e1:50:3b:57:6a:3f:77:
         15:45:97:d2:ac:d5:f7:f7:06:7b:1d:db:9b:1e:9f:db:3d:ea:
         d2:2d:fc:05:e4:48:79:20:c5:61:f5:07:ac:d1:7a:ff:6b:88:
         ae:3a:5b:7e:8c:f4:5c:80:7c:a8:f2:a5:1e:19:38:96:be:bf:
         75:c0:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:40:18 2025 by rpki-client