Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27754ea3-e547-3826-a8c3-233bbf5dc65f.roa
File:                     27754ea3-e547-3826-a8c3-233bbf5dc65f.roa (raw, json)
Hash identifier:          oXe4tIgop7RPihD4lZbVFGnHmPUKKVqTHcB28VIue0s=
Subject key identifier:   C7:95:70:80:44:19:F2:AF:5B:2B:F6:B0:7E:0C:7F:BA:84:CB:3C:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE0313C5EF9F037D43FD6C000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27754ea3-e547-3826-a8c3-233bbf5dc65f.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        2603:20c7:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:3c:5e:f9:f0:37:d4:3f:d6:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=886a6e5b-4f21-4fee-be12-624faba59acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:1e:4b:cc:53:03:0f:7a:93:f2:fd:f6:8f:
                    67:01:1a:c0:f1:93:28:10:0d:8f:ab:8e:f5:03:7d:
                    a1:3b:96:48:f8:f7:b6:39:e0:fc:99:33:4d:09:13:
                    fc:7c:d7:72:6d:4f:34:ba:50:cd:fb:50:5b:4f:83:
                    03:03:d3:11:e7:c0:39:fa:50:92:77:59:a9:19:b7:
                    d3:5d:c0:0e:51:50:35:c3:11:70:e3:15:ee:d1:f9:
                    7a:44:91:59:52:c1:9f:04:49:e4:ce:de:8c:c5:90:
                    61:f0:6c:cb:23:46:5a:fe:b8:71:1e:1c:de:f8:41:
                    00:85:54:92:cd:1f:44:36:33:9c:20:fe:f7:2c:47:
                    7a:cc:44:00:2c:37:50:d5:70:89:79:c6:1a:4b:0a:
                    1c:1d:33:fe:22:1a:18:b8:ce:46:05:00:bb:02:84:
                    bd:3d:93:b8:1d:19:b7:1b:df:55:6f:39:aa:a3:22:
                    a6:7a:5f:11:e8:7b:94:88:8c:35:49:f5:3b:de:0e:
                    b0:9c:f1:5b:8b:32:90:1e:0a:1c:ba:36:f3:de:0f:
                    3b:ac:3a:60:f3:05:30:1f:97:d5:56:67:83:a6:2a:
                    79:3e:be:fc:ba:6d:93:20:c5:b1:a9:ed:ca:16:48:
                    76:57:a2:16:b0:e5:55:44:46:25:76:c9:21:5e:34:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:95:70:80:44:19:F2:AF:5B:2B:F6:B0:7E:0C:7F:BA:84:CB:3C:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27754ea3-e547-3826-a8c3-233bbf5dc65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:20c7:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:c8:39:2e:4b:a2:18:c6:9c:9a:3e:df:93:10:e0:e3:5a:
         f5:a4:2f:c0:0a:89:7c:82:53:7d:9a:b8:56:93:87:94:9b:c1:
         0d:f2:4b:95:64:9e:36:0a:f9:30:16:58:15:a5:1c:c8:4c:f3:
         73:71:c6:5b:4f:11:44:5d:33:1f:05:6e:4f:32:9f:f1:e6:91:
         d3:c4:43:81:8a:3f:92:ec:2f:a6:46:e3:a8:c4:ba:01:4e:27:
         90:dc:3b:f1:d7:b2:c8:5c:c9:21:e1:78:d9:b7:fa:ce:de:aa:
         e0:93:f1:69:e8:5c:f6:0e:c1:13:02:ea:a3:22:76:e6:d3:1a:
         17:9c:02:d2:42:8e:6f:a3:f6:e5:a5:a3:e5:09:3b:fe:0f:60:
         b5:d1:c5:b9:5a:c5:a5:f2:34:65:a2:90:3c:68:97:50:98:6a:
         9c:18:26:58:00:32:b5:e9:0d:fd:2c:31:b8:be:9e:ba:ab:68:
         b0:43:a1:a8:67:c8:38:a6:e0:7f:80:21:30:7a:98:ca:f6:18:
         04:cc:c1:58:f6:78:33:69:76:10:a6:73:0c:09:61:21:ad:60:
         05:ea:67:14:97:21:ad:ce:fd:e3:77:93:a9:57:de:0f:9f:84:
         fe:be:ca:13:02:17:98:ef:29:68:46:11:b8:66:73:a8:b9:ff:
         30:cc:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:37:48 2025 by rpki-client