Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1bfdc9e-aa65-3610-9cd5-b0893b2afb91.roa
File:                     a1bfdc9e-aa65-3610-9cd5-b0893b2afb91.roa (raw, json)
Hash identifier:          UyHNGVpU3erY78omg7q1gU8SxdR5g2jtfZpMci6h3TI=
Subject key identifier:   32:88:73:45:12:D8:9A:86:C9:C5:DD:41:AF:99:4C:BC:BE:55:D9:32
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB221371A7F00C24BD27DFCB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1bfdc9e-aa65-3610-9cd5-b0893b2afb91.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        2603:23c9:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:37:1a:7f:00:c2:4b:d2:7d:fc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=e579311b-513a-4317-b505-09df908863f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:fb:cd:35:ee:53:a0:51:dd:9d:89:dd:3b:
                    1a:91:39:ce:b4:8b:fa:8a:a8:70:dd:7f:f1:c8:3c:
                    3b:ec:13:9e:c1:e1:fd:35:df:78:3b:4a:3d:c9:a5:
                    31:69:ce:f5:eb:6d:58:7c:3a:8e:71:2c:b7:40:84:
                    77:51:14:9a:fe:0c:85:48:82:66:05:39:b3:9d:c0:
                    b3:e3:6a:80:8a:be:d1:4f:2a:42:dc:14:39:b1:f3:
                    10:72:e3:0f:a6:04:08:03:98:30:1d:03:1c:12:0f:
                    fa:bc:6b:f0:88:d6:67:a3:79:ab:3a:de:6b:86:c6:
                    44:e3:ca:81:28:5b:c1:6a:b0:c4:8f:1a:44:21:17:
                    c8:61:9a:b9:ff:8d:5b:45:6a:89:8c:eb:9c:dc:2f:
                    79:b7:7e:65:1d:e7:9a:f9:51:99:1e:47:c0:5c:06:
                    4b:d0:67:ed:d6:57:81:bd:37:0b:a4:60:a8:dc:12:
                    94:14:36:b4:ae:8d:84:a0:c6:35:cb:6d:b6:e4:b7:
                    30:b1:30:f1:9e:9a:b8:b4:ed:e1:15:dd:22:c2:20:
                    c6:1e:3c:14:8c:b3:ad:ae:47:3a:f9:5c:a3:db:01:
                    73:f8:e9:9d:cf:4d:53:63:de:58:c3:f8:60:d8:ea:
                    a4:a7:61:f2:fc:be:5d:fb:45:46:66:ea:de:62:74:
                    2d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:88:73:45:12:D8:9A:86:C9:C5:DD:41:AF:99:4C:BC:BE:55:D9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1bfdc9e-aa65-3610-9cd5-b0893b2afb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:23c9:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:68:69:8a:1e:20:14:c3:10:b2:c1:c7:06:b9:2e:e3:18:7e:
         fe:a8:34:06:5d:91:9f:04:47:c7:bf:12:31:90:30:3a:e5:a2:
         5f:80:66:9e:49:eb:c2:f4:05:b3:3f:a6:14:5b:63:80:78:42:
         9f:95:c3:a3:22:8a:38:0f:ed:fd:4a:0e:34:80:ff:8e:67:3a:
         ba:97:00:40:b0:c1:69:0e:9e:f2:39:8e:42:84:e1:1e:aa:51:
         24:1b:bf:ef:c6:6a:3e:d0:fc:eb:1a:e0:02:24:ff:77:35:0c:
         5e:b0:0f:ef:3b:c1:5d:02:b7:23:ba:d2:43:31:7e:de:15:13:
         16:d2:20:29:01:d8:eb:e0:fe:27:c3:ab:63:8b:c6:82:ba:a8:
         57:f4:8f:52:8c:ee:ea:70:3f:11:f1:c7:2f:3c:06:e3:70:bc:
         db:3a:10:84:62:b6:7d:8a:b3:3b:f3:a1:aa:13:60:3a:04:1d:
         5c:96:ee:cf:4d:8b:dd:f2:39:48:b4:01:39:f7:f6:ee:ca:0c:
         96:65:d5:e1:6e:ee:9f:91:13:61:27:5a:04:7e:4d:e7:ff:0c:
         9f:51:30:ea:7f:4e:45:06:3d:50:b6:c5:89:34:72:00:9b:a6:
         2b:84:da:74:b1:c8:7e:fe:0c:ac:10:b6:f0:b8:48:e0:cc:7c:
         0b:49:26:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:45:17 2025 by rpki-client