Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b65b5fb-fe79-390a-bf82-4d0501db336c.roa
File:                     9b65b5fb-fe79-390a-bf82-4d0501db336c.roa (raw, json)
Hash identifier:          Na4cZ/z4UAVBRIEKoV2wNgq2bs6Odcz3B0Hxm6fe4Io=
Subject key identifier:   3B:78:79:1E:4F:83:3F:E4:84:E8:7B:AF:80:23:6A:C2:F5:B3:FE:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB2213812CD622CA7334EDE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b65b5fb-fe79-390a-bf82-4d0501db336c.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7016
IP address blocks:        2603:2545:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:38:12:cd:62:2c:a7:33:4e:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=3a7c591d-35ad-46bc-84fd-aa4be7ff96d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9c:fe:18:ca:1b:e7:64:ac:63:4c:66:f3:5d:
                    f4:38:88:2c:73:94:a9:0c:ea:ce:41:64:10:54:f7:
                    3e:b1:fd:2f:b0:cb:60:d1:77:a8:ce:2b:3e:ba:27:
                    c4:50:c6:f9:ca:28:ca:ce:e3:da:77:27:88:91:39:
                    3b:a6:64:27:e7:eb:43:74:79:2a:05:2a:a2:5a:b2:
                    48:74:49:9b:a9:50:2e:4a:f4:17:4e:4c:76:c1:58:
                    fa:b1:99:c5:42:69:a0:27:d7:e5:6f:ac:a8:b7:5c:
                    90:2d:58:d3:8e:08:57:ee:6e:6c:91:6e:54:63:16:
                    da:a4:dd:01:44:a8:83:c1:30:08:25:f1:a1:45:34:
                    59:1e:c6:fa:d0:e4:51:8a:8e:ea:74:c0:af:fc:68:
                    52:36:9c:3a:5d:ee:b0:32:fc:83:ae:5e:40:70:57:
                    3c:b2:7c:5b:0a:82:39:fa:2d:05:ed:85:f4:7c:91:
                    b3:1d:18:f9:10:d5:02:cb:31:ac:dc:e2:9b:02:39:
                    a6:27:31:34:60:5b:7d:b5:3e:ad:0f:95:57:76:6e:
                    82:f3:db:eb:1f:49:05:1e:6f:e1:31:a0:d6:fb:e5:
                    15:92:4d:58:65:fe:59:d2:58:97:49:28:f5:82:26:
                    0f:f7:a0:8b:90:88:f3:d1:73:2e:a1:61:d2:06:15:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:78:79:1E:4F:83:3F:E4:84:E8:7B:AF:80:23:6A:C2:F5:B3:FE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b65b5fb-fe79-390a-bf82-4d0501db336c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2545:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:0f:0b:e3:f2:34:54:50:85:a9:67:f4:53:d7:59:e1:26:95:
         07:f9:d8:b5:46:31:56:ea:a9:e7:bd:95:ed:4c:3f:fe:41:ff:
         c1:88:b1:46:8d:1a:67:32:bc:af:0a:54:f4:e1:a0:21:82:95:
         eb:b0:1c:c5:74:a8:50:8f:33:38:19:70:c8:46:31:51:ec:f5:
         1d:2d:22:e8:d7:ab:51:be:4d:b7:87:96:35:7f:43:58:a0:e9:
         76:50:ba:90:eb:77:aa:3a:e3:c9:55:13:1c:98:dc:91:e5:b9:
         d2:57:f4:bc:47:b6:58:78:49:c7:38:0d:dc:21:b1:d2:48:82:
         9d:6a:13:08:f4:cb:95:42:08:bc:65:36:7a:3a:16:43:b2:7b:
         70:92:86:8f:23:55:f3:82:92:2e:e1:bc:c8:2a:89:9d:6c:08:
         4c:26:43:20:f0:65:2a:38:3a:26:e6:0a:f5:e4:a2:51:d8:1f:
         6c:06:bc:57:fd:2f:12:5b:b4:f2:27:ce:63:58:a0:24:fb:78:
         dc:d2:54:df:62:d8:1b:bd:93:e1:ca:87:27:0c:ac:ee:47:a1:
         fd:64:34:c9:97:96:a8:a9:4d:5a:59:72:88:3c:91:f6:31:a2:
         92:37:cb:67:6e:b8:8f:bb:75:39:19:ad:9a:65:b4:0a:95:31:
         27:e2:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:47:52 2025 by rpki-client