Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a3e69c9-3164-359b-b0f6-f632889900d4.roa
File:                     8a3e69c9-3164-359b-b0f6-f632889900d4.roa (raw, json)
Hash identifier:          BZF23DtlW0WMHDps8/QWGLd3UAbRUrvE0cxFIPKJX90=
Subject key identifier:   42:F5:DB:BB:60:7B:B0:07:94:91:87:04:CC:DD:D4:5B:91:0C:BD:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75328C6F65A60FCB7E0500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a3e69c9-3164-359b-b0f6-f632889900d4.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        2601:c4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:32:8c:6f:65:a6:0f:cb:7e:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=5057114a-2ca2-4af3-aa25-5ff3dab124b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ca:70:63:6a:5c:c4:cb:12:5e:6b:b5:1b:83:
                    78:88:53:3d:7b:07:1e:2f:f4:ea:70:81:1f:a3:0e:
                    fe:ff:22:ed:b6:d8:cb:95:e4:1d:fd:7d:96:83:98:
                    9b:f9:3b:7d:fc:8c:e5:15:45:a7:6e:d9:21:ea:8d:
                    c0:b5:39:15:82:b1:c5:c1:24:0b:b7:6e:23:6a:65:
                    79:75:e9:d3:fd:0b:95:c0:5b:5b:b8:11:77:42:0d:
                    f7:02:9a:bb:9b:d4:93:86:a5:d1:a5:cf:eb:24:44:
                    18:ef:e4:74:dc:1a:c8:0f:56:c9:c2:0b:27:2b:b8:
                    6a:d5:1c:0e:79:f0:ff:a1:0c:b7:3b:d3:52:0a:fb:
                    d8:ee:b4:63:2b:2f:0f:5a:2b:13:27:a0:c1:92:9b:
                    99:97:1e:2a:84:cb:7c:d3:12:90:b9:de:19:07:0f:
                    f6:df:47:13:88:81:83:1e:1a:1f:08:7b:20:d7:15:
                    d5:e0:22:d3:96:fb:8d:32:fa:89:0a:bd:40:47:b7:
                    f9:b2:5f:6b:78:9a:8b:4b:98:c9:42:c1:b4:a6:38:
                    0b:79:30:c5:be:be:44:ad:3d:7f:f8:61:da:f4:f9:
                    f2:cb:b9:15:1c:43:22:ad:48:5e:5b:e6:b0:9b:79:
                    66:20:0a:74:0f:48:d8:52:77:66:82:91:fd:24:fb:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F5:DB:BB:60:7B:B0:07:94:91:87:04:CC:DD:D4:5B:91:0C:BD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a3e69c9-3164-359b-b0f6-f632889900d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:c4:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:e0:c4:b9:0a:bb:b7:b5:f2:fe:b5:14:eb:d5:52:43:fe:6b:
         c6:72:b8:80:10:3d:94:69:46:06:eb:ab:af:8d:47:e9:c4:58:
         f1:5f:64:42:4a:ad:f0:8f:a5:ac:98:b1:2a:5c:19:89:1f:d8:
         38:62:41:c9:8a:c0:3a:28:0c:14:c5:ec:e2:31:4d:07:50:08:
         af:2a:db:5b:ab:b8:c0:c8:9c:d3:98:9b:26:9c:2d:2b:cb:38:
         4a:dc:67:62:1a:b1:af:08:ff:e5:1d:6d:23:07:a9:dc:65:72:
         58:81:27:1f:b4:fc:d4:e2:0a:d5:63:6c:fe:f7:a0:af:cc:fb:
         d9:15:fd:84:1e:cc:78:5b:c2:11:0d:43:d2:fe:d2:30:fe:34:
         4a:c9:83:35:64:b0:3c:d6:ca:94:50:09:b0:db:81:33:51:82:
         fb:0e:e7:c4:5a:dd:2e:b5:30:10:0f:10:36:7e:06:61:3d:39:
         24:e6:78:4c:c7:5a:88:4b:2c:57:b2:53:9b:3e:01:a4:9b:ce:
         6c:04:b5:3b:a9:5e:ad:08:53:13:dd:1c:61:80:b8:bf:67:66:
         fe:41:b1:98:4d:d4:b3:dc:0c:dc:f2:e4:ef:cf:b8:7d:72:8e:
         f2:43:71:d2:a2:01:8e:dc:2d:15:36:26:29:f7:e4:65:ed:63:
         63:eb:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:58:38 2025 by rpki-client