Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8519c02-30f2-33fb-8ce0-24a038fccee1.roa
File:                     c8519c02-30f2-33fb-8ce0-24a038fccee1.roa (raw, json)
Hash identifier:          Ebr6DoFM3ABlkKBbp2fruwY7XzV88mLsAQy4u5eb084=
Subject key identifier:   F6:9D:4D:8A:12:D8:5B:AA:21:D3:84:F8:6D:C3:FF:50:F8:11:AD:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D430883D4680AE177F5ECAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8519c02-30f2-33fb-8ce0-24a038fccee1.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        2603:3015:1f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:88:3d:46:80:ae:17:7f:5e:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=646dcbfb-8154-4860-a9f1-6ca77583b6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:ab:d8:96:fd:f2:5e:82:a8:2b:d6:b6:53:
                    21:79:7e:0a:f2:c2:d5:06:00:af:ed:ae:f9:84:df:
                    e8:45:23:0b:89:65:67:1b:a2:84:dd:5a:97:b4:71:
                    1e:ea:be:38:32:08:be:ee:31:2c:d9:e8:b6:c7:e2:
                    ca:83:42:53:cf:64:6f:b0:68:82:9f:3d:a0:5e:0b:
                    f4:45:01:f1:9b:35:db:9c:b5:a4:52:40:c0:e1:74:
                    92:af:d5:4d:98:c2:19:13:15:bc:b2:2e:83:16:b4:
                    45:0f:4e:e6:8b:1f:39:02:ed:1a:b2:ad:90:7b:37:
                    73:99:9b:e4:d3:66:3e:9c:ea:3b:b4:f2:8d:d6:12:
                    82:8a:84:49:1e:71:f3:5e:7d:c3:75:79:8e:d9:12:
                    15:ec:bf:b8:70:37:ed:9e:7c:7e:77:19:7a:45:52:
                    31:10:3d:54:63:4a:c3:2d:2f:87:77:1c:8d:60:e3:
                    b9:3e:a9:61:94:68:4f:3f:ea:57:f6:fd:64:99:a2:
                    28:ea:94:5c:c8:0b:4a:6c:18:0a:38:21:17:4e:cb:
                    c4:7c:9b:d1:35:d2:57:7c:45:c5:89:28:3f:e9:7a:
                    f9:39:c4:e6:33:0b:7f:6e:d6:b6:bb:d5:71:96:25:
                    fb:8c:f7:d7:af:5d:0a:13:63:cb:1c:1f:ce:ea:8d:
                    87:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9D:4D:8A:12:D8:5B:AA:21:D3:84:F8:6D:C3:FF:50:F8:11:AD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8519c02-30f2-33fb-8ce0-24a038fccee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:1f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:59:3a:a0:60:92:6b:fd:a5:29:73:08:2e:82:b8:2f:f3:e6:
         c6:d9:1e:f5:d7:98:43:c9:9f:6a:d7:96:4a:dd:dd:f4:45:bf:
         17:ba:59:74:97:14:6d:cc:86:d8:0f:c8:a8:82:d0:c5:7a:a0:
         0e:9a:7f:5a:2d:1f:75:37:7a:43:75:da:be:68:83:49:33:3a:
         f1:ff:94:ff:1f:6c:93:9e:fd:e8:83:21:36:49:b8:06:8d:f9:
         a5:db:da:64:2c:30:1a:e2:af:5b:e7:72:04:4d:b0:6f:57:00:
         10:81:11:3b:63:ab:2a:c4:80:b8:3b:24:08:62:ed:af:e0:aa:
         99:b1:6b:2a:d6:04:90:b8:ff:6f:55:12:fc:88:a1:2f:76:9c:
         8b:13:24:f4:82:27:33:5f:58:85:29:0d:c4:e7:88:94:c2:bb:
         79:73:53:29:42:fb:da:11:f0:1c:3c:ce:00:47:d2:39:a1:d9:
         78:74:74:cd:79:1f:eb:1f:22:83:52:3b:b2:e7:91:0c:7b:57:
         03:fa:02:18:0a:cf:b4:15:7b:0c:f5:cf:14:ff:a6:d9:54:fe:
         79:dc:de:6b:4a:71:93:fd:8c:78:28:2e:36:1d:a3:ce:4a:3c:
         c6:a8:31:86:23:6f:d1:0c:e4:e6:93:c9:75:36:29:77:e9:ba:
         77:9f:9c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 04:53:33 2025 by rpki-client