Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4f2ad32-d79f-3477-86c0-7217e180a9bb.roa
File:                     e4f2ad32-d79f-3477-86c0-7217e180a9bb.roa (raw, json)
Hash identifier:          vB+xooNTIoIM94RYQLm994BtHYzr40Z8JMQpoClVKBE=
Subject key identifier:   B3:02:58:DA:D9:5D:CD:FE:A3:2E:4A:AB:D4:CF:98:5B:28:CA:E9:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F6FF12C68E641532ABAAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4f2ad32-d79f-3477-86c0-7217e180a9bb.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        2603:2180:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:ff:12:c6:8e:64:15:32:ab:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=8c00a472-3422-4684-b150-958eff3d4313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:5b:fa:a4:c2:5a:cf:ca:01:15:ab:5e:35:
                    2e:fa:30:c6:28:c7:26:71:df:49:8d:f7:8a:75:cc:
                    5e:4e:76:03:45:59:db:37:62:48:2b:34:ef:77:ec:
                    80:9d:8a:15:22:c2:21:06:4b:17:d4:a2:15:38:db:
                    92:3d:fa:a6:f2:07:52:eb:cb:36:85:7f:a0:69:23:
                    d6:47:5b:05:d4:14:df:48:09:b3:88:22:1e:eb:1d:
                    69:42:c1:3d:5f:3d:50:fb:96:ea:f9:b8:ff:8e:cc:
                    6b:66:b5:d0:18:3d:9b:3f:bd:7b:9e:f2:ea:eb:f4:
                    65:c2:45:79:32:62:12:b5:de:0d:9a:bd:ff:f6:58:
                    b0:26:fe:ce:c1:2f:06:8d:e1:9e:de:6f:93:86:91:
                    79:87:c7:b0:19:08:51:45:6d:12:6d:c7:a9:90:6c:
                    7a:ba:cf:46:cf:24:a4:d8:eb:ab:ae:10:64:cd:4e:
                    d6:26:c5:0a:58:61:1b:a8:72:55:b4:88:ed:ba:3f:
                    44:26:58:5f:24:66:41:b7:06:bb:16:16:13:ab:0d:
                    86:14:e3:62:7f:0f:d4:9d:08:c6:34:8b:15:90:1e:
                    2d:0c:d8:e6:46:b8:cf:90:7f:3d:0e:24:5f:9a:9c:
                    6f:9f:eb:8b:1a:f5:08:fd:39:0c:81:7d:f5:ba:44:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:58:DA:D9:5D:CD:FE:A3:2E:4A:AB:D4:CF:98:5B:28:CA:E9:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4f2ad32-d79f-3477-86c0-7217e180a9bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2180:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:56:01:97:b2:d6:46:d6:f9:c7:f0:fa:e4:3f:91:5c:b9:36:
         b0:f8:eb:ae:0b:42:a8:ab:43:52:7e:eb:d4:d7:1d:b8:25:e3:
         08:5c:a9:32:b3:41:21:a0:e1:a6:b8:73:bb:22:23:da:50:f4:
         cf:f3:bf:3b:45:33:d5:4b:94:ff:f7:0b:d3:e9:2a:55:fd:34:
         0a:c8:76:26:4c:91:58:f7:c9:db:18:9a:6a:c0:3e:d7:c2:49:
         83:b8:71:f4:14:42:34:b7:a9:5d:dc:b3:7b:97:bd:72:b7:09:
         dd:5b:8e:b5:10:b3:1f:ca:d8:b3:57:f2:c4:ca:d6:13:12:f4:
         19:9f:e0:91:9b:9a:a2:33:27:0d:0d:6f:18:6a:f0:a6:a5:94:
         7d:da:92:45:00:ed:7e:c6:de:e2:a1:17:85:43:0d:ae:4b:99:
         a2:ca:19:d4:bd:38:b5:bc:52:79:50:48:97:c8:bc:fb:31:71:
         60:cd:d2:37:06:70:22:51:b9:87:84:60:7e:57:5f:c6:cc:6c:
         6d:a2:41:b0:9c:92:6e:8f:ab:1f:0f:ef:89:53:93:1d:7a:27:
         40:1e:fb:8d:da:f8:3c:1c:22:49:5a:9b:b5:a5:30:a9:80:54:
         01:fb:b0:e8:e3:c3:0d:13:c1:68:4a:0f:e1:20:f0:66:fd:6f:
         39:e9:41:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:01:56 2025 by rpki-client