Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/531f5310-6cfe-3aba-8257-5e50b80a11e1.roa
File:                     531f5310-6cfe-3aba-8257-5e50b80a11e1.roa (raw, json)
Hash identifier:          aKV00mS268qjFF+OhLY+VOwhxg/2KoxrklYcjDpEkew=
Subject key identifier:   EE:16:FB:0C:B5:CE:D6:12:B6:E0:0A:64:15:73:4D:A3:70:D2:ED:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848AF2B8AE70B80EFE69CEA94A7
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/531f5310-6cfe-3aba-8257-5e50b80a11e1.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     33661
IP address blocks:        2603:3027::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:8a:e7:0b:80:ef:e6:9c:ea:94:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=7ec62a5f-1783-455e-ae93-15312ecfd6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:15:94:f5:3a:06:09:61:37:2d:25:80:bb:
                    73:7f:f3:dc:a9:c5:32:fd:69:58:bc:09:e2:4b:2d:
                    84:cc:a1:1f:8e:3a:2d:f5:16:ba:74:01:1a:91:50:
                    e2:59:1a:bb:b9:63:88:b6:ff:3e:b4:3b:22:4c:d0:
                    ff:56:cb:8f:fe:2f:7a:6a:74:48:42:94:29:18:73:
                    87:9e:ca:e9:47:8f:ee:73:ee:38:a1:32:0d:7f:b1:
                    b6:16:68:ed:d1:61:4b:5d:91:c4:4f:55:9d:14:62:
                    e5:4e:cc:e2:2b:0e:0f:e3:c4:79:98:63:63:58:3f:
                    ed:d7:0e:ce:bb:ee:1c:ef:fa:8b:7c:87:b6:5b:03:
                    e2:40:a3:e1:ad:90:55:c4:e5:b4:a0:49:e7:56:e1:
                    d3:b6:72:b9:d6:67:e7:2c:c6:25:fb:a0:d4:ac:98:
                    81:c1:2b:ac:0f:de:ef:03:5d:30:01:b7:7f:23:d6:
                    69:87:62:b0:9f:35:15:7a:b5:49:1b:3b:63:90:e2:
                    26:9d:31:ba:11:dd:c9:99:f3:94:36:ae:da:c3:f9:
                    2d:bb:6f:52:6a:a8:05:65:d7:f2:11:83:1e:f1:1f:
                    fc:81:f3:1d:55:63:71:83:19:54:99:e6:54:d8:ce:
                    51:82:49:90:b3:9b:55:16:6c:2b:2e:b9:82:73:3a:
                    63:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:16:FB:0C:B5:CE:D6:12:B6:E0:0A:64:15:73:4D:A3:70:D2:ED:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/531f5310-6cfe-3aba-8257-5e50b80a11e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3027::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:83:60:80:a9:5a:b8:75:88:93:a4:20:68:6b:c2:23:7f:d0:
         06:a4:1d:c2:8e:09:8b:46:1c:6c:89:16:e2:39:70:7c:76:62:
         b3:a1:66:1f:e7:e9:13:eb:fa:9c:cd:b1:28:12:86:93:d9:37:
         87:5d:5c:db:29:21:ea:6b:db:5e:46:27:06:91:0a:21:54:1d:
         7d:70:73:b5:e0:03:e5:5b:f5:f8:d2:59:c3:ea:6d:0f:20:9e:
         4b:1c:0e:27:af:ab:b8:db:1d:51:1a:69:2d:8c:ff:ad:08:84:
         06:fc:cc:a0:2c:1c:1e:5d:be:98:d6:10:5b:d3:a6:37:6e:46:
         f7:2e:3a:81:a6:b2:6a:41:3b:de:23:24:3d:50:2b:de:05:50:
         05:6f:30:8d:97:0c:5c:23:9e:32:08:2c:28:52:2a:e0:00:ac:
         51:fe:4b:25:4c:de:ea:b9:3d:8d:28:b9:f5:0d:fb:43:73:f3:
         ca:3e:f7:69:36:df:3e:a6:56:97:b8:2e:87:e2:3d:38:7c:60:
         0f:56:0b:0f:e9:f1:ec:f5:08:7e:16:2b:08:87:94:a8:fe:7a:
         19:a2:33:35:da:9e:f5:43:0a:c6:61:2a:fc:bb:58:e7:14:75:
         00:03:fd:0b:74:50:00:5c:52:3a:22:b3:04:98:df:81:14:99:
         ee:15:38:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:49:48 2025 by rpki-client