Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/687e7ed4-cdab-313e-8bd8-eeba36cb0196.roa
File:                     687e7ed4-cdab-313e-8bd8-eeba36cb0196.roa (raw, json)
Hash identifier:          5LRIEhlbbwpUPbetaXKUwopAjD4yJREbI1g0X2VFY14=
Subject key identifier:   A9:E7:4C:92:92:E2:77:BD:C0:63:9E:65:AD:FA:F5:90:1D:5C:6D:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF7532A66FFAE73CACCE7880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/687e7ed4-cdab-313e-8bd8-eeba36cb0196.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        2601:c4:c400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:32:a6:6f:fa:e7:3c:ac:ce:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=3a264619-8332-4552-ab6d-0a5ec41581aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:29:35:da:f3:6a:ed:05:a2:70:25:c1:ed:
                    e1:b1:9c:94:63:4d:a8:e4:6b:ee:11:54:5b:a1:20:
                    7f:c8:a1:7b:7c:85:b9:86:87:81:8f:18:27:c4:d1:
                    3f:70:10:5b:41:e0:e3:b9:fa:47:b1:d0:b9:28:8d:
                    40:e1:f7:8e:0e:67:b3:12:08:ef:9b:cf:e7:44:cb:
                    81:04:e7:8f:8d:6a:d9:92:55:67:34:30:42:04:3f:
                    aa:7b:0b:50:2e:df:6f:8f:dc:ef:3a:db:a9:d7:fa:
                    ac:01:ec:b1:5a:1d:84:f8:da:b2:cc:c5:ad:ff:62:
                    f8:18:a5:b0:26:21:b2:57:19:94:bd:30:e5:dc:94:
                    ff:e3:cf:66:c6:5b:7e:dd:00:31:48:3e:06:b1:2e:
                    fd:06:b3:92:12:9c:c7:63:4f:14:df:22:ef:d6:b7:
                    34:65:7e:61:fd:98:f7:3c:c1:8a:80:66:7f:b2:9c:
                    a3:e3:c7:d6:55:2d:c6:57:7a:cb:9c:7e:27:60:e5:
                    ad:b4:c0:c0:a5:b2:7b:9c:30:e0:eb:ee:6b:65:9c:
                    7b:5f:78:7f:35:49:22:1a:e7:f4:83:1b:75:6c:3c:
                    22:34:5a:9d:1f:0f:53:5e:a6:d3:61:d4:6f:f4:fc:
                    34:1e:fe:ad:d2:b1:90:bd:f0:84:cf:d9:1c:80:ae:
                    64:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E7:4C:92:92:E2:77:BD:C0:63:9E:65:AD:FA:F5:90:1D:5C:6D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/687e7ed4-cdab-313e-8bd8-eeba36cb0196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:c4:c400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:42:77:0f:02:42:46:37:f7:0f:a3:49:73:0b:d3:b5:67:9c:
         f1:a7:e0:48:35:5d:98:bb:be:9a:50:f3:7a:2e:3c:8e:00:c3:
         89:6a:eb:87:6a:0c:3e:7c:b0:44:94:7d:d2:f7:46:5d:dc:e4:
         25:bf:c5:c8:83:36:1b:13:a2:d5:41:ce:06:5f:da:23:52:b5:
         a2:23:b5:2e:a0:37:3f:dc:4b:b9:0e:6b:b8:b1:ce:a4:1d:d8:
         b0:04:71:4a:6a:d5:f3:99:7c:85:a2:b0:16:f9:1b:ab:a0:a7:
         16:d4:95:f6:da:3b:f4:4c:b2:55:7e:1e:88:22:97:b3:92:34:
         80:73:62:c3:0b:8a:05:33:e8:21:28:5c:f4:73:48:73:1c:ea:
         1e:6e:15:a7:2c:94:d7:de:77:4f:82:5d:39:4d:c0:28:92:ac:
         1c:b8:64:b4:c5:72:1c:5f:9e:69:9b:eb:62:8a:0c:23:de:dd:
         d3:d7:d7:05:d7:c6:11:82:8e:d9:4a:08:e0:16:fa:05:1e:72:
         42:b9:2e:27:83:ef:55:bc:29:ac:c0:df:2c:d1:8b:c2:60:87:
         71:46:0d:35:3f:1a:b2:20:11:f5:8d:d1:3b:17:98:90:84:c6:
         fe:8a:1b:12:62:f6:dd:7e:19:f8:b8:05:d3:d2:ce:11:44:c3:
         22:7b:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:08:40 2025 by rpki-client