Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ec25306-5712-3d8d-9304-59f1b5a6c12b.roa
File:                     0ec25306-5712-3d8d-9304-59f1b5a6c12b.roa (raw, json)
Hash identifier:          Apfeni9cFHfNqa5MZ7OKZa9cK/4OkbdCxId8SEcmksU=
Subject key identifier:   ED:F7:50:6A:68:3C:E8:46:C1:36:5B:C7:D5:B0:7E:A0:47:EE:86:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EDA21C2A0CD902D42BDC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ec25306-5712-3d8d-9304-59f1b5a6c12b.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        2603:2192:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:a2:1c:2a:0c:d9:02:d4:2b:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=4a6fbd02-9b21-4bba-b6c7-906e2d6255bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:d0:d3:e7:2c:b8:bd:1f:3f:7d:ba:bb:38:
                    13:5c:bd:fc:92:56:c8:34:4d:25:00:41:7b:50:2b:
                    38:92:25:97:7e:2c:b2:56:09:f6:19:cf:68:6b:9c:
                    40:5a:e3:05:ed:4d:5d:61:a4:35:21:a2:34:8d:57:
                    52:21:41:36:8f:55:0a:d8:ae:bc:45:51:a0:db:0c:
                    22:85:95:e0:e1:11:00:04:51:7f:4e:a5:5e:d9:e7:
                    e4:ce:fb:ad:76:c6:d8:75:eb:8b:67:4d:54:2d:9c:
                    43:05:ea:dc:27:6d:a3:67:05:2d:0f:82:bc:f8:f8:
                    b6:63:9e:09:2d:65:67:c7:53:9c:24:93:8e:a4:1f:
                    cf:42:86:03:2e:a0:ac:56:c8:14:79:eb:b6:ca:52:
                    99:b9:e4:b6:85:a1:f8:1e:71:c3:cd:ed:c5:f4:5f:
                    ef:b1:af:f8:33:79:b5:76:24:47:b8:43:0c:fd:5a:
                    f0:6b:72:37:c7:6b:8d:71:f7:92:b7:39:51:1b:7b:
                    7b:a9:16:99:dd:16:3a:90:62:e3:3c:ec:89:45:dd:
                    9c:46:7f:d4:60:79:4b:26:c9:ce:31:a3:bd:31:5f:
                    b7:e6:a4:75:90:bd:d3:ea:3e:c8:14:54:20:e1:02:
                    eb:8a:b9:8f:be:c7:57:63:b9:63:06:98:13:94:e4:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F7:50:6A:68:3C:E8:46:C1:36:5B:C7:D5:B0:7E:A0:47:EE:86:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ec25306-5712-3d8d-9304-59f1b5a6c12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2192:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:c8:db:2a:9c:f0:ad:7e:e4:05:53:51:0d:fa:18:3e:1c:
         a7:4f:0d:fd:a2:31:fa:7d:6e:b2:b2:0f:04:85:71:0a:ce:20:
         04:80:b2:85:bc:02:1e:87:58:26:75:cf:b6:44:dd:93:2f:32:
         ad:0c:9b:b9:4e:de:55:f2:4c:ad:e0:8e:45:bb:1a:52:12:55:
         a3:a3:1b:27:dd:f7:f1:6b:45:2a:95:7e:83:2d:ea:93:39:dd:
         89:dc:f6:29:66:c7:87:7c:b4:26:87:2d:4d:02:eb:4c:70:19:
         6f:5a:15:ac:ca:9d:b1:a2:03:8b:ee:76:23:da:4d:45:0b:b0:
         8c:43:f5:91:85:e7:29:a7:60:1e:34:53:27:cb:e1:22:15:58:
         cd:28:67:a0:01:7f:59:ff:51:fb:be:ce:e3:a4:30:6f:ba:34:
         1b:09:ba:c9:27:cc:87:5b:50:07:b9:4d:6d:3b:77:19:36:01:
         99:41:24:3c:9a:0b:28:21:6d:de:63:29:e9:68:5a:e0:2b:4d:
         49:e9:17:8d:86:32:52:1a:37:7b:e2:69:31:e3:8d:4f:27:e8:
         3f:b7:e6:9d:4e:01:12:f8:17:18:80:e8:f6:5a:24:60:0b:69:
         a2:6f:2b:f1:be:b4:b5:84:38:b5:b9:af:45:3f:07:1b:31:cc:
         02:b1:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:58:03 2025 by rpki-client