Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/759531e3-a6e3-3e70-a302-d966876825c9.roa
File:                     759531e3-a6e3-3e70-a302-d966876825c9.roa (raw, json)
Hash identifier:          hhj1sEKAnf3TbegEeTzCQJbLXnDSweYXG+waVg/klnU=
Subject key identifier:   30:FC:EF:88:2E:32:2C:69:6D:5D:6D:A3:74:14:F8:00:29:A9:35:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C061AB5DF9495BA21D00520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/759531e3-a6e3-3e70-a302-d966876825c9.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        2603:300f:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:1a:b5:df:94:95:ba:21:d0:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=17daa238-ef24-4618-a726-3364ceb6d2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:77:14:d1:00:14:60:a6:7a:01:da:22:4b:bf:
                    06:85:4f:20:34:76:27:b6:7d:97:39:c3:9b:52:d7:
                    d0:7a:a3:6d:44:fb:eb:c8:e5:e4:06:cc:ef:b8:bd:
                    06:7b:56:18:54:28:26:92:b8:d8:0d:83:05:ee:4b:
                    1a:cd:cd:ff:8a:e5:1f:76:02:07:94:55:bf:93:9d:
                    0f:3f:a4:bc:19:92:de:18:58:49:96:52:d8:47:44:
                    a0:11:2e:67:3b:2f:11:e6:1b:44:67:fa:32:7a:19:
                    22:a8:5a:e2:fa:02:b7:b2:dc:ce:8d:83:30:05:59:
                    5f:b4:d0:aa:71:d1:9c:ef:13:66:4d:c1:4c:49:3f:
                    35:bc:00:fc:55:c1:a1:95:9b:2c:b2:2f:79:74:30:
                    c5:f7:58:b6:ca:7f:26:b7:dc:30:52:c4:a7:04:09:
                    3d:8a:4f:76:0e:fd:fa:7d:a4:97:20:f3:22:d8:38:
                    2c:b0:b9:70:48:23:ab:ac:ae:36:33:26:7a:66:ae:
                    ee:7e:5c:2b:bf:33:32:1a:0b:b3:9c:61:b5:20:af:
                    6e:b9:39:1a:0e:ef:e6:87:0b:49:16:31:e2:8a:fd:
                    e6:bf:cb:16:ef:2e:66:f1:6d:19:16:a3:a2:98:d0:
                    ff:a6:ab:01:bb:ce:0f:45:1b:57:4b:e6:bf:8c:fe:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FC:EF:88:2E:32:2C:69:6D:5D:6D:A3:74:14:F8:00:29:A9:35:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/759531e3-a6e3-3e70-a302-d966876825c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300f:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:05:85:02:9a:7b:41:43:b7:fc:63:6a:5a:53:84:c5:a5:7e:
         bd:aa:a5:05:dc:f5:12:b9:16:ac:90:6f:44:5b:d6:42:88:0b:
         cf:87:63:39:ae:a1:71:57:53:bb:82:00:90:f5:51:42:33:f1:
         6c:1e:d2:66:41:40:27:80:54:9f:5c:11:b5:14:fa:b0:5f:fe:
         b7:af:80:0d:ae:8d:aa:ce:26:5a:ec:14:16:28:9b:1b:2c:cd:
         d9:35:fc:5f:6d:e7:51:07:a0:18:50:2f:60:bf:fb:e4:26:e1:
         ad:c9:a5:e2:97:b6:e1:d4:fd:84:74:c6:f1:8c:1c:66:dc:0b:
         1f:af:e3:5c:b4:70:43:40:b6:2d:c3:29:53:4c:64:93:e2:f0:
         e5:16:a5:19:cc:e4:07:db:48:40:a4:f9:c2:6f:1c:8d:41:4f:
         52:6c:2c:84:e5:05:61:b2:7e:f0:cd:fa:ac:44:70:b7:ef:57:
         61:0c:24:63:6e:da:ae:ad:01:83:45:9c:99:ad:f1:6e:46:fc:
         19:42:37:b3:ba:ca:49:6e:d3:84:e2:f8:25:34:ae:58:82:bf:
         7b:35:19:e6:82:ea:a1:d3:e4:78:b9:28:58:80:63:82:aa:0e:
         b0:eb:97:64:48:0e:41:5f:50:d6:b3:bb:5f:4d:cc:63:60:9f:
         36:3f:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:57:05 2025 by rpki-client