Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00c288b9-19c4-3cda-b506-b93c40b9ce1d.roa
File:                     00c288b9-19c4-3cda-b506-b93c40b9ce1d.roa (raw, json)
Hash identifier:          9X2U+p0T4WuRnWMGUCMmzYYcx2/YR2tWbwFxdVAZwzc=
Subject key identifier:   5F:7A:19:0A:8B:0F:5A:E4:24:9D:15:1C:42:1B:28:7C:3C:93:A7:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9C255B3FCBBBBC48BF600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00c288b9-19c4-3cda-b506-b93c40b9ce1d.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        2603:2442:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:c2:55:b3:fc:bb:bb:c4:8b:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=04fcdbfe-b2e3-4519-804e-192ee1294d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:67:42:29:c3:71:a0:9f:24:21:7e:44:05:
                    3b:4d:a2:93:00:9a:9a:df:05:75:c4:50:e1:4f:90:
                    fe:93:2b:78:2e:e2:d7:de:e5:a9:0f:13:bd:63:49:
                    ba:69:c4:16:9c:84:3e:bc:74:4a:6d:b2:88:5a:13:
                    35:fa:5b:92:80:0d:1c:66:d1:b0:bd:c6:5f:e4:63:
                    bc:03:ac:fb:af:59:9d:48:9e:69:75:84:3b:aa:c7:
                    f5:6e:de:fc:af:ab:81:f6:9e:ad:20:5a:0d:ca:60:
                    a8:e6:e2:8f:09:5b:09:86:cd:cf:8e:9d:7e:d8:b5:
                    e5:85:41:07:51:41:83:d6:03:a0:31:6c:35:a2:c0:
                    96:39:f5:35:c4:81:37:8d:d8:b8:e0:3a:c5:fb:09:
                    00:01:c5:04:73:5a:36:34:34:c3:5c:b7:31:07:16:
                    81:a2:46:ce:20:38:1d:c3:d8:f2:1a:ac:69:48:74:
                    f2:5b:b1:67:ce:d4:73:b1:e3:78:05:36:24:a1:51:
                    0c:30:ac:ff:16:f6:27:f9:d5:f4:83:ab:59:c2:38:
                    eb:06:a6:e0:3f:19:0f:32:b0:fd:3a:8f:93:eb:35:
                    93:ea:41:7f:b7:ee:52:7a:f3:a3:51:51:c6:6d:66:
                    39:74:37:6c:ae:a4:8a:85:7c:d5:3c:a1:c5:3d:dd:
                    81:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7A:19:0A:8B:0F:5A:E4:24:9D:15:1C:42:1B:28:7C:3C:93:A7:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00c288b9-19c4-3cda-b506-b93c40b9ce1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2442:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8e:3c:ce:3e:36:ce:bf:ef:d5:b5:11:3c:0e:d1:0c:3b:d5:
         1d:f1:bb:0e:09:34:ac:03:19:b7:6a:6d:fe:ad:da:7a:6f:c8:
         44:5d:22:83:5d:10:9b:3f:20:05:a4:4d:37:b4:28:1c:ec:55:
         9d:81:1d:0a:d3:5e:2c:60:2a:96:c4:89:9d:14:98:26:ef:48:
         14:6e:c6:69:60:0c:f1:2d:68:6f:f2:2a:c9:88:91:b5:42:81:
         a0:d8:d0:36:ec:a7:dd:fc:1b:59:77:c6:3f:d1:9a:1d:51:22:
         c0:61:e3:ab:c3:fc:97:b6:80:df:e3:2d:96:34:cf:66:6b:49:
         a0:1a:bf:f3:9d:7d:82:05:7c:0f:ae:e0:bb:9a:89:b5:87:2a:
         5d:c8:16:2c:10:fb:62:bc:85:96:80:60:cb:38:7a:2c:50:94:
         6a:57:de:4a:df:d5:c4:64:13:6a:e0:bb:0a:bd:9a:4a:68:9a:
         16:dd:dc:3d:ee:e8:7b:41:c5:4d:76:ee:9c:15:4f:ce:06:5b:
         57:e0:23:28:47:76:b5:bf:bb:0a:22:d8:7b:c5:7a:44:b8:65:
         ee:ad:38:2e:e2:5e:f9:09:03:58:03:9d:84:e3:aa:8c:b5:91:
         38:6f:d3:33:57:8d:9e:af:3f:71:04:04:85:68:54:e3:48:4d:
         44:54:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:21:07 2025 by rpki-client