Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e8d0b4-984c-3998-9b45-152c049aa0b8.roa
File:                     29e8d0b4-984c-3998-9b45-152c049aa0b8.roa (raw, json)
Hash identifier:          HppF2v7zSrz+4zN5z8SBRMjW1gXYYn2UFfhEy0lLFz8=
Subject key identifier:   CC:EE:E2:8E:5E:EF:0B:CA:99:83:21:94:42:5E:FB:83:BC:70:77:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDC2C72BEA3AF57093E9F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e8d0b4-984c-3998-9b45-152c049aa0b8.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33657
IP address blocks:        2001:559:85cd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:c2:c7:2b:ea:3a:f5:70:93:e9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=98ce4589-93a8-4512-a680-cac327d2a6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:d1:16:6f:cd:e2:d8:f3:48:9d:d0:f5:b4:
                    f2:14:73:85:09:88:07:0e:89:0a:8e:d5:3e:f9:4d:
                    10:92:5c:46:e4:85:ad:85:86:81:16:0a:40:7b:a7:
                    5a:2f:73:5b:11:54:1b:cd:52:98:f9:14:4c:be:6a:
                    fe:8e:f3:d5:66:58:e2:5a:38:ab:f6:17:3f:32:ea:
                    33:7f:dc:ee:f7:7b:f3:8b:0f:e3:50:08:33:48:2f:
                    ea:70:03:31:de:d6:65:e7:3a:14:4d:60:9f:de:59:
                    5f:0f:90:80:d7:92:7a:1f:0d:ec:08:75:f0:d6:dd:
                    d3:b0:f7:d6:41:ff:6b:8c:77:87:f6:35:6b:97:9b:
                    16:fa:06:91:68:a1:8e:c5:8b:6f:35:b8:be:09:cd:
                    1b:1b:ee:be:3a:2c:90:37:6a:cf:73:f3:55:b1:e4:
                    9a:32:a7:c2:13:d0:fe:aa:06:ba:b0:0c:57:28:aa:
                    e5:43:03:83:69:b0:40:f9:b4:d4:cb:01:9c:ed:ec:
                    78:27:f0:80:1d:28:67:51:ef:47:89:31:0f:61:08:
                    5a:82:01:ef:23:ec:13:67:84:73:9f:21:13:df:5b:
                    05:8f:49:2f:05:ec:29:e9:a1:44:b2:ab:e2:2b:a7:
                    62:4c:79:66:12:c5:16:6e:ce:e3:4f:79:b4:42:94:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EE:E2:8E:5E:EF:0B:CA:99:83:21:94:42:5E:FB:83:BC:70:77:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e8d0b4-984c-3998-9b45-152c049aa0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85cd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:ae:c8:d2:82:b6:c2:c4:bd:be:98:a1:98:74:a5:e4:7e:
         8d:a3:9b:86:23:fd:45:a3:36:d6:2c:b4:f0:79:ff:e1:f1:dd:
         f2:f3:69:90:9f:0a:7e:e6:12:a2:3b:3c:0b:17:f5:a3:c5:96:
         5e:f4:fa:d2:0d:6e:d1:64:1d:df:84:e9:cc:5e:c1:7d:87:b4:
         bb:d3:ef:db:3d:66:ff:95:54:da:c0:09:d3:ce:cd:bc:8a:d8:
         e9:c4:8b:25:ed:a4:bc:60:ad:79:06:3a:47:27:bc:e9:6a:fb:
         c5:7c:cf:05:e2:ad:67:fb:89:6d:a8:2a:13:6d:05:3d:1d:07:
         56:bc:95:cc:7d:8e:e2:09:2c:06:5e:ca:41:3b:34:fd:60:c7:
         25:e9:a5:66:30:00:34:45:ea:da:7d:54:f9:45:09:c4:22:60:
         e1:b7:1c:64:5c:a7:36:03:d6:28:b5:e0:3b:81:98:17:01:1d:
         27:2e:ac:d0:ed:c0:cc:22:d3:41:0d:15:fa:fa:56:a0:b1:76:
         7b:06:8c:a3:13:04:d2:05:6e:f6:b3:f5:fa:b2:dd:3c:dc:d9:
         92:6d:95:19:3a:1a:dd:9d:d3:75:89:5e:fc:6c:95:48:8e:d6:
         5f:cb:18:f2:4e:36:83:c5:97:9b:0d:2c:60:64:23:b4:b1:7c:
         f4:bc:ee:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:31:38 2025 by rpki-client