Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec3cbff3-b902-3a76-877e-f4726e55d13a.roa
File:                     ec3cbff3-b902-3a76-877e-f4726e55d13a.roa (raw, json)
Hash identifier:          H9Jtwm0YiStuY1vRrAYEppNZiTb0NYnV9zbxySZXvQo=
Subject key identifier:   00:BB:2F:0E:4C:02:62:63:2B:B3:1D:30:81:30:FC:5D:A5:CC:5B:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC8E5E6E604B4829F59240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec3cbff3-b902-3a76-877e-f4726e55d13a.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        2603:3015:2e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:8e:5e:6e:60:4b:48:29:f5:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=da6678f0-dea0-4e68-97ef-d0c54b954f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:ed:8b:f1:84:32:00:cd:45:78:bf:26:c2:
                    fd:5a:d6:66:10:bd:57:08:0e:f9:87:39:34:f8:dc:
                    3c:61:41:87:e8:c3:5a:5b:9b:b1:d2:16:cf:26:56:
                    96:5a:10:37:8e:3a:eb:a8:23:dd:da:0f:00:fd:de:
                    71:a1:87:59:a0:75:f3:b7:89:14:bb:4a:91:90:c6:
                    fe:7a:e4:14:2e:03:3e:06:96:ad:0d:79:71:56:a1:
                    f2:33:fc:10:d0:be:16:d0:e4:49:90:05:e1:43:4b:
                    f4:14:9f:d2:56:02:41:6b:09:9b:a4:77:23:2d:7f:
                    9b:c2:b6:ca:09:a2:9c:61:42:1e:e3:fd:09:a1:16:
                    98:27:a6:f0:c5:02:80:d7:95:76:ba:c4:ef:90:68:
                    05:74:c9:2d:b0:c2:d2:30:72:62:c8:d7:e9:a4:af:
                    5a:a8:bb:a5:69:07:cf:5d:55:97:d7:c5:fc:9d:9d:
                    bb:7f:2c:60:28:ea:ae:19:35:0e:46:5a:18:f5:57:
                    a9:4b:8f:7e:1b:dc:46:01:90:a9:2c:8f:b1:0d:60:
                    aa:08:1e:a0:65:00:85:ac:d2:e5:3f:ac:2a:0d:cb:
                    83:11:7d:13:29:24:68:a6:06:98:67:58:9a:a9:53:
                    00:09:df:bd:eb:d4:d9:f1:35:2f:7f:3e:5a:62:cb:
                    15:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BB:2F:0E:4C:02:62:63:2B:B3:1D:30:81:30:FC:5D:A5:CC:5B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec3cbff3-b902-3a76-877e-f4726e55d13a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:2e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b6:3e:f9:1d:ea:ef:e2:fe:db:da:b8:24:13:28:a6:b3:dc:
         fa:31:ba:5a:80:8e:9a:a8:f3:68:29:24:22:ab:af:9f:0f:29:
         b0:36:4e:39:3d:d2:03:3d:7c:50:80:05:e7:bf:44:31:6e:9f:
         39:95:7e:56:c3:02:00:4d:0a:9e:0a:3a:b4:96:90:42:98:7e:
         6d:75:20:63:5e:2d:35:04:e1:89:b0:9f:0d:db:44:89:c9:48:
         8e:27:4e:a7:d0:f5:92:f5:08:bb:c5:14:ec:31:52:70:1e:de:
         1c:c0:48:bb:56:f3:54:8c:10:56:a9:68:db:bc:13:cc:d8:5d:
         b0:3a:ea:fc:55:9b:f3:aa:61:98:39:0c:1d:9f:f9:29:bb:bb:
         ec:ae:22:04:bf:fc:78:4b:05:0c:b2:95:1e:e0:a6:5a:e4:e1:
         a4:b9:bf:55:9b:51:c7:91:17:9b:b8:41:d6:eb:b3:2e:b4:0c:
         5c:b3:a3:8f:12:6f:9a:62:f8:80:78:1d:21:44:fd:80:46:7e:
         a1:f1:0b:a7:0e:c5:a6:01:1d:7c:be:92:c3:94:4c:f6:bd:a5:
         ae:09:46:5c:ed:81:0b:b5:51:fa:30:c7:83:88:04:25:96:4b:
         31:e5:76:eb:31:06:c2:f9:a3:08:be:67:39:23:09:39:dc:c2:
         91:15:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:49:46 2025 by rpki-client