Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f99c278-e7e2-3995-a010-1c438352ad5e.roa
File:                     7f99c278-e7e2-3995-a010-1c438352ad5e.roa (raw, json)
Hash identifier:          wGFhtccCU6keyS2fZDUfR7QmGswCTbe9LtjTVHBGBbU=
Subject key identifier:   D1:4B:C2:79:49:97:53:E6:1C:40:D9:9B:5B:DD:E4:E0:28:5D:14:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC8E365B1F34BBA164BF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f99c278-e7e2-3995-a010-1c438352ad5e.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        2603:3015:2b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:8e:36:5b:1f:34:bb:a1:64:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=06f2e010-b8b1-41c1-a6a0-971b7eca978d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:68:9f:52:ec:5b:41:2a:fd:b2:95:8b:f0:58:
                    39:8a:66:de:20:e5:8e:fd:c7:42:64:10:b5:73:63:
                    5f:47:4c:0c:ac:e0:3b:a8:64:50:61:f0:41:b4:e4:
                    7f:f3:b2:9f:ee:10:7b:7b:32:39:a1:fa:7d:0d:15:
                    dd:b2:da:3a:01:7f:e9:7d:9b:a4:27:6e:85:47:eb:
                    01:e0:3c:59:16:14:f6:61:c7:3c:43:bb:b9:d6:b8:
                    a2:16:ee:89:95:5c:69:89:70:85:23:79:7a:55:8c:
                    fd:ce:1a:68:12:bf:a5:97:3a:0a:e3:a9:92:12:7e:
                    fd:9f:9e:44:b0:43:66:df:ec:84:7e:a2:eb:41:8c:
                    55:51:48:5b:5f:0a:99:6a:7a:05:f4:9b:65:b9:5a:
                    33:a4:d7:b4:0c:48:54:46:84:ed:81:a3:73:3e:4c:
                    07:19:5e:8d:ca:88:dd:19:08:a5:42:2e:48:5a:cf:
                    7c:d2:b5:65:10:10:3f:33:1d:87:73:44:8b:98:60:
                    69:e5:23:f6:13:aa:f8:3e:b3:6e:a3:56:4f:b6:e6:
                    ee:2c:4b:4e:59:80:9d:4b:88:93:b2:e5:ae:96:a0:
                    8a:13:5c:d0:97:e0:7d:f0:29:4a:20:8f:8a:f9:f0:
                    26:4d:47:84:79:68:a6:41:26:a2:be:52:e7:e5:8b:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4B:C2:79:49:97:53:E6:1C:40:D9:9B:5B:DD:E4:E0:28:5D:14:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f99c278-e7e2-3995-a010-1c438352ad5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:2b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:48:3c:02:7c:aa:5c:36:7b:04:b2:20:1d:89:10:e1:fd:be:
         20:cd:fb:0b:10:a3:e2:37:8d:e7:ed:45:3e:bb:5c:34:b2:12:
         0b:bb:4c:59:5f:2e:27:73:bd:a1:93:22:8f:fc:b5:73:54:99:
         c4:2c:2e:f3:33:c4:45:ad:42:1e:d3:8e:5d:48:74:3f:a8:59:
         60:10:ba:ce:21:53:c7:95:6b:4e:b6:1d:9a:59:19:83:94:71:
         e9:79:0a:08:3c:8a:11:8f:d6:71:d2:35:ce:54:01:9d:71:84:
         1a:5b:96:b2:d1:91:dd:63:32:4b:39:33:a2:15:0e:8a:be:0e:
         96:e0:ec:10:28:20:25:76:b2:19:90:cf:76:49:66:cd:e7:06:
         d9:e1:3d:96:cb:9a:89:81:ec:88:45:9a:da:74:30:46:07:fb:
         0a:24:07:a9:93:6d:ae:9d:9d:03:48:ed:ac:d6:3a:bd:e4:00:
         18:a6:84:4f:d9:d5:5a:b0:79:53:a4:e9:d2:02:aa:06:e4:5d:
         b6:78:ed:d9:a3:58:f6:c6:e2:98:b4:16:7b:19:96:9f:c4:39:
         35:20:c4:18:a4:b6:86:a7:62:40:37:05:7c:f3:22:27:5f:6e:
         e2:82:16:6e:a6:ed:ff:c7:82:b3:b5:7e:85:6c:59:07:a7:3b:
         3e:df:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:03:14 2025 by rpki-client