Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab28fe2-7a77-3b55-a341-7e0a47d0b02b.roa
File:                     fab28fe2-7a77-3b55-a341-7e0a47d0b02b.roa (raw, json)
Hash identifier:          XyqjwCkFVLpqyea3VDJK95FhOkN0ncNS9pyQTHKDGW4=
Subject key identifier:   1D:C9:0A:8D:3F:79:E9:69:8B:2F:AF:80:06:64:CF:1C:0D:FA:15:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC217F12598978133A1FA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab28fe2-7a77-3b55-a341-7e0a47d0b02b.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        2601:804:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:17:f1:25:98:97:81:33:a1:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=411b6115-8ca1-4e3b-9162-94aa37b53e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:b7:39:67:1c:0f:de:19:79:78:17:68:c4:
                    aa:26:48:1b:b7:5a:6b:ae:66:0b:20:46:37:26:c8:
                    02:5b:b4:ee:0b:50:01:a5:32:b3:7e:6e:7f:f4:a6:
                    97:19:f6:71:88:87:ff:93:30:aa:eb:0d:84:66:fa:
                    f3:0d:18:37:60:d4:9c:bc:e8:36:11:69:4f:aa:1f:
                    b3:e8:34:95:13:a6:20:c3:3f:3c:47:1a:d1:62:47:
                    c3:03:9c:62:95:80:f8:42:cd:79:86:c9:a5:0f:73:
                    c3:e3:61:27:35:c0:40:f0:80:e1:4b:1a:4a:dc:95:
                    05:79:48:1f:f9:8a:3f:c3:52:8f:d7:cd:e1:ee:a3:
                    c8:d0:39:dd:44:e8:7e:61:58:de:c6:30:36:a0:af:
                    d6:f3:88:bd:06:db:23:e5:f0:e8:a0:e4:23:c7:23:
                    17:35:9f:eb:33:ec:9f:12:d2:de:d8:2b:51:35:2b:
                    dd:67:60:17:54:3e:98:98:52:b3:3f:15:81:6c:28:
                    f0:92:9a:33:83:8e:c5:4f:92:45:0e:42:18:d7:d5:
                    de:20:09:e7:c4:df:eb:25:13:9d:e0:7d:fe:f8:a9:
                    23:1e:fe:42:b1:78:da:eb:ed:e4:7d:62:3b:6b:ae:
                    41:1c:06:5c:a4:42:a6:ee:e8:cc:29:17:4d:cd:ed:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C9:0A:8D:3F:79:E9:69:8B:2F:AF:80:06:64:CF:1C:0D:FA:15:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab28fe2-7a77-3b55-a341-7e0a47d0b02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:804:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8b:2c:6e:c6:51:09:c1:cb:5f:fd:d4:46:cf:0c:47:fc:8d:
         8f:32:f4:3b:99:71:bb:fa:fd:fe:5e:f9:0f:b1:65:b8:a5:b3:
         99:0a:db:cf:da:a4:a5:77:89:bf:08:9a:aa:f5:23:a2:f6:31:
         85:27:cf:22:fb:00:72:d6:a4:80:5f:5e:57:c4:53:80:75:5f:
         ad:04:df:d4:58:e3:82:91:f2:eb:60:42:85:85:eb:f3:a5:0b:
         d3:6f:f6:b4:a8:4b:78:d2:dd:17:50:46:ab:22:74:9b:c3:a6:
         88:72:d8:4e:b3:2b:72:d3:ef:c8:c9:13:8d:12:3d:b4:d1:8d:
         cb:73:2b:a1:4a:cd:16:64:24:2c:a5:da:aa:6b:0a:ed:9b:1e:
         37:b5:1d:07:43:80:77:d6:5f:8d:de:3b:fe:d0:0f:93:9f:12:
         5d:fb:41:04:ca:6b:21:42:17:1c:9c:66:93:69:25:67:bd:87:
         04:4a:fe:6e:63:b2:10:cc:57:bb:5a:9e:91:29:b2:a7:e4:fa:
         ec:11:40:ff:b8:ba:a7:63:35:76:60:a6:ed:62:b4:b4:b1:d0:
         a3:2b:d5:f7:36:fc:ef:5a:d7:09:21:27:61:9d:80:73:02:51:
         ee:9e:33:f6:33:be:77:3b:62:bf:8e:b2:d9:17:c9:c5:44:f5:
         c2:5c:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:38:18 2025 by rpki-client