Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c52f25f4-b23d-3293-a2d8-9b679bccb765.roa
File:                     c52f25f4-b23d-3293-a2d8-9b679bccb765.roa (raw, json)
Hash identifier:          cb2mBuv2uF+sm5/e97nA4N32IA5mFxV1D9qLHQbeHrc=
Subject key identifier:   AC:75:E9:29:DD:89:82:7F:97:04:F5:07:57:E5:51:2A:52:37:D3:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D165260CA252D421EFD25DA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c52f25f4-b23d-3293-a2d8-9b679bccb765.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        2603:3014:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:26:0c:a2:52:d4:21:ef:d2:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=26b3be16-90c3-4fd0-a7b6-75f1da17427c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:82:25:e2:ec:4f:45:d9:56:fa:d1:0e:2c:bb:
                    7d:34:f0:c2:76:27:60:6c:04:c3:d1:f8:9d:80:d8:
                    39:a1:54:74:44:fa:00:1f:ec:5a:09:8d:b8:b6:ec:
                    b4:30:bb:4e:76:8e:a8:fd:77:3c:58:6f:4a:47:76:
                    7d:4c:9d:f7:88:4b:ca:47:bb:85:db:8d:30:89:1c:
                    0e:10:41:07:ae:89:d3:a6:4b:7f:07:1d:68:39:c1:
                    1d:a3:6a:b2:32:37:49:b3:29:4f:30:1a:43:b5:44:
                    9b:53:fa:b3:44:13:6e:ee:3a:68:19:5b:5f:4f:d1:
                    18:50:45:18:1c:cf:87:8e:4e:89:d6:d2:9f:62:dd:
                    d9:57:db:d5:e8:4c:97:07:62:9c:e2:fe:12:09:c7:
                    27:90:61:d3:80:a7:35:a3:a5:86:5e:e4:5b:da:eb:
                    98:47:93:f8:e1:02:b8:33:8b:fb:6a:9b:a7:23:62:
                    49:29:20:fd:97:42:71:b8:38:2e:12:b6:b5:6a:eb:
                    6d:51:a3:01:47:38:9d:a9:63:43:37:eb:3d:63:1d:
                    0b:19:68:48:ae:44:68:4c:2e:95:3c:f2:e9:39:23:
                    99:60:34:54:e2:d0:7c:ba:36:52:74:c6:d5:25:4a:
                    05:b7:63:3b:b0:1b:7f:14:52:5b:30:ec:55:e9:88:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:75:E9:29:DD:89:82:7F:97:04:F5:07:57:E5:51:2A:52:37:D3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c52f25f4-b23d-3293-a2d8-9b679bccb765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3014:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:bc:4f:18:96:e2:cc:ad:51:ba:a3:cc:8f:01:a4:97:06:ea:
         a4:3d:66:0c:e4:6d:e0:61:ad:23:9d:67:d4:0a:cd:6c:26:db:
         b8:e8:57:8a:5f:40:60:0a:c7:de:d8:6e:b0:b4:f8:88:79:99:
         06:a7:a0:d9:e8:93:97:5e:b3:35:80:fd:72:e4:03:1a:43:8b:
         b0:80:5c:c4:ca:7f:24:6b:72:f4:d6:28:eb:04:90:54:15:6d:
         f2:0d:b6:51:2b:35:64:59:a6:fb:93:66:a5:23:6e:e4:21:0d:
         c0:6e:a8:52:d1:4b:84:ba:ce:4c:12:30:41:90:b3:a1:be:ec:
         5a:f6:a1:8c:b1:ff:c8:2c:e9:07:f4:79:be:df:47:15:d6:e7:
         de:7c:41:57:12:62:03:8b:2c:13:3c:ee:1f:5c:88:35:32:e5:
         ae:a7:83:f5:34:23:4e:ea:f1:c8:cd:4e:ef:8a:bf:3b:de:7d:
         4c:29:03:d3:88:77:b3:d5:61:26:2b:de:c5:7a:15:4a:76:f6:
         e9:d8:0b:c6:c8:3a:8d:ee:ce:8c:fb:85:a5:f6:fb:fe:b9:6a:
         98:1c:e2:e9:c6:89:bc:04:6c:d2:d8:76:47:a9:e9:75:10:d5:
         65:e2:fb:6a:92:54:90:43:79:ce:d6:19:49:52:59:b6:f8:73:
         9a:49:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:53:37 2025 by rpki-client