Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72896688-0eb9-397b-bb86-d098f8ababa7.roa
File:                     72896688-0eb9-397b-bb86-d098f8ababa7.roa (raw, json)
Hash identifier:          Y2L+vQmHRNdcUAsPehGSI8NtGsXYUCciKWFV99TzRps=
Subject key identifier:   B0:ED:D5:4C:83:6E:F9:09:F0:B7:EE:D1:77:4A:CE:B8:BD:1F:79:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F912D0B222EDA50682EB20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72896688-0eb9-397b-bb86-d098f8ababa7.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33662
IP address blocks:        2603:22c4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f9:12:d0:b2:22:ed:a5:06:82:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=88a20f4a-b53b-4bee-bc34-12e555834c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3f:2c:ee:bc:74:85:48:18:65:3b:71:82:c6:
                    f8:6a:51:03:f7:11:fb:38:4d:02:33:f2:57:29:68:
                    98:5d:e7:19:b9:7c:38:5c:7a:40:7b:05:15:90:bf:
                    f5:89:f4:ec:35:28:a1:18:00:07:af:50:38:76:ba:
                    ae:4f:1e:6d:0d:1d:8c:33:34:5d:ec:f9:5e:82:55:
                    01:c9:3f:51:0a:8e:6f:ec:88:a3:38:b4:96:5e:a0:
                    07:b6:1d:1e:bb:a6:1d:98:0f:a1:e7:9d:8e:0e:d0:
                    2c:ac:20:87:75:0a:a7:32:10:e0:e0:e4:75:12:b8:
                    e1:88:4b:88:17:c3:a9:00:25:86:0a:01:14:a7:ef:
                    2e:2a:49:47:1a:aa:8b:73:cc:5a:a3:59:a1:b6:8c:
                    29:ab:23:89:7b:2c:75:70:84:46:4b:41:70:ec:4a:
                    e3:c7:6d:6d:06:05:56:54:e4:3d:67:4b:a6:1d:70:
                    92:ee:bd:76:11:64:81:fe:68:74:31:27:8f:c9:9c:
                    51:97:c5:e8:be:e8:ec:80:9c:f7:e9:3e:9a:87:3a:
                    c8:18:55:eb:14:07:ce:59:05:1a:b2:86:4e:66:9f:
                    65:43:ac:b2:7e:8a:2a:f6:74:a0:09:c0:db:6b:89:
                    d1:fa:46:90:4b:7d:8b:41:51:cc:9a:6f:9a:20:b7:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:ED:D5:4C:83:6E:F9:09:F0:B7:EE:D1:77:4A:CE:B8:BD:1F:79:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72896688-0eb9-397b-bb86-d098f8ababa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:22c4:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:82:43:f5:82:f4:c5:25:ff:e8:0d:fc:d7:4c:a1:5c:91:0c:
         a8:e8:eb:8a:28:7b:cc:12:14:46:d4:ad:b6:d4:a7:59:ee:e9:
         39:41:0e:64:45:a5:ee:bc:5d:30:33:78:4d:c0:a8:d3:1e:fd:
         2e:2c:0d:ce:68:70:cf:5c:e9:98:3d:43:d3:50:f3:24:01:85:
         fc:4f:f8:1d:a6:85:43:ef:66:c0:36:67:11:69:a6:05:ab:f8:
         10:25:12:92:64:a2:cc:1d:79:eb:96:ae:45:55:19:94:9e:10:
         00:ee:c0:36:40:2f:ed:93:77:78:64:a9:ec:a5:4c:cb:c1:e0:
         ef:2c:35:be:f3:5d:0d:58:c0:c6:81:84:ea:39:3e:f5:46:90:
         e9:f1:2f:44:33:e7:52:9f:68:df:ee:4f:49:3e:0b:a7:18:d1:
         67:f2:da:c3:bb:fe:39:5e:4d:4a:51:25:27:5d:d6:2f:12:81:
         99:d4:92:7d:70:c1:ce:b7:98:83:a2:37:7f:5a:4e:02:5c:89:
         a6:6a:a1:ca:c0:09:c5:4b:d7:98:48:14:b1:57:dc:43:af:5e:
         ff:bd:89:03:42:18:53:2c:d9:49:89:64:87:51:d0:94:ee:55:
         da:6c:6c:7f:96:05:44:36:d3:19:55:3f:b4:9d:08:5f:4f:fc:
         fd:86:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:43:19 2025 by rpki-client