Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad0e14c-2cfb-3c99-a498-113ec712d1e3.roa
File:                     1ad0e14c-2cfb-3c99-a498-113ec712d1e3.roa (raw, json)
Hash identifier:          PrIeZOivRA6nQe5bXEDY851S+r1DEzl9VnzPD/LWSY4=
Subject key identifier:   4F:47:51:BF:4D:7C:B1:B7:EC:82:6E:40:CA:6C:37:32:A1:14:76:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB7FFBCBD048E72BBA8C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad0e14c-2cfb-3c99-a498-113ec712d1e3.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7016
IP address blocks:        2001:559:4a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:7f:fb:cb:d0:48:e7:2b:ba:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=492c8394-e6cb-4940-9373-1678362cf942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:8c:dc:89:b6:d6:d2:71:9f:16:83:35:b1:
                    91:96:42:7b:05:f7:6c:c1:12:33:b5:43:0a:a5:cc:
                    09:a9:98:3f:a5:77:e7:43:23:32:60:0d:8b:53:fb:
                    98:4f:97:fe:85:c7:50:79:75:09:e8:8a:72:95:2f:
                    33:8c:c2:36:bc:da:41:9d:0e:a7:10:58:35:05:8b:
                    a0:23:4d:ab:35:d4:3d:a3:74:65:2e:c3:e4:cd:23:
                    84:64:cd:00:0f:6d:7d:2c:67:88:c8:4f:10:33:23:
                    25:35:a8:3b:40:36:35:0b:fa:26:ec:56:dd:f4:38:
                    77:0a:dd:3a:7f:17:c3:9f:76:e6:92:f6:12:6c:5d:
                    83:20:7e:25:0e:dd:01:bf:30:16:f9:17:45:c5:0c:
                    c6:23:e4:e8:35:7a:22:68:47:00:27:f8:12:52:cb:
                    fe:60:02:90:75:37:29:b7:0e:de:09:05:42:e2:b2:
                    1c:e3:75:80:12:a7:a2:cf:7a:26:cc:b7:1e:be:47:
                    df:73:5c:c1:33:9f:e6:f0:1c:4a:bf:21:9a:55:01:
                    f3:06:dd:01:6d:e0:10:ef:d0:51:ee:94:76:70:35:
                    a8:5f:ad:d3:f5:48:45:5e:60:6d:02:4a:5c:ce:a7:
                    9e:a2:42:16:b5:92:ce:e8:d4:35:70:8f:30:0a:da:
                    21:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:47:51:BF:4D:7C:B1:B7:EC:82:6E:40:CA:6C:37:32:A1:14:76:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ad0e14c-2cfb-3c99-a498-113ec712d1e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:4a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4f:59:09:aa:e2:b4:89:eb:08:44:58:ae:46:1c:08:05:4a:
         dd:c9:cc:cf:46:9d:76:71:4d:d6:2a:c9:2e:0f:a4:10:f2:26:
         8e:58:f8:80:84:18:e4:90:96:56:38:ae:52:6e:bd:aa:d2:71:
         42:0e:c9:b5:95:f9:0a:83:e2:a5:ed:67:e4:71:b6:b7:52:7c:
         a6:1e:fd:0c:58:50:e8:1e:4c:53:33:c3:22:db:34:13:97:fe:
         59:36:90:11:55:15:46:66:f8:63:1d:15:20:87:30:56:2c:cd:
         05:4e:c2:1b:ea:2b:b6:16:3f:e5:f4:e7:1b:ed:f2:61:de:ee:
         e7:7a:e5:fa:74:4f:7f:00:a3:b2:64:e9:6c:54:75:6e:52:5a:
         a9:00:5e:62:d1:96:fa:0a:2b:a7:f5:10:01:7f:4f:c2:e0:b0:
         48:e0:95:41:a8:6b:b7:38:aa:7e:69:0e:4d:2b:48:19:7a:ef:
         81:44:8b:25:81:bc:63:59:59:c8:54:9d:7e:c2:34:fe:43:e6:
         cd:2f:cb:30:08:e0:5c:a5:ca:ed:5f:32:1c:89:6e:8d:ca:c5:
         32:f9:19:0b:39:d3:c7:5c:69:89:3b:58:33:04:f1:9a:0c:6c:
         df:82:16:32:bf:8a:fe:20:4e:e8:a8:02:cd:d4:72:62:c7:ae:
         6c:e9:41:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:58:38 2025 by rpki-client