Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99348476-2cf9-3a87-9f3d-c82639f992d9.roa
File:                     99348476-2cf9-3a87-9f3d-c82639f992d9.roa (raw, json)
Hash identifier:          8w1Tfb4+MXLg3QoANUxNuzjiRrVLzpzeWXw3FddDhEY=
Subject key identifier:   A5:0A:92:25:DF:82:E3:32:D9:B0:65:89:55:B9:B4:0A:C3:04:60:48
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D1655C3B62D94AAEBD3E8540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99348476-2cf9-3a87-9f3d-c82639f992d9.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        2603:3014:1e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:5c:3b:62:d9:4a:ae:bd:3e:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=eb55e4a9-0dce-4dd4-b0c5-e42feddb28c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:28:fb:8a:ac:f1:b4:0b:ff:c5:ef:eb:a2:
                    7a:96:cc:d8:b5:4f:27:96:5e:a7:71:58:57:a2:81:
                    5f:0d:9e:3e:93:85:d6:91:88:0e:0c:cc:11:7c:14:
                    5f:93:80:f9:2e:5b:ae:75:df:d7:53:4b:57:4c:18:
                    81:d1:f5:76:ca:8a:41:6a:8f:5c:15:20:eb:e0:48:
                    ba:d2:9e:16:7e:f9:df:cc:fe:23:b3:f2:64:93:74:
                    05:91:19:77:32:59:7a:98:09:a3:13:6e:22:02:9f:
                    b5:30:e0:22:3d:02:59:b3:a8:22:5b:dc:1b:83:b4:
                    d6:92:25:73:87:ec:04:48:16:31:fe:5f:f9:cc:4e:
                    ad:1c:fe:94:1b:72:54:f3:e9:1b:1b:31:3a:9c:44:
                    a4:70:2f:00:47:27:43:5e:d1:5a:dd:75:ba:24:df:
                    9c:1e:cd:c4:a1:15:f8:08:5a:68:ba:98:73:dd:ef:
                    df:6c:49:0a:d0:14:47:f9:b3:b3:4c:a0:d2:9a:02:
                    c8:18:34:15:c4:2b:3d:ed:d4:9c:50:f3:7a:44:a6:
                    73:2b:ec:21:86:af:8e:7f:d6:c7:ee:96:4d:8c:b6:
                    96:53:ac:40:0d:47:08:76:4f:85:ba:c0:56:13:65:
                    fe:15:68:9b:ee:91:a9:fc:5f:b0:9e:bf:a2:57:e6:
                    e1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0A:92:25:DF:82:E3:32:D9:B0:65:89:55:B9:B4:0A:C3:04:60:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99348476-2cf9-3a87-9f3d-c82639f992d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3014:1e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:17:d3:99:70:10:f9:3c:a5:c3:47:c1:2a:87:fd:b1:d5:0f:
         14:4e:9f:d3:ba:63:17:02:1c:5d:57:d5:a6:94:c8:a9:c9:2f:
         bd:39:1a:14:69:a1:af:7c:41:a5:d7:9d:2c:ac:44:c8:b3:2d:
         d5:50:d3:44:ba:c3:3b:f8:3d:e6:37:b5:5a:ff:f9:e8:41:d0:
         4c:ad:66:db:59:8f:dc:85:40:52:a1:b9:2f:68:88:dc:e2:f4:
         5e:27:1a:10:bf:e1:a8:79:0d:c6:53:13:6a:c9:cb:d6:cf:44:
         5f:09:44:3f:b0:f2:df:88:0b:8b:70:05:f0:d6:03:4b:f9:4f:
         67:36:c0:f3:35:00:42:5d:f9:e4:a1:9b:4a:06:a4:54:61:d1:
         d7:0e:92:0e:57:0f:b2:9a:41:0e:94:5d:76:b7:7e:91:dd:c9:
         3e:0f:d5:ce:80:bb:ab:90:4a:b9:93:b6:16:67:d7:a4:2a:40:
         b1:8e:50:24:53:9f:f5:e3:42:20:42:62:10:63:10:16:54:dd:
         1c:bf:60:57:b1:92:92:55:2f:7e:a1:29:96:9b:e2:d8:09:df:
         20:03:b1:10:7c:d0:e7:ab:7d:32:07:9e:95:3f:e2:25:de:85:
         73:f0:20:4b:66:cb:a7:de:b8:79:65:fd:a3:dc:0a:19:c1:44:
         27:11:27:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:52:44 2025 by rpki-client