Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed943e7f-f6cd-3f20-996d-76a2ce7c3eb4.roa
File:                     ed943e7f-f6cd-3f20-996d-76a2ce7c3eb4.roa (raw, json)
Hash identifier:          PjsHkWGXq/2+80jOvbWxZlEKnTU+LT2tiEPDRxVX7W8=
Subject key identifier:   63:C1:4B:80:2D:5C:4E:C7:4F:A1:8D:52:32:2F:65:AF:E6:1D:66:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D16525D9B0E1EACED63547C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed943e7f-f6cd-3f20-996d-76a2ce7c3eb4.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     22258
IP address blocks:        2603:3014:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:25:d9:b0:e1:ea:ce:d6:35:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=58172deb-70a2-4d81-b987-e4ac73a4273a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b1:92:13:02:e0:b2:91:a1:89:c5:b0:32:64:
                    be:af:66:65:a6:15:92:fe:92:fc:3e:e2:2b:00:f0:
                    6c:f8:0f:7f:52:6a:93:9a:8b:e5:55:eb:c9:18:c1:
                    31:48:f0:bf:b8:47:b0:2f:59:b4:16:f9:15:a2:f1:
                    2b:7a:a8:b8:ad:69:92:5b:ff:a1:b0:65:3f:4b:93:
                    d1:57:44:dd:a8:d1:e0:a5:10:54:2b:1b:2f:4b:e1:
                    c0:5c:fe:73:01:ef:59:a8:f4:8b:f8:94:cb:98:04:
                    57:be:dc:ff:03:91:9d:0b:ea:f0:0b:9d:6f:78:7d:
                    b5:6b:ce:22:17:7a:1b:da:8e:b7:3d:e3:41:c5:c6:
                    2b:0d:5e:32:2c:98:a5:e9:8e:9b:6c:08:4d:91:56:
                    ba:dc:d0:ed:cd:c5:5b:69:c3:0e:9b:74:1c:82:3f:
                    dd:75:4c:19:61:d6:99:2a:63:3e:b6:82:5d:50:61:
                    b8:88:f5:a1:07:fd:9e:6b:7b:ee:d4:d8:0e:ed:ad:
                    de:58:1c:5e:be:d7:ed:30:4f:4f:5f:54:5a:36:a4:
                    e2:dd:36:59:f8:0f:1f:cd:6a:fa:b9:6f:74:57:4a:
                    48:0f:3d:a8:7f:0e:8a:82:4a:6e:40:fe:b8:6b:ab:
                    c3:44:3e:d7:25:c9:37:eb:e5:c5:44:8a:52:62:d6:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C1:4B:80:2D:5C:4E:C7:4F:A1:8D:52:32:2F:65:AF:E6:1D:66:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed943e7f-f6cd-3f20-996d-76a2ce7c3eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3014:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e3:c2:3b:9a:c8:23:00:99:29:51:11:ec:f6:09:a8:09:f6:
         da:87:1c:d2:89:74:ac:71:66:23:a1:5e:fc:89:b8:72:f5:17:
         ad:db:48:81:61:91:1d:18:1e:44:1b:1d:ef:93:9a:40:68:a2:
         cf:76:a5:4a:48:bc:dd:85:92:5f:d3:bc:50:47:f5:08:d0:5c:
         12:1d:90:96:3d:51:02:69:9c:f8:e0:96:ec:3a:12:08:bd:37:
         03:44:d1:ef:48:9c:14:50:b8:6b:3a:7c:f7:4a:a5:47:89:40:
         80:86:6b:7a:ed:3b:df:e3:20:0e:a6:43:fd:80:d8:14:7a:34:
         75:d3:2d:b4:fe:fd:94:35:3b:23:6c:e5:5a:e8:80:38:20:ec:
         2a:22:c7:79:bb:1d:19:be:d2:15:15:82:11:06:c9:1e:f5:00:
         c1:84:a0:74:38:9e:94:3f:65:b1:bf:84:97:23:7b:58:c0:32:
         c9:90:75:d4:5e:b7:05:e0:1e:c9:cd:ac:c3:96:cb:09:d2:75:
         71:5a:b3:56:f0:7c:24:a7:fa:4c:02:26:71:ed:67:2a:87:f5:
         c9:65:9f:e0:2a:93:71:d1:56:c9:1b:93:f9:2d:a3:50:8a:4c:
         38:b6:0e:7b:b8:15:12:ae:39:aa:4b:7b:05:ce:7c:db:70:f7:
         2e:06:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:13:05 2025 by rpki-client