Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5861f3fd-9669-34de-a94c-b917ce9ee9b1.roa
File:                     5861f3fd-9669-34de-a94c-b917ce9ee9b1.roa (raw, json)
Hash identifier:          RyMs151Cb0mMFXBXN5zpPehktlWZ56uY/UPz86PIk3o=
Subject key identifier:   4C:3C:EC:8E:44:03:F5:7C:5C:F1:7C:13:84:D5:51:92:91:87:CA:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D16523C07EAEE270A2C71700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5861f3fd-9669-34de-a94c-b917ce9ee9b1.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     7016
IP address blocks:        2603:2989:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:23:c0:7e:ae:e2:70:a2:c7:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=cdeceb6e-151d-4241-9b25-caaec434322a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6c:5f:f9:68:d1:9a:ad:13:dc:7f:48:48:9a:
                    c0:81:99:42:8d:81:92:9a:91:e0:73:84:cc:10:17:
                    f1:4c:8b:8a:83:9e:c1:a9:c4:59:c4:84:73:43:74:
                    64:89:68:1f:26:c6:fc:4a:ab:29:46:7c:74:4e:28:
                    72:3c:75:fc:b5:43:f5:01:23:54:80:8d:0f:41:7c:
                    82:ea:9b:f5:50:e7:e5:c0:2a:3f:30:33:42:26:0e:
                    4b:6c:49:82:12:85:ed:cb:68:48:d2:c4:f2:67:49:
                    bf:76:90:63:a8:11:75:68:58:a9:41:c0:04:26:d5:
                    71:fc:02:b0:99:52:dc:da:6d:9f:3a:33:77:c6:bb:
                    24:6f:5a:ee:91:a6:43:ca:80:5d:22:e1:69:4e:fd:
                    dc:d7:52:67:32:36:cd:01:d9:9c:6e:d8:70:08:7f:
                    21:75:da:34:2e:67:b6:04:d3:03:04:14:39:34:af:
                    2d:8d:d3:78:60:2b:95:bb:74:b1:65:e0:0f:02:e2:
                    10:bd:90:8a:02:b8:33:f6:51:47:d1:43:eb:15:33:
                    f6:3e:a5:f2:f2:4e:a1:6d:ca:54:35:94:f5:cb:74:
                    74:a6:1b:12:da:e5:06:62:f9:da:01:2f:46:45:24:
                    58:fb:47:ce:3d:b7:07:1a:90:22:0c:f9:77:67:37:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3C:EC:8E:44:03:F5:7C:5C:F1:7C:13:84:D5:51:92:91:87:CA:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5861f3fd-9669-34de-a94c-b917ce9ee9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2989:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f9:29:81:76:dc:1c:1d:36:4a:a2:fd:6b:e4:c8:84:5a:18:
         b0:07:5f:0a:29:ea:94:01:3d:80:d7:7a:98:af:d0:0c:13:c8:
         e5:92:d1:0a:e1:cc:aa:28:2c:93:54:7b:7a:25:53:e5:6f:23:
         a4:e3:df:11:8f:55:3c:92:de:cf:16:db:34:2c:1f:a3:50:aa:
         a8:e9:c8:56:f0:bb:c8:84:43:08:c6:cb:26:48:7c:ac:90:16:
         a0:37:08:79:d5:5c:8b:ba:86:e2:f2:31:37:44:10:d3:93:f4:
         c0:28:e2:26:08:82:ba:a0:30:a1:2c:16:6d:95:40:d7:44:1c:
         79:63:54:d2:12:00:ef:04:9f:01:82:7f:c3:df:7c:ef:99:30:
         cf:36:ec:25:fd:a8:f2:77:67:38:f2:f4:c1:43:5c:ec:bf:0e:
         fe:ad:1a:a8:27:b2:e6:97:b6:d9:36:cd:a9:f6:0b:02:20:28:
         45:85:1c:59:1e:48:e5:dd:8a:db:59:de:61:d3:4f:d9:38:05:
         7e:7e:2b:df:68:ab:1d:e9:c6:29:15:8d:25:e1:e1:f2:e8:9d:
         b6:3d:f0:4d:1f:35:9b:46:67:88:c7:58:26:eb:1a:d1:fa:eb:
         e4:06:57:44:e3:3a:b0:3d:2c:f9:b8:22:60:de:f5:a0:7f:df:
         f7:b1:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:06:01 2025 by rpki-client