Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0c41999-2291-33ac-9d07-dab8ffd5165e.roa
File:                     f0c41999-2291-33ac-9d07-dab8ffd5165e.roa (raw, json)
Hash identifier:          2M7FKBEcwiXZR+V4+XdQ1rPkBNKSxerCW7XVVFY666k=
Subject key identifier:   4E:FB:D8:C7:9D:15:79:76:1F:25:CB:82:0F:24:12:34:BA:40:6B:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858498E648FE5CBBA4BBFB3CAFC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0c41999-2291-33ac-9d07-dab8ffd5165e.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     33661
IP address blocks:        2603:3012::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8f:e5:cb:ba:4b:bf:b3:ca:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=0c899332-2ee2-4426-a032-0775dc03bc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ce:f7:8c:7f:32:c1:fa:58:ee:21:55:8a:a8:
                    00:cd:ab:4a:07:92:54:24:9f:c1:fe:5e:42:d7:2b:
                    ff:8f:8b:a4:68:69:6e:cc:c2:f2:87:49:9a:ce:d8:
                    39:a4:36:73:4a:56:e3:13:f4:12:e5:bc:85:48:22:
                    95:7e:81:9d:8c:3b:f2:e8:69:82:00:a3:0c:2b:5a:
                    24:63:60:91:9a:dd:eb:f0:d1:3a:69:5c:1d:b8:2e:
                    51:76:30:4e:48:6d:5c:99:9d:f2:78:1a:73:b1:f0:
                    64:d0:42:ef:07:ec:dd:3e:95:d7:25:10:a4:0c:83:
                    ce:c6:e0:df:87:77:03:b0:a4:8f:24:7e:33:54:c2:
                    f6:aa:c7:c0:b0:a7:f3:fd:f4:e9:84:f3:eb:38:56:
                    c1:1f:61:60:2b:ca:42:82:b2:4d:e4:64:53:d3:f9:
                    7e:83:6b:70:b3:d3:72:ef:bb:9d:14:1c:78:47:6e:
                    4d:e1:27:be:73:1c:05:c1:ae:f9:6b:00:d3:b7:66:
                    48:77:70:99:1a:c5:2f:6c:22:de:ec:0a:72:26:90:
                    b6:4a:79:5d:30:01:d8:11:41:b9:9b:3c:ca:7d:a4:
                    a2:46:15:60:b5:29:6a:76:21:ce:06:53:5d:66:48:
                    8a:5b:7b:7d:5e:f2:3e:e7:ca:e5:b3:05:a4:80:53:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FB:D8:C7:9D:15:79:76:1F:25:CB:82:0F:24:12:34:BA:40:6B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0c41999-2291-33ac-9d07-dab8ffd5165e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3012::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:98:c4:29:7c:83:e0:cb:5a:c2:b9:3c:8f:96:b6:20:97:b0:
         2b:10:bb:84:4d:1e:bb:b0:a7:2e:b1:e8:23:de:4f:73:d1:f6:
         9e:21:78:84:52:3a:b2:b8:95:52:2a:d7:52:84:a8:16:be:0e:
         18:58:e6:69:d1:18:7d:01:9d:77:87:b9:67:e7:cf:7f:24:5a:
         e2:de:a2:41:35:d8:c3:f6:3f:e1:c8:4f:d6:51:b4:b9:6c:29:
         66:a3:d2:7f:dc:38:60:09:4f:94:bc:7f:89:28:9d:91:ea:ae:
         17:86:3b:98:10:f0:03:50:ee:37:14:29:3b:68:07:a0:c1:38:
         4a:02:9b:35:83:f0:e6:48:88:63:fd:e2:4d:09:82:08:19:ae:
         82:4a:3e:85:29:e6:f2:2f:11:55:3c:fa:d6:75:69:67:18:fc:
         78:1b:61:74:00:d2:85:6b:01:7c:c6:64:fe:f5:32:b2:0e:7e:
         02:30:8b:9e:6d:45:e2:1d:7c:74:b0:76:7f:1b:48:80:07:bf:
         76:d2:e7:57:17:8e:9b:2e:4b:38:15:ee:dd:20:d4:fa:21:7f:
         72:ed:d2:70:4f:9b:f6:f1:2a:2e:a7:0f:53:67:84:61:c1:28:
         ce:f5:3c:94:55:ba:29:96:7b:95:a7:78:11:1f:1b:3a:58:b2:
         ca:8c:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:26:50 2025 by rpki-client