Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bee20b8-42ea-3b74-98f6-831d536a910a.roa
File:                     9bee20b8-42ea-3b74-98f6-831d536a910a.roa (raw, json)
Hash identifier:          IM+vp+z18dcSUsSvo0ppYIOmBmgOtU8bUAVRxLLefDc=
Subject key identifier:   41:78:B3:FD:88:4D:84:F3:CC:AD:59:1C:AE:AC:2B:A0:47:DF:95:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EDA27B8E9DA48D4FD30E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bee20b8-42ea-3b74-98f6-831d536a910a.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        2603:2198:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:a2:7b:8e:9d:a4:8d:4f:d3:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8ea7a80f-bab4-4b4d-9040-cd6a1966e094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2b:af:21:b3:dc:ff:e9:07:ef:ad:8b:82:52:
                    6e:56:70:f0:21:33:f9:98:03:db:2c:f1:ac:7b:33:
                    dd:29:25:2c:5e:a5:39:1e:fb:5f:39:a4:e3:24:61:
                    fc:74:a9:01:80:cb:e1:b5:f6:9b:fb:3b:43:f1:b8:
                    0e:d5:b8:c7:1c:1c:36:f2:80:ba:c8:3b:b3:0f:fa:
                    2a:26:3e:d1:c3:b1:88:af:9b:f6:02:25:25:87:ff:
                    38:dd:34:e4:0a:05:a0:73:7b:b5:d0:5f:73:3b:73:
                    ef:3e:13:19:1e:10:d0:ad:e6:d1:61:2a:1b:80:bf:
                    69:46:9a:4a:41:e5:3f:45:f8:d1:dc:c2:30:aa:73:
                    1c:d8:24:8b:78:b7:76:57:37:7d:9c:a4:ff:03:7f:
                    d1:26:eb:df:28:9e:ae:3a:cb:fd:ad:29:05:72:0f:
                    5c:d4:4e:2f:0f:8b:5f:21:00:b2:6a:7d:e8:eb:af:
                    8f:85:8b:2c:c9:93:72:8d:58:d0:a3:46:97:1d:6d:
                    30:25:81:d7:dd:fe:dc:12:4f:df:0c:65:53:80:aa:
                    67:bf:b8:a6:ac:97:9f:d7:c9:d7:66:40:ff:94:57:
                    ec:1d:03:ef:11:3b:2a:fc:ed:6b:87:85:10:39:24:
                    23:f2:58:d7:04:50:33:dc:e8:0e:8e:c2:05:35:79:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:78:B3:FD:88:4D:84:F3:CC:AD:59:1C:AE:AC:2B:A0:47:DF:95:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bee20b8-42ea-3b74-98f6-831d536a910a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2198:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:a0:82:07:f3:b2:5b:7b:c8:d1:f4:a0:de:90:f2:4d:aa:
         2b:da:2c:7f:c3:60:f9:ca:72:32:ce:81:62:c4:cd:14:2f:74:
         f7:ce:64:d6:ec:9e:05:01:28:89:3f:15:3e:55:01:ed:4c:ce:
         bf:a9:40:21:e1:bb:9c:45:6e:3c:0d:a2:31:3f:8d:b6:61:07:
         e3:c1:d7:bf:ac:9a:30:74:ea:53:06:34:7b:c8:02:10:8a:0e:
         89:f2:a3:95:ef:62:78:4f:71:dd:36:74:71:74:84:d7:bc:6c:
         f9:0f:97:5f:14:5a:f5:1b:b8:87:31:bd:e3:d6:b0:bb:5b:0e:
         ff:32:32:31:a7:ea:bd:cd:72:43:9b:e6:e1:e7:37:17:65:28:
         63:76:b2:ed:49:54:0c:f9:5d:06:57:1b:d9:ae:cb:7a:44:a9:
         f2:ae:45:ed:d5:eb:83:8d:8e:05:28:82:aa:7c:fd:89:42:32:
         54:06:06:0f:8f:7d:78:ec:15:96:4d:38:c1:98:2b:7c:c1:34:
         d0:84:35:73:bd:79:c1:0e:2b:a7:15:57:e6:a4:e1:bc:4d:cc:
         6f:b2:67:24:3f:83:82:3f:1b:f3:7b:78:ad:e1:38:fa:96:72:
         8a:46:fb:e3:3c:cd:1f:8a:45:77:17:8b:8c:bb:ff:74:a7:8a:
         d8:e0:a6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:12 2025 by rpki-client