Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdbebb36-7d4d-33f8-b377-6512a9bdd014.roa
File:                     bdbebb36-7d4d-33f8-b377-6512a9bdd014.roa (raw, json)
Hash identifier:          k9ZlXbCWbESYgDQy3MGuL18C7hKb55HrD2rz+W9eKaM=
Subject key identifier:   1F:30:C4:4A:BF:D7:D6:7A:51:87:62:DE:7A:95:AD:E6:08:26:67:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A00DAE8D5A9D8167A77953EF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdbebb36-7d4d-33f8-b377-6512a9bdd014.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     21508
IP address blocks:        2603:25c0::/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:e8:d5:a9:d8:16:7a:77:95:3e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=f94db4b0-ffe3-4ad4-bb3d-cf5624e15316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d6:d8:14:c0:47:a0:4d:15:44:9b:19:0a:f2:
                    03:16:10:80:7a:a7:28:01:4b:b1:2e:02:c8:2f:dc:
                    4f:be:8b:04:36:1e:4b:cb:67:7e:0e:ee:8e:e8:d9:
                    f9:78:43:c1:a2:44:21:31:42:8e:ab:12:f8:bc:bc:
                    e3:45:3f:a8:43:3d:38:6f:02:51:4b:08:9a:65:21:
                    00:30:70:a1:69:b6:0e:61:f9:12:b5:a1:3d:16:bc:
                    6c:45:25:30:d3:de:c7:9d:9e:33:19:fc:a2:05:a6:
                    8b:74:45:c1:da:d9:de:87:bf:c8:b1:0c:72:d9:70:
                    7a:0c:88:b0:49:57:cd:c1:62:2b:c8:c0:f7:01:e3:
                    fb:d2:1e:a3:b1:e2:9e:28:0c:86:60:f2:80:f6:5e:
                    a1:7f:97:2c:49:e4:bb:ff:67:5b:e1:25:6a:ad:9f:
                    be:ad:e3:0d:ec:d4:f9:dc:70:f1:65:4b:cb:4a:8d:
                    7b:f4:fa:9c:41:fe:2c:37:71:8e:74:c1:ef:f2:9c:
                    28:9a:ca:06:49:f7:72:39:d3:05:fe:40:2b:e6:77:
                    dc:08:d5:ea:2e:7e:e1:f0:d5:ee:73:f9:eb:97:e2:
                    1a:99:5e:7b:81:a8:60:92:bc:bf:32:a3:81:17:d1:
                    fd:bf:39:9d:29:5d:6a:22:83:1d:e5:0a:61:f7:b7:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:30:C4:4A:BF:D7:D6:7A:51:87:62:DE:7A:95:AD:E6:08:26:67:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bdbebb36-7d4d-33f8-b377-6512a9bdd014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:25c0::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:dc:0b:67:2e:8a:47:d3:fc:4b:50:10:b4:c6:7f:bc:e2:b6:
         ca:1f:fb:b5:af:b3:95:b8:f5:49:e7:50:2c:40:45:9d:18:5f:
         e5:45:ac:ac:b9:38:79:78:c1:c0:61:8e:25:81:ca:bf:23:18:
         2c:3f:41:19:4e:66:be:8d:f0:39:19:37:a0:80:f0:c6:9c:16:
         bf:f2:6d:35:4e:06:bc:70:ac:4a:ac:b8:de:8b:e2:aa:37:30:
         b1:76:a4:f2:ba:7d:dc:db:b9:7f:27:dc:08:c4:5e:c5:0f:37:
         9e:7c:98:cd:d4:93:fd:00:d7:e3:8b:78:9c:d6:84:6a:65:2d:
         b6:b3:44:cb:03:c4:ed:35:8d:b0:a7:84:d5:16:59:a2:5a:d8:
         df:73:95:64:0e:7b:da:28:e7:2e:7a:2b:c9:33:fe:a5:40:15:
         c4:09:9e:eb:e0:74:c4:2a:e7:a3:fc:f4:03:07:eb:a0:4e:22:
         ae:bb:57:1d:35:19:9a:97:2a:0c:4f:f7:a0:70:9b:28:87:f0:
         0c:17:11:84:26:67:d8:81:04:1a:f9:5a:b0:14:0d:15:43:52:
         da:f0:3a:96:e3:26:c5:02:6b:da:c4:1b:b0:29:2b:a0:4f:e3:
         77:bd:3e:5e:16:64:53:86:dc:5b:b2:cb:aa:b2:c4:e4:e1:45:
         f2:88:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:34:39 2025 by rpki-client