Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a66cf7f9-e4ae-321f-936e-438b295b8ac5.roa
File:                     a66cf7f9-e4ae-321f-936e-438b295b8ac5.roa (raw, json)
Hash identifier:          SV0ZcPGsPtfGHbXlvmdjZVlwaZD5wFGo3ZeD2p87cuE=
Subject key identifier:   64:F2:41:36:86:D1:E9:63:64:52:F5:0D:39:11:8A:20:94:89:8D:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F22BF68DF76B275B6D891E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a66cf7f9-e4ae-321f-936e-438b295b8ac5.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     7016
IP address blocks:        2603:301f:2800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2b:f6:8d:f7:6b:27:5b:6d:89:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=3af65b58-cddb-40b6-8a14-4d29c043bb5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:67:ac:96:cc:87:15:70:98:6a:63:ad:28:
                    9d:a5:14:f1:ee:80:52:0e:d0:35:01:a2:63:ab:e6:
                    05:92:10:fc:7c:15:ef:6f:cb:d5:4a:44:48:66:30:
                    2f:d4:5d:d9:f4:29:46:1f:b2:df:7d:68:cf:14:a6:
                    42:ee:ee:71:f2:b9:49:39:70:4e:f4:6f:78:ab:22:
                    b0:2b:49:c1:06:e1:31:85:b9:12:5c:34:b6:cf:04:
                    34:1a:8a:ee:98:f6:63:fb:dc:e2:60:69:fd:2a:c9:
                    08:48:6a:95:14:fa:2e:28:ec:6b:c9:91:24:76:48:
                    59:83:03:af:84:49:7c:72:28:6b:97:3a:80:74:89:
                    0a:d3:2d:36:1d:e7:8c:e8:a4:43:55:4e:c1:e5:42:
                    cb:f2:fb:21:4a:d8:16:b2:68:22:41:ef:a0:b4:69:
                    e1:8f:e7:d4:10:bf:7e:f5:52:b9:49:69:5a:e3:3b:
                    5b:f3:b8:2b:ff:e6:31:1e:78:81:fd:fa:82:15:e0:
                    1e:50:98:01:5b:8d:44:bb:f6:18:60:33:af:00:69:
                    ac:94:e2:a9:b8:f6:56:22:15:3f:e0:69:07:70:16:
                    80:ce:c2:ef:db:b2:b8:7b:8f:f7:a8:a0:09:d6:0d:
                    e3:69:a0:17:fd:c6:7b:97:1b:d1:b9:80:20:99:04:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F2:41:36:86:D1:E9:63:64:52:F5:0D:39:11:8A:20:94:89:8D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a66cf7f9-e4ae-321f-936e-438b295b8ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301f:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:42:c9:87:71:89:0d:7b:bd:9c:9a:77:eb:31:22:3e:57:
         91:26:18:2f:4c:26:eb:98:33:4f:b5:2c:c5:e0:25:b8:f7:0e:
         21:5e:1a:09:f9:02:a8:99:7e:0b:da:02:c8:35:46:51:80:c3:
         ef:7d:1d:c4:0c:a8:ad:82:80:1d:29:f9:92:42:0b:c3:59:08:
         66:b6:22:b7:19:e5:d3:30:c2:c7:ac:66:b8:b2:b9:d9:24:1c:
         f1:73:62:db:09:83:43:92:bd:31:c8:45:b5:5d:76:2f:e6:e4:
         c7:84:3f:7c:fc:e1:ad:eb:9a:5d:1a:0c:3a:01:c6:f6:db:44:
         b0:6c:cc:26:d5:76:36:6c:f0:8c:01:8c:f1:b6:45:63:7b:61:
         71:50:12:1b:90:89:fb:10:21:d0:4e:1f:28:81:cb:e4:bc:cd:
         db:14:bd:6b:fe:b6:08:2f:f5:ba:78:51:e5:7c:08:f9:a2:ac:
         25:a7:cb:68:0d:39:fe:e3:0a:5b:f3:02:9d:16:5c:b7:d5:f4:
         66:19:c3:e6:ae:03:dd:c2:0e:47:3c:a7:44:26:e2:f9:8e:19:
         44:5a:99:9c:a4:f6:1a:6a:9d:86:f8:35:f8:de:e5:ee:70:cd:
         fe:56:26:81:6d:de:11:00:2a:be:3e:7b:0f:fe:6f:7e:5c:51:
         51:fa:14:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:10 2025 by rpki-client