Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6272e039-5e36-307e-a319-60112d7fb9f9.roa
File:                     6272e039-5e36-307e-a319-60112d7fb9f9.roa (raw, json)
Hash identifier:          rYjN+O7rmO1LXf/lF7lAz0nNCLwhXo+DUBmveppMz5s=
Subject key identifier:   C1:1B:83:D3:8F:F4:B2:14:AF:2C:9A:9D:30:21:41:81:99:87:5D:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC3BFC9F3871C7BA8C69880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6272e039-5e36-307e-a319-60112d7fb9f9.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        2601:81::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:bf:c9:f3:87:1c:7b:a8:c6:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=14c0ff36-cc5c-4108-ab41-e4733e09e635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:17:53:f0:92:b4:5c:b0:4a:1a:de:94:8c:ec:
                    ac:70:6c:9a:48:eb:74:7c:db:d1:67:d4:21:4c:3b:
                    ff:d2:3d:b1:b8:29:67:b0:78:c3:2f:c1:d0:bb:ef:
                    a8:2b:dd:42:3b:9d:17:19:25:bf:8e:20:8d:4b:0b:
                    41:34:97:39:45:df:ea:1a:be:42:96:c4:23:42:0d:
                    14:00:47:0c:4b:4f:9b:43:1f:4e:ed:28:8c:b4:7f:
                    ee:96:1b:12:52:4b:0a:36:83:18:c3:6e:ab:5a:eb:
                    b8:f1:f3:ad:0c:29:36:b5:72:e8:d8:c8:86:63:bd:
                    99:6c:c3:d0:24:02:8e:51:f5:cb:5f:1f:f0:00:40:
                    24:00:11:f6:49:53:4a:e2:8c:d6:77:89:d4:ed:af:
                    d7:ba:d0:af:33:b7:c0:d0:dd:e5:15:24:f5:73:45:
                    d8:9a:a8:21:ae:98:08:97:05:31:40:1c:b4:43:08:
                    13:4e:b0:61:8b:e2:9f:97:32:97:8f:9b:3b:d4:90:
                    b2:45:01:a8:c9:91:a4:e9:47:40:64:09:69:78:15:
                    a6:f0:5c:e1:0b:54:97:1a:17:b1:d6:ac:50:fb:05:
                    a6:0a:6b:17:32:e0:12:8b:75:9d:8f:27:61:9d:90:
                    26:76:75:71:f5:aa:f1:77:80:19:e7:84:14:71:15:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1B:83:D3:8F:F4:B2:14:AF:2C:9A:9D:30:21:41:81:99:87:5D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6272e039-5e36-307e-a319-60112d7fb9f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:81::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:00:eb:0d:de:37:ae:09:d2:23:c1:02:26:81:60:0f:cd:22:
         0c:6e:d4:d2:52:98:5f:cb:3a:80:19:e2:94:cb:06:22:45:e7:
         a4:55:96:d3:ed:df:03:10:d8:27:3b:b2:a2:ab:0b:a7:f5:fc:
         27:7c:30:59:64:89:57:66:41:ce:b6:2d:4e:a0:8c:20:81:01:
         90:c9:bf:dc:5d:87:0f:72:14:83:db:dd:6d:cb:71:2d:2b:bf:
         00:45:88:ec:bd:ab:fd:0f:67:5a:61:7d:5d:b9:0e:db:51:2e:
         4f:c7:ba:8f:bd:e8:45:cb:36:fc:58:3b:03:13:ad:8d:4e:6c:
         8b:bf:d1:1b:0e:64:85:38:be:1b:a5:fa:2c:cf:72:1d:1c:47:
         01:a5:8a:8a:83:3e:76:8c:59:19:45:b9:de:9e:b9:a5:78:65:
         69:45:d8:46:34:1e:00:89:94:ac:c0:cb:42:a4:11:42:0c:31:
         85:d9:d6:e0:8e:df:0c:0d:06:0f:67:1d:29:05:1a:5b:b1:6c:
         35:41:1d:1a:4c:35:99:8c:78:8a:c8:0b:ff:97:ed:40:71:a2:
         6e:35:6c:68:03:81:92:c1:cf:f5:92:c1:cd:58:2d:99:f5:ef:
         27:5d:88:76:8e:f1:a6:80:13:d9:b4:ea:a4:51:6c:32:23:c6:
         b3:17:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:28:50 2025 by rpki-client