Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b49598-3200-343d-b581-4e90a98f7e93.roa
File:                     b4b49598-3200-343d-b581-4e90a98f7e93.roa (raw, json)
Hash identifier:          1R1fFnSKgYzhmQfIKoC+VAk25IxdXHKZDK10UgyvCko=
Subject key identifier:   49:79:31:8F:A5:57:9B:B9:98:7A:E7:26:89:A0:82:AC:6A:88:F0:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C05DA33DA7E82EAD6B1B600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b49598-3200-343d-b581-4e90a98f7e93.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        2603:301b:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:da:33:da:7e:82:ea:d6:b1:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=a6b8e7f9-c7e0-4c54-b284-8f481622478f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:43:94:fb:e0:85:f2:74:0c:4f:a5:f4:d0:
                    c9:e0:82:03:42:86:a4:4d:0d:54:ff:94:d6:58:0f:
                    99:39:56:3b:cd:07:cc:a8:8c:bf:85:c7:59:cc:6b:
                    cd:77:24:6e:68:86:66:cb:5a:b4:2c:09:90:f3:8d:
                    ed:92:a8:84:f8:09:f0:3a:fe:42:ee:dc:d5:7a:41:
                    a6:08:ca:5a:ea:0b:30:05:9f:1a:1f:fb:7a:fd:18:
                    50:dc:18:76:70:8c:c7:d1:5a:f0:a5:1d:09:44:89:
                    c5:d0:41:3e:57:72:de:ed:e4:2a:7f:b1:b8:7e:68:
                    ca:92:fb:f2:21:56:d3:54:c8:3b:c9:d0:ab:c4:86:
                    b4:d5:7d:99:11:ec:40:87:86:20:a5:8d:33:6f:39:
                    82:bf:ec:33:cf:a8:9a:f6:ef:23:b7:bd:be:37:a5:
                    5e:70:6c:af:21:9d:60:ef:f3:53:91:73:ff:ec:40:
                    dd:d2:0e:d6:9f:c3:bb:ed:fe:4c:ac:a8:21:8f:10:
                    95:59:28:77:66:f5:21:0c:7d:a0:3e:41:05:bd:db:
                    96:13:c0:2e:51:95:01:3e:84:f4:8b:c0:aa:5b:f5:
                    9b:65:37:c2:84:7d:1e:34:03:f1:ee:ad:15:c2:a0:
                    e9:61:22:df:0f:4e:5f:2a:0f:9b:a0:24:56:68:f0:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:79:31:8F:A5:57:9B:B9:98:7A:E7:26:89:A0:82:AC:6A:88:F0:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b49598-3200-343d-b581-4e90a98f7e93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301b:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6f:b4:d5:54:a2:7b:74:a4:e5:98:46:9d:ff:54:07:8e:62:
         23:a9:c1:0d:a7:5e:a9:2d:2d:ca:8b:48:ba:d0:9c:17:dd:e7:
         66:ae:52:31:64:ba:8b:1c:bc:2f:d9:5b:18:fc:1c:a5:1b:d8:
         72:7b:57:8d:a9:65:c8:cd:b4:60:29:84:23:82:8a:7c:07:29:
         44:47:a9:71:ab:c0:43:1f:22:50:52:75:81:59:f2:47:e6:1c:
         54:33:07:e3:e8:66:36:85:c1:2f:68:08:b2:8c:d2:46:35:94:
         1b:f1:4c:73:08:4b:65:83:81:cf:cf:0d:77:c9:2a:b3:e0:80:
         e1:bb:06:14:15:02:a7:ad:c3:f3:13:c7:bd:3d:20:5c:4e:20:
         3c:92:42:0e:88:00:d9:6f:c2:37:7a:04:d7:37:55:ba:7d:66:
         c0:75:c6:15:01:3f:c0:56:fe:a5:71:50:0a:c3:7d:8b:f9:41:
         a9:46:1b:54:05:ee:b1:ef:ca:c7:d2:8d:f4:11:2b:cf:36:a0:
         7d:26:d2:75:6e:05:dd:87:b1:5e:3f:3e:b6:2b:b9:92:b4:23:
         51:6f:30:07:34:1e:2d:51:33:29:b6:eb:b5:19:78:03:f0:d6:
         6f:7e:1b:7a:63:8f:c8:67:ee:87:1f:fe:2b:bc:60:43:a8:65:
         bb:93:d1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:04:34 2025 by rpki-client