Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed4c36e-bf20-3c44-8e2c-d19f226dad3c.roa
File:                     aed4c36e-bf20-3c44-8e2c-d19f226dad3c.roa (raw, json)
Hash identifier:          bGjAKw9H3o837k4xPrZUgdwX08vigWVC+6ktN+bF1jQ=
Subject key identifier:   56:92:AD:FE:29:9A:68:59:0B:A2:9E:32:CA:30:AE:87:D9:9D:2D:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43171CAAC5D26C6509AAE28
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed4c36e-bf20-3c44-8e2c-d19f226dad3c.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2603:3005:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:71:ca:ac:5d:26:c6:50:9a:ae:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=37f2bb3f-6615-4623-8249-ed2a5144fb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a0:d4:a1:9a:7b:19:ff:15:2b:4b:58:a9:a4:
                    86:7f:b9:f7:81:7a:a5:03:e3:59:be:de:74:7b:0b:
                    46:2e:ff:48:94:9d:54:da:b6:0c:07:12:39:4a:6b:
                    ce:93:d6:6b:b1:7a:d1:67:12:c9:60:37:99:33:cf:
                    4a:49:9c:31:1d:8d:48:50:b2:7a:61:98:74:15:2a:
                    cc:42:69:b4:49:7e:7a:ad:c8:fc:34:94:52:7c:17:
                    6a:ee:f8:7e:fb:7e:d6:7b:ca:21:a4:38:54:1e:22:
                    87:8b:27:7c:77:22:67:9d:16:67:13:c7:47:ad:1e:
                    40:ac:62:1f:97:27:bf:fb:6c:c8:a3:a7:5f:9f:08:
                    71:84:d3:1c:24:67:81:7b:9c:03:93:af:d1:0f:14:
                    d0:f7:7e:7c:64:6d:6b:83:b7:99:67:60:9b:9f:66:
                    2b:7f:20:9b:16:b4:a9:b4:5d:14:6c:8f:03:60:ab:
                    97:d5:fa:ec:bd:13:07:6c:2f:54:f9:2a:c9:84:18:
                    96:a3:fd:1b:32:d1:18:cc:57:48:47:17:2b:01:ac:
                    df:bd:5c:37:21:c3:7e:b4:e4:a3:5f:e3:95:74:8f:
                    f9:c4:50:f6:d7:b4:4a:7a:f8:98:27:5b:02:88:58:
                    73:9a:f7:3e:c8:a6:da:11:52:aa:e3:98:03:4e:4e:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:92:AD:FE:29:9A:68:59:0B:A2:9E:32:CA:30:AE:87:D9:9D:2D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed4c36e-bf20-3c44-8e2c-d19f226dad3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:88:2e:1d:ec:dc:ce:71:7f:f2:2c:a0:75:f0:f7:9c:ec:bf:
         2e:3b:77:b2:a9:c8:2c:67:c4:0e:fc:2c:cf:b2:6d:43:c7:c9:
         87:65:90:d9:20:c5:12:1c:6e:c7:4e:a0:40:4a:43:b6:0c:33:
         0a:e8:72:39:28:ff:fe:65:2b:bf:f8:91:2b:75:15:80:87:18:
         5d:0a:a8:7c:b7:d6:e4:68:1a:f4:d2:ad:92:ff:79:b4:f8:00:
         55:85:84:00:46:dc:4e:a8:8a:b6:79:03:29:c5:70:9c:de:96:
         55:22:20:62:1a:4b:f6:a0:ef:da:e8:04:60:d5:7b:21:53:a2:
         29:69:1a:b4:36:06:a3:01:4a:48:fa:a8:98:54:2d:a3:6b:7c:
         a2:38:81:8d:9c:39:d1:0c:5e:07:f6:ae:d0:d7:1b:44:24:6f:
         d1:b8:3e:c8:e9:cc:0f:76:85:84:80:fb:06:ec:44:e3:50:5f:
         d5:3e:21:de:f1:b7:e4:fc:fe:6f:9b:cd:6a:70:56:d5:e3:d6:
         e9:25:ad:44:66:4b:c1:c8:fd:9e:ed:a4:88:f1:14:48:62:09:
         22:31:04:6f:ac:99:f1:58:3d:59:01:e0:b9:9d:da:e0:3e:c6:
         9f:df:82:ea:31:5c:66:3c:63:ff:26:20:af:a6:a1:d5:dd:ac:
         14:bc:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:48:41 2025 by rpki-client