Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee35a977-8fde-3782-9201-bc0341f0ff19.roa
File:                     ee35a977-8fde-3782-9201-bc0341f0ff19.roa (raw, json)
Hash identifier:          mk3ve3RqCmCrsAZdv/lN94ORs2bu6OW9TO2zK/eCzx0=
Subject key identifier:   D0:69:2C:66:F3:0D:C1:56:45:D1:6A:84:D2:28:C8:02:BF:D1:30:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD51CEBF799B1C8B14DC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee35a977-8fde-3782-9201-bc0341f0ff19.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     7016
IP address blocks:        2603:298a::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:51:ce:bf:79:9b:1c:8b:14:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=6ad0ec03-068b-4610-b1cb-90f86e205034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:9b:99:30:df:1f:d9:61:67:12:e8:eb:50:
                    91:78:a9:f5:52:ab:90:6a:0c:21:6e:c0:24:22:3c:
                    29:ca:bc:41:e4:a8:cc:8e:00:7a:ef:c3:0a:1a:6b:
                    83:bb:4d:09:80:0d:c6:5c:3e:fd:9b:27:22:1d:a4:
                    f1:4a:a8:a9:1a:fa:ee:82:55:7f:69:94:5c:44:3e:
                    23:12:2e:af:11:e4:09:0d:9b:99:7e:b7:16:69:61:
                    75:73:d9:11:7b:55:c0:93:61:d6:3f:63:35:e3:f2:
                    13:5a:e4:03:c8:64:47:2e:97:28:32:84:1d:88:dd:
                    ea:1b:35:f3:72:a3:93:dd:6b:6b:36:27:de:b4:30:
                    76:25:6c:a5:99:5a:c1:ee:f6:09:a6:3a:3b:82:ae:
                    db:94:ef:a9:f6:4b:89:73:e7:e4:f6:e1:72:95:7b:
                    e4:ba:53:a1:98:0a:5a:7b:ee:e3:ab:13:cd:e7:02:
                    b1:27:c0:26:43:6b:89:6e:e0:39:a7:4a:ac:f2:71:
                    41:87:dc:b2:8e:70:27:d5:d2:f2:bb:80:a5:10:c4:
                    09:9f:56:6d:8e:0c:b3:19:3a:be:58:b6:f2:85:9f:
                    aa:a6:8c:d0:73:7d:2d:d4:2a:75:10:f0:8c:9c:6c:
                    d2:e6:4e:56:8e:78:8a:7e:55:a3:06:0f:99:ec:f6:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:69:2C:66:F3:0D:C1:56:45:D1:6A:84:D2:28:C8:02:BF:D1:30:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee35a977-8fde-3782-9201-bc0341f0ff19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:298a::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:32:c4:7d:66:eb:04:86:8f:5d:7f:53:44:32:c3:f0:43:89:
         04:3a:17:3b:be:41:bc:56:ff:36:18:a8:a3:39:45:ab:6f:88:
         9a:68:a2:8e:9b:3b:31:4a:99:e8:64:94:ff:1e:d0:b2:2b:4c:
         a3:f8:0a:c8:4e:ab:8d:97:26:59:4e:a7:63:8e:32:2f:2a:7c:
         a0:fe:3a:50:e0:b0:32:b4:cf:85:cb:63:a3:2b:44:c8:c7:cc:
         cc:f4:54:24:05:ee:99:19:20:ab:96:86:d7:3c:da:29:17:f7:
         8c:73:d0:cf:78:24:43:3c:5e:b8:e4:c8:75:b8:4f:f2:3e:3c:
         48:99:0d:8e:d6:b6:2b:73:b1:ff:7a:d8:c3:db:c0:d1:5a:e4:
         82:7e:05:1f:b7:38:12:ef:d3:57:08:1a:df:38:90:a2:9e:0a:
         d5:4d:f2:69:1a:ca:f7:c2:78:d0:30:7f:97:fc:f8:50:86:6b:
         b3:cf:a3:91:31:35:39:78:ff:04:2e:d4:f5:6b:8d:24:28:27:
         26:94:99:ec:f5:58:4c:01:0c:89:fb:c6:95:19:a5:c5:84:2a:
         02:02:dd:6b:05:44:56:ec:86:41:37:0a:9a:8f:1a:9a:e5:f6:
         ed:15:3d:52:18:c6:41:4e:76:5d:87:fc:45:99:eb:b8:47:b0:
         c6:7a:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:02 2025 by rpki-client