Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1da0638-cc30-3d2a-a981-501864b0c8d3.roa
File:                     d1da0638-cc30-3d2a-a981-501864b0c8d3.roa (raw, json)
Hash identifier:          liadtOWcKf/CYXPgBKo/ghtTjdaYeaQthfg0C2G/oH0=
Subject key identifier:   56:2D:18:DB:39:D0:9D:14:7D:A6:38:5E:8A:77:21:16:CD:F1:C0:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4323E33B880166B4947AA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1da0638-cc30-3d2a-a981-501864b0c8d3.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33662
IP address blocks:        2603:22c0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:32:3e:33:b8:80:16:6b:49:47:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=99be17cd-0e4d-403c-9797-7f883c5d4af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:2e:1a:5a:87:27:9a:53:f5:9c:70:2e:41:
                    30:3b:14:f2:dd:20:57:6f:00:c6:d8:fc:67:64:22:
                    a0:50:49:2b:29:25:2f:d2:f0:80:97:d2:00:2c:d4:
                    19:db:8f:b3:b4:09:d6:15:ee:e0:06:3a:44:be:33:
                    c8:d6:e7:7d:30:93:1c:94:2e:23:57:9f:0f:00:44:
                    f0:17:c3:40:07:78:07:3e:99:ae:2e:c6:83:88:6d:
                    81:4c:55:83:ab:2e:ef:82:f6:4d:73:34:dc:e9:a4:
                    e3:9d:5e:17:ae:37:e0:59:01:aa:74:7b:c0:26:9c:
                    a5:6b:80:6b:6d:ea:6e:34:c7:0e:64:03:ca:8e:29:
                    1e:24:b3:75:d2:c0:d9:59:aa:66:fa:0f:d5:ac:0e:
                    b1:f1:cf:65:c8:a7:d1:91:e3:ea:af:c8:ea:c7:21:
                    0d:f5:58:c9:60:a2:3c:cf:c1:3f:19:c3:aa:51:2c:
                    83:b8:e1:ed:55:9c:31:db:7e:59:8a:ee:fa:e5:06:
                    56:cd:91:60:08:67:e0:33:51:d0:9a:fe:97:cb:56:
                    df:c2:14:37:8e:f7:ca:f2:99:09:91:22:1c:a4:1c:
                    b8:ba:8a:a7:f1:22:45:39:e6:4c:6e:4e:f8:85:d8:
                    68:f9:7a:8e:88:a8:f4:fe:b4:28:2c:22:ba:6c:31:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2D:18:DB:39:D0:9D:14:7D:A6:38:5E:8A:77:21:16:CD:F1:C0:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1da0638-cc30-3d2a-a981-501864b0c8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:22c0::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:06:d7:b4:20:9b:01:a8:cd:15:d9:b1:29:2a:18:91:33:ab:
         8a:d3:bc:1b:40:0a:28:ed:96:08:ec:e3:39:03:a5:4c:2c:1a:
         d8:e5:d4:13:55:d4:c9:a4:6d:f6:30:9d:e3:0c:18:a9:fe:1b:
         f6:63:09:75:16:1a:44:ca:fb:1b:81:85:60:16:a9:57:39:13:
         63:19:81:e8:01:83:da:45:74:29:3d:ce:9b:d9:81:4a:71:0c:
         cf:92:54:22:16:76:bc:9a:4a:76:e3:d0:e9:f0:b1:99:52:d3:
         6c:fb:15:62:ed:67:6a:5a:e9:e2:5b:e5:7b:4e:1d:c9:4d:c5:
         aa:fc:b5:e8:56:4c:58:55:77:04:2f:3e:43:e0:8a:c2:90:3a:
         1b:65:08:cd:54:40:5f:8d:f6:d1:c2:5f:4a:7d:a2:0e:9b:6e:
         82:83:ba:e7:8f:21:a8:68:e1:d8:d8:3c:2f:44:13:bb:99:99:
         60:e4:22:f7:32:09:f9:ae:b2:4a:df:b5:a6:85:06:2c:c5:cf:
         38:8c:61:08:ef:5a:0a:d4:2c:38:6a:f6:46:e7:95:68:80:37:
         86:3d:db:53:c6:f5:31:fb:e2:f4:f1:66:a8:a6:91:55:78:f7:
         8f:80:db:ba:70:65:19:ae:56:81:bc:51:6d:19:60:46:05:4c:
         0f:30:9a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:10:39 2025 by rpki-client