Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40ca6ebd-4359-398d-96d5-57ed50df3a05.roa
File:                     40ca6ebd-4359-398d-96d5-57ed50df3a05.roa (raw, json)
Hash identifier:          cbJtwMJfdmbgf1PLu6mfrL2tZMTCoYFTK8VmSSrr2fA=
Subject key identifier:   B1:EE:19:5C:CE:F1:CA:8E:52:45:1B:20:4C:10:8B:49:34:DB:1B:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43009EF1CF51185EB9697C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40ca6ebd-4359-398d-96d5-57ed50df3a05.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2601:187::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:09:ef:1c:f5:11:85:eb:96:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=1660be6f-891c-4024-9941-6929e24ef485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:c0:2e:93:ff:0b:6d:c0:45:55:41:4a:33:
                    64:9e:9d:2f:a5:83:ca:25:2a:c5:09:e8:87:88:f2:
                    22:7b:81:34:26:1d:ce:a0:90:71:af:55:b0:ba:fc:
                    19:09:f7:cf:3a:6d:00:66:3a:bd:2f:8d:67:4b:32:
                    33:28:49:b4:87:b3:ab:5e:52:d7:c2:9d:06:f4:50:
                    38:bc:b1:47:ad:4c:3b:60:6b:f3:07:b6:d1:e6:06:
                    b1:a6:05:1e:6f:a4:08:1f:48:e0:e6:99:cc:df:d7:
                    db:24:c4:2b:2f:ee:b1:92:fb:d6:67:f6:06:cd:22:
                    b0:56:ba:28:f0:d0:4d:54:8c:50:b5:44:01:fe:e1:
                    55:b3:f9:50:6a:8a:c2:32:4b:c4:c7:53:f4:c6:50:
                    77:a1:ea:9e:74:ab:b4:4a:87:1d:ab:61:29:72:35:
                    09:57:b1:62:47:56:47:01:f7:71:5b:59:af:f1:f5:
                    2c:7e:c7:7e:39:71:34:1a:80:16:c6:b8:88:28:29:
                    37:b4:0e:ee:d3:fc:59:4e:d3:1e:9a:18:7b:6b:13:
                    f2:1f:03:ac:f3:e1:72:28:80:16:c1:1b:21:2c:57:
                    35:cf:57:d6:2b:3b:e2:b5:36:77:ea:55:20:63:23:
                    a2:8d:5c:87:98:f8:6b:5f:b9:ed:04:f3:c6:9c:69:
                    a6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:19:5C:CE:F1:CA:8E:52:45:1B:20:4C:10:8B:49:34:DB:1B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40ca6ebd-4359-398d-96d5-57ed50df3a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:187::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b0:e4:fa:26:61:26:8c:84:f2:7a:8e:3b:06:27:1e:4b:dd:
         88:06:dd:d9:56:c3:b5:f1:e2:7e:ea:94:fc:9e:86:c5:fa:c3:
         78:28:8b:9a:3f:98:44:43:64:b2:fd:07:eb:2e:c1:e9:80:48:
         8e:c8:82:49:ea:78:f9:bd:83:17:b3:ed:96:7b:20:c9:2d:14:
         d2:f7:a9:d8:3b:e0:93:28:a6:6c:19:c5:c8:f2:19:01:62:17:
         6a:ea:11:3c:90:88:a1:36:ee:3c:b5:b2:09:5e:5d:c1:b6:a8:
         2f:fe:60:2a:25:c7:09:11:7b:75:fd:82:31:9d:07:13:70:9e:
         e0:ca:df:cd:c3:24:71:b6:95:0a:a4:c8:09:e9:dd:91:af:5d:
         24:8c:68:6e:f5:f1:27:8f:22:8d:22:ae:2a:2d:05:1e:99:f0:
         36:83:f4:5a:be:3f:6e:69:e4:b9:2f:cf:31:1b:ef:e5:1c:90:
         fd:0a:0e:7a:61:39:74:35:0d:73:ef:6a:7c:26:92:60:40:bc:
         6b:a5:69:c6:9c:3b:b5:e5:ad:7e:36:99:e9:fd:e1:dc:ac:b7:
         4a:e2:ed:cc:e8:e3:7f:23:43:01:21:f7:e6:71:05:be:87:61:
         73:8d:06:d2:76:42:cb:3c:1e:c3:8a:e7:40:8c:0e:93:8b:fe:
         a2:98:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:14:08 2025 by rpki-client