Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e835684-2ca6-3fc0-90f6-63c4a1c7233a.roa
File:                     7e835684-2ca6-3fc0-90f6-63c4a1c7233a.roa (raw, json)
Hash identifier:          CvH11Rxkk7dYdUTgb2SlgOP/wUqS/WyyeSltX2ovo3A=
Subject key identifier:   60:2F:6E:1D:C2:9B:8B:16:E2:9D:99:6D:31:FB:E5:A9:2D:8D:B3:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0774486DA77A301C2D1170
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e835684-2ca6-3fc0-90f6-63c4a1c7233a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        2601:87:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:74:48:6d:a7:7a:30:1c:2d:11:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=e6bab84a-a3e3-4dad-81a9-e4dcbc28a834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:1e:20:03:88:43:e2:7d:eb:97:6a:73:be:
                    f5:87:84:51:d7:a6:07:33:5d:76:cb:79:99:58:11:
                    00:eb:7d:76:cf:9d:b0:02:cf:8d:51:82:5f:bc:6f:
                    44:28:e8:80:98:86:c8:f9:57:85:6a:5e:b7:81:3a:
                    f2:4e:4e:98:26:a4:da:81:a3:30:6a:8e:0d:78:70:
                    3a:02:02:a2:5c:8a:d2:09:08:26:38:28:54:c9:20:
                    da:a7:01:30:73:ea:4b:86:03:06:92:5d:94:a5:71:
                    3e:9a:bb:a9:d7:6e:4c:ee:88:10:49:15:9c:ff:73:
                    c0:03:e0:70:7d:7c:5a:d4:b3:ed:c3:a1:21:d3:b2:
                    46:8b:d3:ba:0d:c6:e6:1b:40:f5:c5:3e:14:36:b5:
                    dc:34:9b:9e:c7:9e:e7:e9:a1:48:ca:db:d8:80:46:
                    61:3a:25:e2:de:27:07:f9:5c:00:0b:77:0b:2f:59:
                    8d:c4:ff:4f:1f:56:db:4b:52:af:1b:00:a7:bc:10:
                    7e:e6:66:a9:ff:c4:11:73:33:73:b3:47:0d:d1:f8:
                    73:3a:49:01:a4:95:df:4d:d0:04:55:f7:63:2a:57:
                    f6:1e:1e:20:45:d5:9c:36:72:78:d9:ab:94:f7:6c:
                    67:4f:c3:0c:89:3f:22:32:61:f9:d1:59:f4:8e:01:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2F:6E:1D:C2:9B:8B:16:E2:9D:99:6D:31:FB:E5:A9:2D:8D:B3:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e835684-2ca6-3fc0-90f6-63c4a1c7233a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:87:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:a9:70:0a:0b:cb:d3:c0:0b:40:44:ca:38:d5:38:4c:63:
         3e:d5:a1:a1:fb:d8:64:e9:7e:9d:e8:ea:b3:2b:f9:4a:69:f4:
         63:b8:d9:94:af:32:6a:b6:c5:d9:7f:52:62:32:14:6b:4f:cc:
         fc:9d:0a:07:c3:7f:52:b8:f6:87:3b:43:9f:a6:b1:ac:7f:6f:
         f5:95:21:44:15:54:61:7b:e9:e2:1d:64:86:60:e1:be:a3:5d:
         a0:e0:25:ff:c6:9b:91:a3:47:ce:de:72:04:98:fe:a0:48:f5:
         28:33:66:72:67:27:d2:e5:d5:c9:81:72:eb:f8:7c:cc:a1:34:
         0e:c8:0d:c4:62:88:87:fc:0d:6b:87:01:fa:b8:d3:9e:40:5c:
         e4:07:b0:67:6a:89:03:8b:bd:27:de:0f:ae:8e:4a:dd:38:37:
         0b:12:74:8f:4d:e3:56:73:5c:13:f9:47:9a:61:3b:e0:99:3b:
         b0:6f:93:e7:ce:e7:99:f5:b4:65:d2:78:fd:8f:87:94:09:a6:
         33:13:ad:a1:b3:81:4d:05:a5:9f:77:d3:46:fd:05:02:9b:c3:
         16:85:31:59:63:21:91:30:90:72:e3:0c:3a:46:c8:32:bb:90:
         e5:03:54:9e:87:74:fe:2e:52:e6:e2:0e:f4:81:35:72:77:6c:
         22:b1:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:50:03 2025 by rpki-client