Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/164453bf-50c8-312e-949e-678f15356a9b.roa
File:                     164453bf-50c8-312e-949e-678f15356a9b.roa (raw, json)
Hash identifier:          9VQUaBUPHpp4KhYnHjrJuPaRahSOuuYeYCm26yxPZcQ=
Subject key identifier:   04:55:25:2E:7A:22:FC:3F:D4:7D:1F:7A:CD:4A:B4:90:6B:D2:48:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9C23161DA123E8711DE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/164453bf-50c8-312e-949e-678f15356a9b.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        2603:2440:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:c2:31:61:da:12:3e:87:11:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=cdfd6779-6d30-4423-a584-905865c41512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cb:c8:36:5c:d9:a1:5b:ca:34:cb:56:86:7c:
                    a9:6b:7c:08:95:9c:0a:78:92:e5:a0:66:6f:e0:7b:
                    b9:83:07:64:30:44:bc:9f:0c:79:72:6c:06:d5:7f:
                    50:28:16:3b:78:9b:3c:63:5b:20:ba:42:0f:80:d1:
                    67:78:58:9a:a3:c3:60:34:24:76:8d:04:be:d0:dd:
                    a2:e7:ff:e7:73:3e:1d:b4:b1:52:5d:59:e5:5a:0c:
                    1f:ed:ce:f4:2b:5a:07:08:9f:ee:cf:10:fd:6b:39:
                    90:a7:cd:b9:02:10:60:d5:25:ae:42:86:d5:d8:9f:
                    b8:86:fa:3d:08:05:07:90:70:fa:1b:84:9e:04:23:
                    e9:5d:e6:fa:51:94:ba:b0:74:d3:f0:98:f3:06:63:
                    c7:56:50:4d:b1:87:2d:18:84:33:e9:f4:25:15:db:
                    18:9e:ac:57:7b:18:52:0a:f7:6a:23:7b:1a:9b:0c:
                    25:59:0a:13:53:e1:35:b4:dc:55:5a:26:57:6d:83:
                    8f:0c:e3:00:29:55:e6:76:11:a6:c0:a8:29:a1:8b:
                    73:39:8c:31:21:bf:a8:00:f2:1c:1e:ba:b2:44:7e:
                    67:63:3f:d8:10:06:7d:ea:d6:14:bc:77:9b:3d:ee:
                    ed:64:04:d5:48:a2:21:ef:fa:6d:a9:a8:e9:c2:01:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:55:25:2E:7A:22:FC:3F:D4:7D:1F:7A:CD:4A:B4:90:6B:D2:48:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/164453bf-50c8-312e-949e-678f15356a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2440:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:f7:1b:ee:91:7e:87:06:5a:76:a0:cb:ec:a9:35:54:97:c2:
         95:1b:1b:52:76:e4:8c:19:27:9f:dd:10:a8:18:3a:00:39:f1:
         77:1b:7b:3d:16:ca:cf:f9:5d:6c:d2:3b:c7:a5:10:9f:fa:3c:
         6c:5f:f6:8a:65:b0:9c:8e:2b:3e:69:c2:5d:4c:ed:7a:3e:40:
         81:5a:a1:b8:e9:88:fa:eb:0d:6a:84:7b:1d:9a:c0:7a:93:32:
         91:f7:01:eb:d7:39:d7:90:55:a4:24:29:90:76:02:48:a4:9b:
         fe:b7:de:8b:e7:5d:4e:86:7c:80:86:38:6b:f3:e8:3b:e5:af:
         d9:17:d6:4a:f0:a8:3d:96:0c:26:66:66:26:ee:ac:4d:9e:45:
         8a:9c:a5:2a:d7:b0:48:a6:28:f9:29:c4:5d:fe:21:a4:67:78:
         88:34:c8:41:65:3b:11:bc:69:a0:db:85:21:3f:52:bf:8a:a2:
         ec:1e:1b:87:44:40:a2:04:22:23:1a:76:b4:ef:de:95:88:85:
         c9:e6:55:fb:20:43:c8:59:fc:77:5f:13:74:08:54:78:1e:1b:
         76:76:de:57:97:37:7d:9a:c2:ef:49:b7:4d:14:a1:c0:0b:ad:
         b3:e2:52:62:69:f5:f7:93:50:6a:c1:07:19:7f:6e:46:53:87:
         e3:d9:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:58:20 2025 by rpki-client