Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c63d449-f0a5-3fbe-82d7-2c1c641c1467.roa
File:                     0c63d449-f0a5-3fbe-82d7-2c1c641c1467.roa (raw, json)
Hash identifier:          ZaYb8TvV0BLdUcOucHXUAe15YiQQH0Y8bzNY1EaNQ7Q=
Subject key identifier:   A4:AD:D8:40:51:EF:8B:37:10:70:07:22:86:54:B5:03:CF:21:F9:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220EB5ED6953099917A1E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c63d449-f0a5-3fbe-82d7-2c1c641c1467.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7016
IP address blocks:        2601:987::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:eb:5e:d6:95:30:99:91:7a:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=cb06ff15-82f4-4afb-9a41-f6bf7593e3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:f2:62:dc:f5:13:c0:98:c1:3c:19:52:e8:
                    50:a1:48:08:a1:92:67:d9:68:1a:4e:b9:af:8f:26:
                    bc:cf:8a:b5:1a:c6:4e:0e:f8:da:13:7e:0b:bf:69:
                    f7:d3:11:9c:87:12:8d:12:91:13:c3:3e:62:ca:ae:
                    13:10:69:66:1f:97:bd:d7:a5:e3:fb:e1:10:ba:07:
                    fd:ca:6e:98:ae:14:cc:69:9b:bf:fa:5b:7d:7e:a4:
                    90:50:28:1a:21:62:3b:36:61:62:86:a5:bf:bf:40:
                    6d:44:2e:84:b7:83:c0:49:40:ca:7f:77:7b:c5:f7:
                    7f:70:07:a8:3e:e0:f6:95:9e:16:c4:2f:59:80:61:
                    3e:0c:62:40:c9:a2:28:51:4c:aa:b8:4e:69:66:09:
                    49:18:cb:3b:56:8a:91:fa:ae:78:f9:97:04:9d:0a:
                    74:de:16:7e:fc:ef:03:fc:98:74:cd:f0:df:a0:ae:
                    68:63:47:5a:3e:46:df:e9:5f:fc:e8:d7:ab:b4:89:
                    b2:a4:82:8e:f4:8b:53:7b:f6:db:a9:0d:c4:a6:18:
                    8b:be:61:bf:47:e3:e8:30:91:98:50:14:60:19:26:
                    10:68:e3:d4:6e:54:0c:77:26:a9:cf:e7:c1:81:a3:
                    96:38:57:39:b4:99:8b:57:4e:12:a0:c1:86:69:ab:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AD:D8:40:51:EF:8B:37:10:70:07:22:86:54:B5:03:CF:21:F9:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c63d449-f0a5-3fbe-82d7-2c1c641c1467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:987::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:02:59:d0:bd:3e:bc:29:75:a9:49:c9:d3:47:d1:8d:46:
         d0:8c:2a:0c:95:6e:55:6d:a2:45:60:32:7d:79:0a:a5:c2:d6:
         4d:fa:33:12:d2:e0:98:48:05:8b:56:45:61:1c:a9:92:bc:b6:
         68:88:13:d0:8e:97:15:52:fd:b8:dc:8a:2e:77:07:48:4b:2e:
         be:2a:27:f1:f3:c7:d4:d0:b7:63:e2:dd:90:b1:70:cb:84:b6:
         39:07:90:f1:bd:0c:4e:32:6e:80:29:06:cc:43:7b:ad:16:d4:
         9a:a0:bc:bb:00:38:fe:74:90:71:7a:6d:fc:c9:4f:bb:62:2d:
         b5:b9:27:c3:82:ea:c0:25:35:a6:d1:ff:21:51:1e:3d:70:0a:
         f5:a7:ef:67:e5:db:80:a8:23:d3:13:7d:98:c7:c4:57:8e:82:
         ea:2f:83:1c:ae:16:60:c2:d6:c4:d2:ca:53:95:d6:4a:95:2e:
         9b:d4:3d:62:95:1e:73:3b:6b:5e:ec:c8:67:48:1c:4c:d3:94:
         03:e9:6a:f5:e6:79:aa:4e:23:17:02:07:66:9d:da:39:ac:54:
         d1:1e:a3:e3:f6:02:ef:7d:f6:dc:64:7c:7e:99:59:f9:1f:eb:
         60:42:b2:34:9a:3e:dd:08:b2:4a:f4:e6:e0:05:8c:1e:05:fe:
         84:8e:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:45:41 2025 by rpki-client