Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba1a6abc-3b44-3ee7-833a-80ebe144aa9a.roa
File:                     ba1a6abc-3b44-3ee7-833a-80ebe144aa9a.roa (raw, json)
Hash identifier:          2vkbot3WP3Ov5aiCg4GS7ZEDpxTToZs+JedwZ0wcz4I=
Subject key identifier:   4E:9B:7C:C3:2B:F9:F9:E5:A3:46:5E:ED:C8:62:D4:C9:DD:D1:62:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C061748C89A525652FBFA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba1a6abc-3b44-3ee7-833a-80ebe144aa9a.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        2601:803:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:17:48:c8:9a:52:56:52:fb:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8bfe3149-b51b-4ee8-8011-00b4846d4828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:f3:fa:8c:4f:6f:6c:3a:4c:40:ce:c0:96:
                    f2:35:40:d4:bb:3f:48:d4:f3:65:8d:97:e7:31:97:
                    f0:23:53:93:c0:99:d0:52:45:fd:0d:be:74:6c:07:
                    4f:95:dc:01:4a:38:c6:48:dd:fc:bb:29:66:86:e2:
                    c3:7b:4d:a9:23:f4:4d:99:ed:07:c6:bb:00:69:bb:
                    ff:96:c2:b7:d1:5a:f9:0a:95:f0:aa:2c:65:73:02:
                    16:29:9f:c7:33:84:25:7c:bf:84:f7:58:b2:66:00:
                    9d:55:b1:0f:d9:7f:a5:08:13:67:f7:cc:d1:8e:c9:
                    71:9b:d1:3e:5c:11:80:9c:85:9f:6a:5c:a8:b5:ea:
                    e0:37:40:05:74:99:8e:a0:01:a3:d7:a8:fa:11:1b:
                    c8:f7:e1:22:b9:0e:26:13:41:22:87:fd:a0:cb:4d:
                    25:86:a5:6d:6f:c9:c8:ef:e3:49:11:85:01:b1:de:
                    dc:b7:56:b6:3f:85:21:67:db:6d:c4:24:cb:ec:86:
                    34:b3:9a:b1:c6:65:32:58:e5:12:fc:9d:4a:67:44:
                    10:ba:5a:b4:37:29:fa:e0:11:6c:2e:c3:23:91:a4:
                    63:f2:bc:86:bb:61:57:5b:75:80:a7:e1:3c:e0:51:
                    a1:81:c9:01:56:86:dc:7a:20:e8:8c:15:bc:1d:e6:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9B:7C:C3:2B:F9:F9:E5:A3:46:5E:ED:C8:62:D4:C9:DD:D1:62:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba1a6abc-3b44-3ee7-833a-80ebe144aa9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:803:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:7e:4d:6f:1b:e5:0c:52:3a:a1:47:ba:a5:0b:66:9c:47:04:
         3c:d3:34:84:3c:e2:d6:11:7d:74:64:a8:6f:c0:a8:13:d5:bc:
         23:b5:a9:ef:7a:b0:b4:fe:6d:2d:f1:5d:ec:43:67:75:fe:10:
         6c:ee:b4:75:21:44:46:2d:6c:39:ee:29:c0:aa:2e:1c:64:0d:
         75:68:de:13:7f:f8:18:a2:80:6c:ab:98:76:80:41:5e:3d:5b:
         f8:8a:52:bd:36:44:c8:b6:5f:6b:13:6f:9a:2f:e5:3b:6a:71:
         2d:24:14:83:70:73:ef:6b:77:d6:ef:e6:20:c8:c6:54:99:8c:
         79:b4:94:e2:b1:4c:cb:12:00:59:37:3d:95:a8:3c:c2:56:10:
         98:a6:44:13:93:42:bf:01:af:e6:a1:a3:5e:04:56:10:88:bf:
         61:2e:a2:87:39:18:de:73:f7:2d:c6:b5:da:8c:f8:11:99:c0:
         2f:07:e6:77:90:a4:b4:db:0e:e2:a0:31:45:cf:d8:16:b4:2d:
         5b:86:25:08:7f:1f:fa:29:d9:86:07:8e:3c:47:d6:32:aa:81:
         e2:e2:1d:da:69:6c:7a:21:42:d3:3e:4c:7d:6e:1d:a5:a1:86:
         43:75:d5:61:18:89:18:86:e7:bb:28:de:77:d2:a0:ac:ab:cf:
         7c:4e:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:50:21 2025 by rpki-client