Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c2f1bc7-0257-3788-8e7b-207a90eb1b50.roa
File:                     3c2f1bc7-0257-3788-8e7b-207a90eb1b50.roa (raw, json)
Hash identifier:          nvlwwZHPGfZks1E6lmTZOo1e0tdPbAgWYTFWhYtLjts=
Subject key identifier:   AD:C0:96:FC:CC:89:B9:08:F7:FC:51:D0:B7:6C:DA:F2:1E:A6:13:BA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC8BA294197C089F565D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c2f1bc7-0257-3788-8e7b-207a90eb1b50.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        2603:2402::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:8b:a2:94:19:7c:08:9f:56:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8557a237-ca5d-4fa6-8ba9-5546dc55b190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:e9:0c:6a:33:02:ee:21:a0:59:8e:b3:91:
                    52:08:62:ca:06:2e:ee:3b:11:48:cb:c8:53:8c:7d:
                    0a:07:9d:59:57:d4:75:68:fb:20:e6:a6:cd:7e:26:
                    a8:49:a0:aa:54:54:bf:2c:6a:ab:71:56:3c:3f:7e:
                    0b:26:fd:57:95:2c:aa:62:dd:0a:56:92:d5:04:71:
                    17:ea:bb:69:5c:c0:6b:55:94:8b:bf:c0:a6:68:62:
                    1a:cd:f8:5f:a1:96:57:d8:17:8f:bf:47:49:b6:c4:
                    02:b7:ae:45:03:41:b1:e0:2d:44:b0:28:5f:2c:d2:
                    fb:ea:a6:43:86:00:94:26:2e:fa:bc:6e:43:17:03:
                    16:be:54:d4:62:00:a2:1e:66:03:d8:f2:66:c8:9d:
                    b0:df:62:27:7d:50:18:67:56:bf:2c:af:41:37:89:
                    34:e2:9c:13:df:fd:fe:c2:8d:21:46:cb:79:3b:db:
                    d9:9d:b7:07:d5:2d:8c:19:8f:0f:42:4f:9a:0a:86:
                    f4:a1:ad:6f:2c:7b:eb:71:82:e4:59:45:96:03:eb:
                    db:bb:19:bb:60:ee:85:c5:f4:bc:84:62:bd:69:32:
                    1e:6f:11:e7:33:6b:bf:32:72:31:1c:47:0e:94:8d:
                    37:50:ec:89:7a:4c:2d:13:6f:b0:b9:f8:f0:55:11:
                    5d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C0:96:FC:CC:89:B9:08:F7:FC:51:D0:B7:6C:DA:F2:1E:A6:13:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c2f1bc7-0257-3788-8e7b-207a90eb1b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2402::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:57:93:b0:7c:dc:c3:2a:57:23:d0:ca:3f:72:f3:77:48:46:
         02:f4:8f:aa:15:59:5b:74:1d:8d:b8:a9:43:1b:53:2d:d5:e9:
         a1:e7:b8:a4:5d:c3:0d:ee:86:ea:f6:8d:55:ad:46:44:ca:db:
         a1:53:2f:c2:b4:dc:c6:18:e0:80:4e:a3:e5:c3:fd:4f:5e:ac:
         f0:5f:e5:38:b8:63:69:68:72:f4:a3:ef:6e:c4:00:1f:3d:03:
         3b:c9:e0:5e:f0:ea:75:d1:bf:43:bd:c3:d5:25:49:59:da:e2:
         63:74:3c:25:a4:07:fd:6d:9f:86:45:70:86:6d:59:95:f8:fe:
         c2:c6:86:91:c2:e6:38:73:25:8c:c3:93:2b:ea:12:58:f3:16:
         36:c6:06:73:02:54:bc:a3:5d:cc:9c:00:0c:e0:93:30:02:04:
         eb:5d:a2:e2:f7:9c:a1:e1:a8:ea:49:09:80:aa:06:36:97:c0:
         84:d5:a4:1a:76:09:02:cc:72:30:51:1a:84:96:af:fd:21:11:
         48:64:e7:d6:af:f6:58:ac:91:77:0d:43:4d:34:47:bf:25:58:
         c0:3d:f2:80:f1:92:2f:bc:37:cd:d6:0f:81:4d:32:16:65:8e:
         dd:b6:fe:12:71:b5:2c:7b:20:d5:3c:63:7f:8f:90:5d:f4:c8:
         55:c5:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:32 2025 by rpki-client