Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4453270-5f75-3969-a26f-f8f9b50c3015.roa
File:                     f4453270-5f75-3969-a26f-f8f9b50c3015.roa (raw, json)
Hash identifier:          YWO2RlXzbMNHflgFaP95TGpk0GoxeA2N3h9S8O6+dXY=
Subject key identifier:   CC:3A:92:5A:2A:B2:4F:B6:B6:25:A4:35:B4:BD:95:80:D8:08:14:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C6B4970F1643BCE29ED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4453270-5f75-3969-a26f-f8f9b50c3015.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        2603:3016:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:6b:49:70:f1:64:3b:ce:29:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=47e7b9d7-8082-4143-b0af-f6f4be0b168a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:32:02:c6:ec:bc:6f:09:19:7e:22:3d:de:
                    36:77:25:8a:29:fd:e5:58:4b:ef:3b:ef:91:40:c0:
                    52:ee:4e:1c:cc:87:76:30:0f:c1:d0:97:77:0e:53:
                    76:90:48:9b:f0:1a:61:63:19:16:38:83:87:c0:0e:
                    4d:57:38:90:67:6a:dc:40:d6:9d:31:e6:17:5a:97:
                    66:a8:fa:28:44:5d:e3:9e:2e:ee:9f:50:a3:88:3f:
                    ce:49:62:2c:65:eb:d9:14:05:80:12:6a:55:da:60:
                    99:49:ab:3e:4d:bd:7b:22:6c:6b:d4:af:14:57:b2:
                    88:9f:12:d7:0d:83:c6:12:4e:69:5f:62:37:38:26:
                    5e:06:de:b7:08:dd:d7:d3:9a:b9:16:93:55:bb:fa:
                    98:b6:a7:76:fa:98:a1:f7:d2:b4:e2:cb:70:dc:3d:
                    f8:30:41:ec:01:09:be:57:64:26:33:64:e8:23:22:
                    28:08:c7:42:36:94:e6:5e:6e:ef:62:0a:70:7a:12:
                    fe:ef:77:12:ba:eb:c9:42:93:4b:12:07:aa:db:87:
                    17:e6:44:80:66:e1:46:31:12:7e:ce:3c:86:35:3a:
                    9e:ad:29:bc:1d:10:9a:47:ab:e5:00:cd:d9:d1:4d:
                    83:33:00:55:2a:3a:f6:bb:92:d6:07:43:38:4e:13:
                    0b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3A:92:5A:2A:B2:4F:B6:B6:25:A4:35:B4:BD:95:80:D8:08:14:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4453270-5f75-3969-a26f-f8f9b50c3015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:6e:97:ac:61:d2:a8:b8:aa:35:19:82:f5:bd:96:75:1f:0f:
         bd:5c:52:7e:53:e5:f0:4b:f3:6e:4b:2d:6d:dd:4d:1b:b6:e0:
         d8:76:af:d6:aa:38:1e:93:c5:2e:a5:d7:55:64:4b:97:f0:fd:
         42:1f:2c:1d:ad:2b:21:af:ff:6b:e1:f0:0d:b4:42:41:fc:10:
         bc:07:5a:02:0c:75:b9:34:ad:d4:97:d5:e6:76:9f:23:f7:92:
         06:e9:1a:2a:c0:49:ce:6c:0e:f7:c3:3b:f0:2c:f0:8c:39:53:
         49:71:a6:89:2f:bd:b0:42:0d:87:48:d7:88:dd:52:70:42:13:
         2f:fb:0d:5f:4c:e0:90:15:4b:d8:fd:1b:8e:d1:c9:f6:d1:29:
         42:7a:68:cf:68:18:0f:87:58:01:d2:bb:e6:08:98:d1:df:03:
         c0:2d:41:b5:e1:20:b9:c6:7d:8e:d8:93:14:9f:06:05:79:0b:
         45:b8:bc:21:5b:4d:07:13:d7:8f:10:9d:f5:a4:2d:60:0d:57:
         c8:39:bd:3d:45:58:c2:88:b2:0c:04:62:f7:2f:10:2e:08:70:
         36:76:3c:12:c1:1e:1f:59:dd:65:bf:c8:54:f5:b6:15:ec:a3:
         dc:f3:cd:9f:49:b0:7c:89:20:8d:4d:16:a4:c3:a1:a9:bd:0e:
         3f:75:ca:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:44 2025 by rpki-client