Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8954444d-3291-3615-be1f-9b9d66ba4353.roa
File:                     8954444d-3291-3615-be1f-9b9d66ba4353.roa (raw, json)
Hash identifier:          EK2HLiX9/FFwuvLTHQCQVZmgLame8kmTho3CP/EV0kw=
Subject key identifier:   04:34:CC:53:5B:E2:C6:46:86:D5:EE:CA:17:BA:99:37:DF:54:10:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4300F979C9EE91E00259000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8954444d-3291-3615-be1f-9b9d66ba4353.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2603:2199:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:0f:97:9c:9e:e9:1e:00:25:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=4ef6b86d-e203-4d0f-817f-ef76808307d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:de:b8:7f:7c:6a:5d:7c:69:64:58:1f:16:a4:
                    b8:2b:67:77:e5:74:53:1d:07:fb:dc:0b:7f:3a:ad:
                    bf:55:4b:6a:c0:37:7c:f3:b4:86:f5:ee:db:20:95:
                    06:0d:34:79:2a:ab:99:86:af:b5:a6:3e:6c:e2:3a:
                    33:f4:c6:e2:0c:5f:22:fc:02:b2:2c:4f:fb:81:a9:
                    d7:35:3e:1c:d3:b4:1f:68:5c:16:bf:78:6b:78:f7:
                    b7:a1:28:fa:50:0e:83:a5:33:7a:9c:77:bb:28:31:
                    45:b6:f4:dc:ea:33:35:54:6e:8d:a9:f6:7b:e3:75:
                    34:33:5e:f9:90:43:a4:24:d7:b5:16:90:a3:a7:81:
                    cb:b0:0d:fb:49:59:0c:2d:80:2c:3a:37:48:df:49:
                    cc:2d:b1:a4:f4:4f:e1:50:3e:d2:21:0f:7a:d8:92:
                    8b:93:0e:97:4a:6e:09:b7:29:4d:8e:5d:45:b2:c8:
                    93:93:be:85:43:c6:a5:5f:51:6b:ba:f7:6d:e5:5c:
                    12:4f:9e:fe:dd:22:f0:ad:a1:1e:c2:63:7f:7d:3d:
                    b2:df:8c:b1:3c:21:56:15:e4:34:27:79:02:69:1a:
                    71:77:9d:34:0e:23:40:82:b6:38:d8:8c:f2:0a:60:
                    6e:14:6f:2e:b2:ce:d2:6b:cf:ca:30:f3:2f:51:d0:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:34:CC:53:5B:E2:C6:46:86:D5:EE:CA:17:BA:99:37:DF:54:10:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8954444d-3291-3615-be1f-9b9d66ba4353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2199:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:8c:59:9f:7e:ac:a1:b5:54:69:9d:b8:10:b0:68:fe:95:85:
         f8:10:c1:85:1d:74:38:03:f6:31:fb:8d:07:dd:97:7e:8b:cb:
         6e:5a:3b:87:ce:bf:9d:b7:90:12:e8:73:5f:21:ee:67:38:8a:
         7e:cb:d7:39:d3:8b:58:84:96:27:a9:97:c4:ef:35:25:23:f7:
         f0:ea:50:c1:59:e0:fd:c4:ea:58:f4:52:91:7e:c4:dc:20:8a:
         28:4c:63:33:ef:f0:4f:f5:5e:c8:f4:62:a1:2d:e7:3f:a6:ef:
         34:02:11:5d:4d:09:87:c6:1d:0d:4a:63:2e:4c:26:fd:45:4a:
         9b:f6:fb:dd:06:ad:60:1b:41:6c:ca:49:72:86:6f:c7:da:2a:
         bf:9c:ba:3b:99:63:06:29:ed:31:ea:cc:47:c0:e9:07:38:8d:
         fb:97:c0:7b:df:f4:2d:ba:db:c0:60:27:24:e1:87:2d:24:54:
         da:52:5b:52:b6:8f:09:50:12:2c:90:c6:96:f0:a8:90:01:ac:
         1b:73:db:6b:0f:05:85:bd:fd:4e:1a:bd:fd:6c:2b:e4:99:75:
         96:b0:1b:4f:88:39:ed:a9:54:c2:03:e8:2e:96:81:1c:c3:54:
         bf:6e:1a:0d:ce:64:c5:2a:29:ac:ed:24:df:94:83:0d:a6:67:
         2f:18:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:31:36 2025 by rpki-client