Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa
File:                     43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa (raw, json)
Hash identifier:          RAxmgFqmoHciiJzeWIduYuyHi1MIOw8gKnmax7KMXgo=
Subject key identifier:   1C:35:CE:08:1D:A9:26:63:63:42:44:BB:92:45:3E:1A:7E:88:32:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC8EF04B2C0397A7408A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        2603:3015:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:8e:f0:4b:2c:03:97:a7:40:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=91432500-6709-4b6c-80b9-5bc3fd37aa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:6f:77:e3:a7:ad:36:29:dd:19:4e:ec:bb:
                    7b:46:7e:3e:6e:de:71:d5:98:15:42:80:0f:af:fe:
                    f2:6b:ec:e9:ba:d0:77:da:19:5a:c6:31:ac:a7:61:
                    04:f4:d7:55:58:1f:b1:08:0b:3a:17:0f:b6:f7:fc:
                    12:b1:b2:23:b4:cc:9c:0b:c2:bb:ae:c5:fa:dc:cb:
                    f4:fe:99:d0:25:19:93:eb:5d:5d:d7:3a:b3:4e:d7:
                    95:82:f7:5a:3e:07:cb:30:45:b7:56:b0:55:32:16:
                    d6:0c:45:07:fa:dd:a3:3a:40:b2:ff:45:2f:38:05:
                    14:00:e3:9e:ab:35:1f:38:73:ff:dc:c2:b1:17:61:
                    c7:b6:44:32:e9:f0:c2:d7:1c:d7:8a:9f:bd:b2:78:
                    ac:b9:6a:b3:a0:62:cb:29:d4:e9:01:ae:30:9d:20:
                    5f:a8:b6:39:f3:75:c1:1b:c4:d2:75:42:99:8d:6a:
                    79:33:05:07:67:e2:51:81:e9:9d:62:1c:7e:b0:dd:
                    6a:83:40:3c:86:ef:6b:6a:2c:be:be:d6:19:5d:26:
                    38:30:d4:ab:a5:b3:21:5f:50:6c:41:15:0b:f9:2a:
                    51:57:f3:5e:41:a5:84:59:73:d3:97:7a:bc:3e:6a:
                    97:95:58:6f:b0:5a:94:83:06:15:5b:15:bf:f6:15:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:35:CE:08:1D:A9:26:63:63:42:44:BB:92:45:3E:1A:7E:88:32:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43dfb216-ccf5-39d6-bb5b-0d7c033c4e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:4200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:cd:20:88:7d:99:1a:61:7b:4a:98:11:58:56:9b:cb:63:bc:
         f3:28:e3:34:63:0e:d4:4d:52:90:19:36:5c:f0:eb:9d:e7:2e:
         e6:3b:13:08:85:d4:28:3c:35:c2:90:76:82:d1:ae:e8:4c:10:
         4f:63:d3:3d:b3:bd:03:cf:29:7b:a5:b6:e2:ef:57:d8:93:29:
         83:a1:2c:a2:de:42:cb:81:d8:29:93:9d:7f:f9:d6:d7:79:f8:
         22:07:42:d0:8b:14:c1:ac:c9:1c:63:b0:e2:95:83:c3:05:63:
         13:a9:90:c9:03:f3:5e:af:fe:4b:af:03:84:e1:1a:c2:7e:54:
         a1:70:20:eb:28:a1:b5:63:a0:2c:ce:6b:8c:c5:98:78:96:54:
         19:d8:cb:9a:bd:9d:60:07:fa:f9:90:7a:2c:82:c6:26:3a:a7:
         55:d4:ab:a1:97:57:1e:7e:f6:f4:d7:0c:84:e8:41:5d:24:37:
         18:bb:b9:f0:48:fe:b2:81:6c:b8:2b:fb:1a:30:82:ae:a2:8d:
         0b:3a:79:4b:56:d0:65:fc:71:72:68:df:13:5d:9f:25:86:a6:
         50:c4:bf:13:af:7a:25:05:9c:da:88:6c:9b:5a:27:55:c1:e5:
         82:4e:a2:87:4d:f7:23:ec:9c:57:a7:b8:9b:ff:55:56:5f:2a:
         20:76:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:53:40 2025 by rpki-client