Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddf09977-4d04-3c1f-9aa3-bcbb5aee60cd.roa
File:                     ddf09977-4d04-3c1f-9aa3-bcbb5aee60cd.roa (raw, json)
Hash identifier:          q6tE3moA5vg6DaMbGwfiLrCdGvI4jFp8j2/0lGzPbz0=
Subject key identifier:   95:EC:FC:FB:71:03:B5:2D:6E:10:1E:7C:BE:8A:64:10:E8:8A:FD:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4265B21EF40E3369E9500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddf09977-4d04-3c1f-9aa3-bcbb5aee60cd.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        2603:2244:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:26:5b:21:ef:40:e3:36:9e:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=5b69ddaf-9c1e-493a-a164-354c0aa9fd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:69:27:0f:61:d3:6e:e3:e4:e7:70:3a:b2:2b:
                    ec:16:27:d0:4a:6d:31:5d:be:d7:4b:8b:48:f7:e1:
                    ba:ff:c0:00:ef:10:04:65:e0:4e:80:9f:ea:2a:f9:
                    af:59:9b:ce:31:87:07:3c:db:7e:bb:64:c4:09:cc:
                    56:0b:eb:83:88:ba:55:cf:01:ea:38:20:fe:eb:02:
                    fc:f7:1d:6a:b2:3a:1b:b0:98:0a:05:13:2f:11:50:
                    c0:52:41:5e:01:bd:2a:47:a5:07:fe:ee:83:32:e9:
                    d1:80:9e:bd:04:fe:d4:b0:b9:ce:e5:de:af:9d:e6:
                    74:87:dd:48:ef:f6:bd:fa:8f:39:b2:03:de:1b:8a:
                    b3:ff:84:0c:76:16:17:5e:92:9c:2a:8f:d9:93:cf:
                    ae:d7:ad:17:d8:d2:da:11:10:4e:23:43:62:cf:19:
                    3b:68:e4:d0:78:33:2b:a1:e9:7f:c8:8e:9c:48:97:
                    04:85:72:b3:73:a9:b4:be:41:65:d8:b0:ff:2b:84:
                    00:44:57:4f:fb:e3:e2:b7:0e:9d:72:79:10:f5:fd:
                    07:cc:9a:28:99:97:dc:c2:76:93:ad:8e:1d:62:cd:
                    96:c1:d0:99:4a:85:f7:82:b1:42:e4:13:34:b0:58:
                    9f:94:08:5d:6a:1e:bf:c4:eb:8d:ca:78:96:0c:60:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EC:FC:FB:71:03:B5:2D:6E:10:1E:7C:BE:8A:64:10:E8:8A:FD:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddf09977-4d04-3c1f-9aa3-bcbb5aee60cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2244:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:32:8b:e7:34:72:d9:d6:77:8b:db:3e:12:62:e5:c8:0a:
         de:a4:42:be:81:45:db:9d:31:ab:86:88:4b:d4:a2:28:8c:d3:
         5c:10:f4:8f:41:e7:18:d8:8c:b5:02:03:04:3a:ba:8c:54:94:
         83:81:e4:ef:31:7e:15:37:71:57:9f:3f:d3:e2:86:2c:8c:8e:
         7e:19:60:d1:fb:20:a4:32:83:94:7a:c3:bf:a6:99:aa:ec:ec:
         e0:bf:44:4d:13:7f:b0:66:1c:99:16:ea:5d:00:31:84:92:56:
         9b:d9:0b:8c:92:bd:cd:e4:8b:b5:02:eb:6b:71:cb:0c:dc:8d:
         ae:5c:ff:37:c2:f9:e6:d3:6a:20:02:74:14:c5:f6:d4:3a:6b:
         29:8a:0f:4e:af:15:c9:2b:1f:ab:a6:42:8f:74:d4:91:97:0a:
         ef:06:9a:e6:49:85:1a:30:15:07:49:83:3c:f1:d2:a0:29:4a:
         f0:9b:0b:a4:1f:13:b5:b9:6b:87:c5:bf:9d:4a:e1:fa:d7:c2:
         43:d9:c8:31:b7:47:d0:14:ea:e1:98:3f:c7:c2:67:29:47:48:
         da:f3:00:f0:b5:26:b9:4c:84:1d:24:92:fb:c0:7c:d4:ec:bc:
         50:b7:90:cf:6a:d0:43:79:1d:71:4a:d3:8e:c6:1e:fa:c0:df:
         db:dd:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:13:41 2025 by rpki-client