Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76be84e9-0616-359a-b44a-60ab9f8c089d.roa
File:                     76be84e9-0616-359a-b44a-60ab9f8c089d.roa (raw, json)
Hash identifier:          yIvALISgCJje8WQ00oymCMe3vmf2hYJLCwdr8mDrrSw=
Subject key identifier:   BD:58:69:E9:12:6A:9A:14:9D:57:6E:86:4B:62:67:71:E6:32:E1:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC3109659977A9F3AFE340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76be84e9-0616-359a-b44a-60ab9f8c089d.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        2603:3016:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:31:09:65:99:77:a9:f3:af:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=14f70f64-607c-45a5-a5b3-7178fbc19917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f8:3d:88:cf:ee:29:49:f8:dc:2a:1a:87:59:
                    76:a1:40:2b:a1:b7:48:b3:0a:75:5f:c5:c6:5d:79:
                    29:9f:8d:c1:8d:5e:fe:1c:5c:ba:6e:c6:6d:1f:6a:
                    63:36:c1:ec:76:58:f8:b5:7e:02:b0:6a:09:27:2f:
                    07:79:7a:96:75:72:da:2e:9c:a5:08:ea:d3:95:25:
                    9c:0d:5d:4b:2a:43:80:57:63:4d:15:03:46:b1:24:
                    ae:c2:bd:65:b0:d4:df:17:da:a5:be:2c:9e:bc:bb:
                    80:a1:5e:f2:b1:c7:c6:c8:91:ac:f0:e0:75:56:38:
                    cb:fb:68:aa:b9:ec:fc:23:6f:84:a7:71:d7:c7:21:
                    a6:fb:71:59:7f:33:2b:f2:09:f0:e7:5d:63:50:95:
                    60:fe:9a:e9:81:c7:a2:09:73:2e:66:b9:33:e6:a2:
                    53:71:c7:23:eb:e9:95:3c:d3:a5:d1:46:7b:22:60:
                    1c:52:a2:c5:aa:63:3f:1b:28:c6:dd:03:7b:7e:be:
                    ee:15:bd:d9:6e:d5:56:fa:9f:c4:4d:34:85:98:dd:
                    46:84:c2:5b:93:f2:60:5c:cb:7c:2c:d1:cc:90:91:
                    af:67:e7:72:1a:a0:4c:fc:98:c4:12:4e:b2:7a:72:
                    f0:40:51:9b:f4:7e:76:77:c2:08:54:d5:c8:d9:7b:
                    5f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:58:69:E9:12:6A:9A:14:9D:57:6E:86:4B:62:67:71:E6:32:E1:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76be84e9-0616-359a-b44a-60ab9f8c089d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bf:f8:0f:0c:d0:5a:50:b7:7e:14:04:e2:bb:e8:5f:32:e1:
         d0:a1:50:f4:e7:ce:87:ef:3f:7f:5a:35:c2:ae:c9:c0:b0:ef:
         99:32:8f:7f:f8:9e:8a:77:2e:44:10:97:90:c9:20:48:ae:04:
         e5:64:d4:39:fd:f2:a7:77:9b:3c:16:9b:7a:1d:14:19:ce:3f:
         76:a8:7b:1d:64:e2:e3:12:f1:60:ef:55:f8:4e:ea:a4:36:81:
         f2:91:a4:6b:7c:08:e9:57:31:58:df:82:f1:19:38:51:15:72:
         ac:12:82:f9:d9:a3:4b:b1:50:e1:eb:26:aa:d8:08:e6:4c:1b:
         56:64:c7:80:03:96:26:f0:d8:45:56:8f:01:56:cc:e4:35:c7:
         8a:89:8a:56:39:1c:33:34:da:1e:6b:a9:17:3b:76:ff:16:b6:
         b5:ec:0d:69:89:f8:c4:ee:7f:b3:54:54:55:6b:19:d0:37:1a:
         92:44:9b:b8:b6:90:38:a1:4b:89:d9:69:a3:0f:37:51:80:87:
         70:d3:c9:51:f2:98:57:59:2c:b1:3d:f3:5b:2b:f3:c7:78:c6:
         7a:3e:7a:c9:54:7e:6a:8e:a8:48:ae:1a:43:68:f1:bd:2b:7f:
         b9:37:e4:c5:41:fb:7a:3b:55:a6:2b:b8:a7:6d:fb:cc:94:cd:
         e5:41:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:51:07 2025 by rpki-client