Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ae4027c-1c4c-3b34-bfa5-bc7de56f4e4f.roa
File:                     7ae4027c-1c4c-3b34-bfa5-bc7de56f4e4f.roa (raw, json)
Hash identifier:          WiS1hp+Gpkwd8oJIJ52rCJSsoK4vmsHfUe2BA2zjT08=
Subject key identifier:   29:22:37:06:B0:DA:1D:B3:9D:E4:A7:FA:2E:2A:76:9B:61:52:8D:53
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB221352E474CD306FEFB5C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ae4027c-1c4c-3b34-bfa5-bc7de56f4e4f.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        2603:23c1::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:35:2e:47:4c:d3:06:fe:fb:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=18a13fa5-d630-40c3-b6b2-2abd9c050f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:51:e8:01:6a:69:e5:1a:2a:3d:4f:93:4f:
                    ba:65:64:1c:c3:61:28:cc:22:c7:dc:f6:e7:01:99:
                    bb:63:ec:da:1b:f4:65:ce:59:52:1f:cc:12:67:dd:
                    bf:6d:4b:ca:77:fe:f7:b9:0c:23:6d:44:0c:5f:72:
                    52:cc:11:5f:1c:83:fb:52:fb:97:4a:4a:43:73:2e:
                    03:41:b5:be:c6:cc:58:df:f0:fa:73:ce:49:76:c4:
                    9a:68:96:b7:f0:36:da:09:35:3a:f5:16:a7:5f:b0:
                    cf:b4:e6:ee:2d:5d:7f:56:bd:cd:7f:18:10:83:04:
                    ae:bc:23:95:eb:4a:55:4b:9c:81:6c:e7:53:22:c2:
                    7d:b0:c3:2f:44:29:7c:c4:eb:be:ab:8b:a2:00:7e:
                    4a:b8:0d:18:b1:58:67:65:14:86:5a:8c:da:9e:40:
                    b6:89:ce:aa:bd:bc:0e:95:d2:12:3f:72:e8:ba:40:
                    a3:00:c8:2f:f7:0e:d2:c7:2b:08:6a:51:ab:35:ee:
                    38:0e:a9:55:d6:84:eb:52:82:c0:d0:26:02:e1:16:
                    40:e8:2c:85:1a:68:ab:14:ff:e6:f6:5e:18:2a:35:
                    e8:c3:1d:71:bc:3f:b6:d9:7a:83:39:ad:8e:ae:b3:
                    14:a4:7c:fd:33:1c:0e:80:9d:66:26:cc:0d:c8:da:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:22:37:06:B0:DA:1D:B3:9D:E4:A7:FA:2E:2A:76:9B:61:52:8D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ae4027c-1c4c-3b34-bfa5-bc7de56f4e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:23c1::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9f:4c:6e:ae:49:06:0c:ad:74:c8:31:19:51:63:1c:a6:c6:
         75:2c:c6:23:19:d0:67:df:f7:cb:1d:ef:4b:f6:99:f3:f9:71:
         f7:33:c3:69:36:70:b7:e9:ad:a6:ad:1f:d0:1e:95:56:bd:de:
         72:7e:28:67:76:b2:77:56:b5:6c:d1:da:32:53:30:0d:f8:e6:
         62:bb:1c:47:11:cb:a4:0c:6d:20:e4:08:b5:97:13:9b:6e:2a:
         6e:2d:1e:82:86:bd:0d:f2:a5:cc:25:5d:75:fb:08:e2:69:e7:
         7b:2d:3b:c0:fb:22:63:60:38:0c:08:20:db:dc:ef:80:2c:37:
         cf:e4:3d:d6:2f:c6:83:25:2a:44:9c:33:62:d5:75:a8:f7:26:
         83:16:ea:46:d1:7f:6f:1b:87:a2:d0:a6:10:58:b1:68:71:84:
         27:2c:cd:ed:6c:74:85:6c:75:7e:cd:bd:85:0e:48:15:7c:44:
         17:4e:24:95:ae:37:90:eb:9a:13:d4:a4:21:72:1c:c5:1b:63:
         35:e7:09:92:ec:59:fd:06:12:01:0e:ad:50:1a:f9:d0:46:bf:
         d3:b3:52:3e:53:d6:26:77:39:f5:35:7a:1d:16:ed:e6:1a:cb:
         b1:b6:52:f3:0b:d0:01:33:cb:0b:85:f8:0a:7f:50:a6:94:64:
         79:7d:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:19 2025 by rpki-client