Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2561219-445b-3b8b-af16-c541c59d55db.roa
File:                     f2561219-445b-3b8b-af16-c541c59d55db.roa (raw, json)
Hash identifier:          ZWyRLEMmTQ1fL/ojR7Y3nAS5Qb9O1ZvcRgP9ViUm9Oo=
Subject key identifier:   1B:B2:08:75:D4:C6:5F:C7:FB:26:6B:6E:F0:DD:79:73:B2:A9:86:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC21A0C004AE34FCF395280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2561219-445b-3b8b-af16-c541c59d55db.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        2603:2806:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:1a:0c:00:4a:e3:4f:cf:39:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=f1a6d442-8243-4f67-967f-8c222b46e07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:9d:2e:09:c1:58:d8:98:05:56:0b:da:44:
                    33:d7:45:ac:b6:88:8d:4c:3d:2b:82:c4:a9:88:11:
                    6e:61:96:cc:f6:a3:be:b8:e4:ad:bb:e5:e4:dc:ed:
                    a1:7b:2e:51:84:35:8d:6e:db:b4:b1:67:f6:e5:85:
                    cb:ea:fc:98:1f:8b:d4:e2:c0:9f:e9:84:8a:92:53:
                    c0:42:f2:6b:46:65:74:12:84:13:e0:08:62:df:65:
                    3a:a0:2c:3a:9b:20:09:2f:b6:f2:b7:15:2d:15:0a:
                    f4:96:ec:04:5f:e1:f5:28:ad:06:31:8a:a9:da:a2:
                    7b:50:72:b3:ea:80:d1:8e:84:c9:3a:8e:a3:ba:4e:
                    a7:42:e1:b9:df:68:22:a4:44:7f:b4:82:5c:7d:1f:
                    0e:04:93:84:63:66:29:aa:6b:d5:14:7c:80:cf:8a:
                    20:7c:cb:13:af:dd:c6:5a:2d:54:af:12:69:48:df:
                    f3:1b:74:69:71:7c:65:e2:2e:f2:bd:03:36:85:e8:
                    b2:97:1d:5c:85:6c:c9:fd:97:2f:8b:d1:b8:62:98:
                    0b:f1:87:f2:86:7e:92:1f:7d:dd:03:d7:53:d0:d8:
                    1f:df:11:e0:b8:2e:43:af:7d:db:21:23:ad:ef:23:
                    38:29:0e:fc:0c:96:98:4d:8d:81:85:84:7c:bc:e9:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B2:08:75:D4:C6:5F:C7:FB:26:6B:6E:F0:DD:79:73:B2:A9:86:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2561219-445b-3b8b-af16-c541c59d55db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2806:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:66:69:c3:25:03:9e:04:b7:89:d8:12:8b:b1:1d:cd:48:3b:
         5b:7f:f1:f7:d7:72:b7:52:e5:fe:dd:b9:d8:ed:c5:21:77:0f:
         d4:78:43:12:0d:4d:5f:b3:82:ff:1b:d6:b9:45:10:f8:fa:35:
         87:bb:08:72:53:ed:10:6c:05:ec:46:f5:eb:6b:e2:f0:f1:fc:
         2e:cf:1d:8f:91:00:0b:dc:5a:fe:79:48:94:cf:09:1c:98:47:
         47:e1:11:d4:72:31:8d:13:e0:68:40:e7:c1:5f:89:16:d8:b7:
         2f:d5:a7:ab:a3:ca:bd:d8:c2:9c:57:54:43:c5:b0:ed:48:36:
         16:8e:d7:d7:97:80:3d:da:19:35:de:ec:aa:31:a0:23:aa:4c:
         44:7d:48:c2:a9:04:18:ee:1f:e9:9a:6e:0d:58:8f:b7:c4:cd:
         f8:35:f4:1c:7d:23:e3:f2:b0:55:14:4d:63:c6:f4:3e:84:e6:
         a9:2e:17:f8:29:a4:a7:22:dc:76:be:f7:38:35:e3:23:5c:03:
         8a:d5:e6:37:c6:a1:cb:2e:6f:75:4a:1f:f7:5d:fb:ca:1f:37:
         e7:74:50:0b:f1:c5:a6:cd:62:4f:8e:ca:98:4a:db:24:7a:fc:
         64:60:12:cb:85:d3:9e:df:0c:de:7c:35:6d:1b:e4:04:9f:75:
         70:8e:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:08:06 2025 by rpki-client