Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9575c9a-070e-368f-9120-70759d2588e0.roa
File:                     d9575c9a-070e-368f-9120-70759d2588e0.roa (raw, json)
Hash identifier:          RbDGxUN7WofWBj2bvuq65OJv5Nc9L3R9ieqQb5BdqUM=
Subject key identifier:   2A:17:13:D2:DD:6A:CC:68:11:E4:8E:E2:B3:0B:5E:A2:8E:5E:3A:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC2E940D2273D401C28580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9575c9a-070e-368f-9120-70759d2588e0.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        2603:2444:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:2e:94:0d:22:73:d4:01:c2:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=30bdd8d0-a573-49f3-980c-6f1aaa78dc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:60:e7:1f:e3:03:4e:76:75:64:a7:ca:99:
                    d6:3c:d1:f5:a4:1e:98:dd:9e:69:a0:b1:3a:ea:99:
                    cd:94:ca:44:c2:3d:00:d1:2a:a9:31:ef:fc:5d:f4:
                    ec:4f:1b:63:65:25:03:9f:73:cd:65:4d:e1:44:ad:
                    04:ec:34:89:79:93:32:28:c4:7c:8a:ea:f2:2b:d0:
                    cb:2d:0f:fd:17:0c:f9:a2:1d:a6:b9:a7:af:ad:3b:
                    bb:18:c8:79:44:df:45:ed:87:b4:7b:37:83:cd:cd:
                    59:b2:38:02:b6:1c:ac:28:97:34:30:9f:19:c0:1e:
                    e6:6c:9a:f5:06:fb:28:4f:bb:05:b1:c9:43:67:47:
                    2d:1a:da:92:cf:7f:61:bd:b3:b9:fc:db:b9:3c:1f:
                    c9:c6:b2:58:d0:e1:8b:03:35:44:a3:34:58:df:44:
                    32:f6:d2:c8:27:0e:c8:b7:01:e2:d1:18:bf:6f:58:
                    ce:d0:fc:60:2b:7f:14:6f:2a:86:8e:dd:c8:8a:61:
                    5a:47:95:36:6f:2d:27:0d:0b:4c:ee:dc:85:be:f8:
                    fc:c7:7c:7c:f6:f1:49:89:e8:69:ad:43:a8:3f:8c:
                    93:a0:32:16:5f:37:6d:d2:0e:35:f9:86:8d:d5:e8:
                    df:f0:95:a3:66:dd:db:9a:f2:c1:ff:af:b1:fd:7a:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:17:13:D2:DD:6A:CC:68:11:E4:8E:E2:B3:0B:5E:A2:8E:5E:3A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9575c9a-070e-368f-9120-70759d2588e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2444:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:66:16:f0:db:17:9a:08:e6:4b:fd:a2:ac:dc:50:b1:32:73:
         92:7f:30:40:bb:eb:7f:f1:5a:ae:ac:a0:ca:a3:e5:ba:a9:90:
         01:59:b4:16:ad:02:ee:0c:a4:fc:ae:6e:b2:91:3e:57:75:fd:
         77:40:41:1e:de:bd:87:49:6c:03:96:12:5d:1b:a6:fa:16:ea:
         7a:4c:c4:5d:a3:cf:16:d7:07:6e:5c:52:67:fb:f3:40:3d:3e:
         48:74:f7:1f:bb:9d:69:04:0d:48:1a:39:69:cc:3d:28:07:a0:
         f8:35:0f:46:7d:b0:3a:44:57:11:be:ee:87:03:56:93:96:67:
         4e:d3:d7:b2:37:75:b7:51:1e:5c:ec:c5:c9:1f:64:a9:70:20:
         9d:4b:ac:75:da:90:5c:44:24:1d:f5:fa:8a:b6:77:88:5f:44:
         5a:6d:eb:99:db:81:60:8e:be:64:54:1e:29:ce:f8:0f:37:23:
         bb:c4:e8:96:a4:f4:b6:2b:b5:12:b4:77:d1:44:3c:53:21:1d:
         e0:c4:63:e7:e3:e3:22:73:38:31:35:dc:f8:d0:da:07:80:88:
         95:17:d1:35:1d:3c:c7:4c:70:2b:dd:7a:f3:49:d4:62:14:54:
         56:ea:6d:ff:eb:33:ec:2b:73:58:c9:96:11:d4:c8:ce:4d:af:
         ca:7d:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:27:22 2025 by rpki-client