Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3027407-447c-332a-8cd6-bae70455c7e8.roa
File:                     c3027407-447c-332a-8cd6-bae70455c7e8.roa (raw, json)
Hash identifier:          /vJHCX/pwcEeQ3r9WAbWHja2Sr16WjZvd1yeh3C6Mmg=
Subject key identifier:   E8:7D:38:D4:1C:B5:3A:6D:F0:B2:D9:B1:E5:79:63:9B:0E:F9:6B:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4323F1767CE6071B31B6100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3027407-447c-332a-8cd6-bae70455c7e8.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        2603:300c:1300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:3f:17:67:ce:60:71:b3:1b:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=b0b4c553-bf33-4027-ba67-65834fb2a3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:0f:a2:1b:bc:9f:74:51:16:7b:d4:a1:60:
                    1e:68:d9:e3:9f:11:c5:46:52:8a:06:21:86:91:c1:
                    47:96:e4:7b:d2:04:f9:7f:f5:52:13:04:20:a3:a5:
                    a9:0b:5e:12:9c:f0:bf:36:83:54:64:00:83:cc:33:
                    a1:88:58:11:e3:e3:c7:d9:8c:df:78:77:ee:6d:29:
                    1d:6d:42:78:50:11:9e:75:52:46:aa:a0:0f:3b:c0:
                    99:80:d6:01:95:88:a5:25:cc:e2:14:10:cc:fe:65:
                    a3:bb:7d:56:37:47:67:7d:36:b5:98:3a:77:6b:b0:
                    b7:7c:d2:68:29:52:18:63:9a:ea:a4:98:40:de:a0:
                    2b:60:29:0e:fe:df:14:35:52:bf:d5:b8:ec:ca:84:
                    e7:08:df:50:c6:eb:e2:16:09:d5:da:7b:30:93:5c:
                    4c:9a:9c:9b:5b:e5:54:57:ce:4b:34:94:5d:3f:77:
                    d4:b4:68:06:fa:a3:a5:dc:fd:a7:97:03:b1:b3:42:
                    fd:f9:dd:70:ab:52:52:a8:a4:18:23:53:bb:ce:bf:
                    23:d8:b9:21:ba:ca:49:06:19:0e:c5:4a:27:44:42:
                    b2:b7:c7:62:0a:f9:40:69:25:d1:e0:77:03:b5:45:
                    f2:64:b5:72:33:db:ed:0e:b3:0a:9a:be:62:75:36:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7D:38:D4:1C:B5:3A:6D:F0:B2:D9:B1:E5:79:63:9B:0E:F9:6B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3027407-447c-332a-8cd6-bae70455c7e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300c:1300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f1:b4:56:27:e2:ee:56:b5:d3:3f:fd:83:8b:7c:2c:f4:29:
         ab:c0:3b:0c:f3:78:4e:8e:32:35:9b:23:e9:c5:98:29:e3:a5:
         c7:03:c9:bb:ac:d1:38:74:4b:6b:19:f7:90:d2:6e:44:68:b6:
         26:d9:bc:fb:51:91:64:38:8d:3c:e5:7b:61:83:4c:e4:72:34:
         d3:e5:ad:8a:97:a5:fc:3d:7f:9f:4a:97:d6:5a:67:81:f8:e9:
         21:30:c7:8b:da:69:bc:7c:9d:e7:e9:83:2e:c8:1b:c8:bc:3a:
         35:2b:c5:02:50:5c:af:60:e4:be:ea:0c:c4:f6:b1:b2:51:d1:
         e5:a1:c5:98:29:7c:6f:48:84:65:7b:0d:92:48:60:99:d0:f5:
         fb:3b:38:37:cf:8a:5a:fd:46:be:56:94:8f:db:69:5a:a1:f1:
         e4:74:00:69:94:83:89:9b:c8:79:c9:81:0f:be:52:97:81:a1:
         f0:1d:3f:bc:72:44:74:e5:55:1c:7f:62:4a:b7:9f:bc:c9:bb:
         b4:6b:4e:6c:09:9b:0b:a7:e0:8d:6d:de:cd:36:68:7f:c5:f0:
         c2:ff:f4:40:73:fa:e7:89:18:d5:cf:ae:41:7e:97:1e:7e:ed:
         a9:2d:9f:44:bd:bd:ef:54:6e:9e:4b:6b:d5:1e:dd:c8:9a:65:
         7e:f9:a7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:53:45 2025 by rpki-client