Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/447a426c-5bb7-390f-a0c9-3fab04bc6afe.roa
File:                     447a426c-5bb7-390f-a0c9-3fab04bc6afe.roa (raw, json)
Hash identifier:          Z4+y6Sqm/dUfI8oZA4yL3JpSSX5ErXc4cyXjejeHmJo=
Subject key identifier:   AB:71:52:98:32:FC:76:70:53:72:1C:32:5B:6A:39:1C:A1:EC:34:A9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC216234B2F9D85ECB72800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/447a426c-5bb7-390f-a0c9-3fab04bc6afe.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        2601:245:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:16:23:4b:2f:9d:85:ec:b7:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=9bc77e60-8841-4897-8257-72891cd11ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:3c:3a:37:f8:ba:5e:0f:31:b3:7f:d1:a5:
                    82:7f:b4:3a:3f:3b:12:90:6a:81:e8:23:8d:12:f4:
                    f9:3a:ec:03:74:e8:4d:8a:3e:68:1d:c8:3a:d4:a8:
                    f8:e5:a4:0f:c5:f0:60:a4:1a:43:38:21:a7:9b:7a:
                    d7:b2:eb:ab:c0:97:8f:2b:92:7d:8e:d7:96:c9:80:
                    c7:ab:24:5e:13:05:c8:c0:72:25:aa:9c:c5:b6:78:
                    2f:43:88:61:cf:9a:cc:0b:73:4f:50:5f:a4:42:51:
                    2e:c5:33:e1:4f:ff:66:28:9c:c7:ef:ab:8b:64:5f:
                    02:bd:9d:19:57:27:1e:45:6c:8a:4a:49:87:97:f1:
                    80:e2:fc:93:79:6f:fc:cc:c0:d9:db:04:24:93:8b:
                    1a:3f:c4:27:37:06:a5:5d:86:02:17:95:ac:0e:92:
                    a3:de:21:b7:97:38:53:c2:e8:2b:f0:4e:f4:ad:29:
                    2b:ff:74:85:91:a2:49:a7:55:ab:6b:db:50:49:b8:
                    90:13:73:0e:fd:3b:9b:a5:7d:ea:cc:82:f1:07:a8:
                    2b:68:93:fd:b2:5b:9f:7b:d0:b2:ed:0b:29:9a:d4:
                    24:ad:ce:4b:cb:aa:3c:a2:d1:28:6b:91:0e:9f:9b:
                    2f:85:98:93:c2:66:53:67:59:d6:f5:db:55:87:04:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:71:52:98:32:FC:76:70:53:72:1C:32:5B:6A:39:1C:A1:EC:34:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/447a426c-5bb7-390f-a0c9-3fab04bc6afe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:245:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4d:e6:62:e3:3e:ce:a3:53:3c:8a:f2:9f:cf:d2:03:ca:70:
         4f:a1:e5:6f:1e:32:f3:5c:7d:bd:c6:6c:d2:dd:0c:03:12:ef:
         4a:59:cd:74:c4:29:a8:68:32:46:e0:bb:19:da:27:c3:3d:80:
         81:0a:01:d3:42:63:8d:6a:95:e6:b4:53:3d:12:76:40:35:9e:
         88:51:a6:c6:ac:57:52:0d:96:01:82:67:f7:24:c5:c4:e3:7b:
         bf:51:2f:0a:80:f4:bf:c3:fc:49:f7:d6:42:0d:ea:36:9c:95:
         35:1f:38:bc:20:54:d7:df:a6:97:21:17:cd:a5:05:2b:41:8c:
         0b:54:4e:e8:d4:47:f0:88:33:9a:fb:9d:bf:17:4e:fd:3c:9c:
         9b:c2:cd:61:ab:9e:04:23:40:8a:bf:df:9c:59:fd:76:47:01:
         9b:e0:16:94:7e:12:23:de:a2:56:26:9f:c8:f1:a5:d8:13:a5:
         18:ba:2c:ec:5f:95:f1:64:80:f6:d7:77:72:98:a1:bf:c5:8f:
         45:b9:26:9f:92:6e:24:2a:f1:15:90:8d:ad:3a:50:ef:d7:2a:
         80:e2:d9:11:fd:7d:c2:9f:cf:fa:83:5b:fa:26:4f:04:4e:6a:
         ad:56:c8:34:b5:c7:ac:34:f3:20:cb:dd:33:d9:dc:07:fa:52:
         0a:6b:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:18:04 2025 by rpki-client