Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a6571b5-60b7-3873-ad4d-f4fc5349612d.roa
File:                     2a6571b5-60b7-3873-ad4d-f4fc5349612d.roa (raw, json)
Hash identifier:          Kr6ILpX2WGEZB27uxePnt+3agZeuN6lOBzXTyaPbq5o=
Subject key identifier:   96:66:0B:AF:1F:7F:F5:F6:14:68:58:39:A1:CB:2B:8C:4E:58:2F:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC7C46CB767794521B4440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a6571b5-60b7-3873-ad4d-f4fc5349612d.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        2001:559:84f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:7c:46:cb:76:77:94:52:1b:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=a159c867-45bd-427b-a6ac-21a914ef7caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:cd:ce:72:25:9e:01:42:be:c2:c2:aa:78:
                    dd:c7:9d:29:1d:14:70:63:d9:5f:2d:68:ac:b0:d9:
                    5e:20:1b:33:72:63:4b:44:81:0d:16:fa:5d:e4:8f:
                    82:58:8e:0d:8f:70:1b:26:83:34:74:39:37:23:92:
                    8b:d3:3c:de:0b:73:45:79:4f:1f:9f:0c:3c:13:bd:
                    9d:70:2d:f7:47:fe:86:e6:a4:50:30:2a:e0:2c:05:
                    b3:1e:9e:7a:a5:b6:3a:89:76:2f:22:84:1c:bb:f4:
                    57:c8:43:d7:0a:ba:bf:23:7a:64:af:b9:6f:7f:d8:
                    42:27:85:3a:30:89:83:5d:f7:14:db:ba:99:30:25:
                    2a:ad:b1:c9:0f:95:84:62:52:80:6f:f9:34:66:6b:
                    f2:af:2d:5d:99:9c:7a:49:ed:04:2e:03:92:3e:93:
                    a2:e9:f2:b1:86:58:8b:1e:f6:d4:b4:55:92:d7:ec:
                    37:0c:a0:e2:f2:56:08:b2:a3:1b:d5:4e:16:c4:67:
                    bb:cd:8f:1d:91:c9:dd:c5:80:7d:ec:2a:2f:aa:4e:
                    1a:0f:26:dd:3b:15:03:ba:b2:b3:43:e1:5f:b4:38:
                    2f:c0:2c:b9:51:43:94:48:58:bb:f7:45:ac:23:d9:
                    82:d1:f7:ab:2a:e1:86:e0:c1:42:81:74:25:e4:fe:
                    98:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:66:0B:AF:1F:7F:F5:F6:14:68:58:39:A1:CB:2B:8C:4E:58:2F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a6571b5-60b7-3873-ad4d-f4fc5349612d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:84f8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:40:bf:6c:90:3b:b6:7b:b7:28:6f:9b:2f:28:39:41:f6:
         30:eb:84:e8:7e:9a:30:57:5f:24:0c:c9:54:2b:de:a6:3a:b0:
         1c:8c:38:7c:b1:00:7e:ce:db:5e:5c:0d:fa:76:e0:9a:4f:98:
         78:cf:ca:0d:77:7c:f1:bb:a5:ff:0b:43:16:34:f1:98:8c:75:
         47:01:4e:d1:bd:4e:00:f8:cd:16:3f:34:ba:0d:38:9d:94:56:
         d8:78:a6:f8:1b:df:68:1f:14:cd:31:58:82:38:dd:ac:4a:31:
         ae:e6:8d:c8:ce:aa:ab:76:28:eb:be:4c:33:f1:b5:e6:8e:f5:
         48:70:e5:ca:09:e0:ec:04:5a:f8:20:2a:b6:56:39:bd:1b:f0:
         3b:3d:2a:1f:ee:62:0b:cc:3b:59:29:5d:cd:68:6e:c5:85:a0:
         30:d2:7a:96:ab:8b:23:e5:5c:81:fc:8a:6e:b4:90:9d:45:a3:
         93:90:94:d5:b8:bd:ae:ad:70:91:f8:09:60:8c:49:be:95:a3:
         79:4e:77:21:95:f7:56:65:97:3c:b6:74:65:6e:9e:a4:52:d1:
         38:f5:5a:99:fd:38:ae:ff:02:a3:03:1e:dd:96:72:94:d7:cb:
         91:ed:9f:f2:20:5b:1d:fe:6f:25:67:2e:75:ef:27:42:22:de:
         20:6b:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:22:02 2025 by rpki-client