Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40434e47-10c6-36fa-8978-f24a2be2a3e0.roa
File:                     40434e47-10c6-36fa-8978-f24a2be2a3e0.roa (raw, json)
Hash identifier:          L9T6c+iQModvrqNB1IbrEVYxiCcTRWdU8tf6zNjiMjo=
Subject key identifier:   86:C2:2C:AE:BB:A3:7E:D3:CE:81:1C:A4:59:BB:78:B2:3D:A5:EF:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBBFDBBF784DB4776F3400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40434e47-10c6-36fa-8978-f24a2be2a3e0.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        2001:559:c4a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:bf:db:bf:78:4d:b4:77:6f:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f471fa48-a90c-4205-a57e-bc5d98ce5d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:b8:8f:dd:22:da:e2:3f:85:fa:96:4f:ad:
                    e0:71:59:37:13:b9:b9:9f:9e:bc:24:16:c9:71:62:
                    36:21:61:83:35:0c:38:42:7a:64:9f:90:d3:92:9b:
                    d6:4f:98:7c:70:7a:c7:6d:ed:bf:77:7f:50:78:ad:
                    22:db:d1:2a:41:03:61:13:68:4f:89:96:9e:42:8a:
                    8b:2d:bb:33:bf:98:26:93:45:35:f0:e5:3c:a8:26:
                    96:5c:43:88:32:ef:41:2c:76:0d:33:a9:01:38:c7:
                    4f:d6:cc:53:a6:19:85:00:ec:c5:aa:b4:ea:e5:d3:
                    c5:2a:cb:d1:8c:db:08:44:f3:12:ad:e3:ac:0b:57:
                    92:1e:86:7f:9f:ae:dc:62:3e:e9:fa:49:6d:96:d5:
                    ce:23:d2:e8:75:7d:be:3e:a2:ee:7e:4b:77:7d:f5:
                    aa:04:6f:93:ee:28:94:3c:95:b7:d2:91:ea:8d:8c:
                    ea:90:0f:2a:24:7a:47:fd:4e:08:96:8d:90:e9:8d:
                    f7:81:df:f4:1e:6b:92:46:9c:7c:25:f9:02:8d:14:
                    a4:bc:2f:1e:13:b8:29:22:df:60:13:3d:f8:1b:dc:
                    18:de:63:32:a8:a0:52:d3:82:18:10:08:29:b9:b9:
                    5c:42:04:56:b3:0d:15:f6:20:ac:a5:e9:e8:7d:ba:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C2:2C:AE:BB:A3:7E:D3:CE:81:1C:A4:59:BB:78:B2:3D:A5:EF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40434e47-10c6-36fa-8978-f24a2be2a3e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c4a8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ae:d2:77:bb:84:52:a2:8f:40:2b:54:94:fa:6a:5a:d2:0b:
         f7:3e:9c:82:6a:8d:ce:e5:78:73:9b:95:51:c7:23:49:d0:29:
         eb:b3:76:e8:bc:33:29:ed:cd:13:e1:4f:91:df:5a:0f:21:7d:
         d5:d7:f9:0c:75:3b:73:28:0b:fd:06:bf:bd:7f:50:de:b6:8f:
         20:b3:ab:f8:22:7d:75:2e:9f:3a:65:2a:97:98:b4:bb:ef:78:
         66:6f:fb:aa:00:7e:fe:c3:26:f3:0c:7d:c4:92:b2:39:ab:97:
         a6:93:fe:cf:5e:c3:b8:78:3f:b0:0b:98:f3:12:6a:cf:03:14:
         ec:99:bf:46:9c:df:71:5b:b4:80:ff:95:8e:c2:25:91:ec:c9:
         52:6c:98:dc:ad:a5:76:9a:6a:de:a6:3a:16:0b:86:71:d5:e6:
         2d:1e:33:e2:ad:ee:53:2a:94:c2:80:8e:5f:5f:1c:2b:ee:31:
         ba:60:f9:ef:b0:72:1a:f7:55:53:b7:58:fc:d9:5e:3b:7f:16:
         ef:04:84:58:9f:23:69:4a:1f:a0:0c:89:8c:d2:ec:04:0a:63:
         84:e9:7c:c4:53:fa:32:7f:93:a9:ad:3d:a6:0c:6c:44:7c:bd:
         b7:26:96:47:83:3d:25:f6:f1:9c:e4:5c:bf:32:22:e3:09:07:
         ca:f8:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:16:30 2025 by rpki-client