Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/499a1b17-d66a-3873-9ccf-9e9d09d714a7.roa
File:                     499a1b17-d66a-3873-9ccf-9e9d09d714a7.roa (raw, json)
Hash identifier:          m0hW/yZXAtzs1SHFrrvclWSpVbYKO2AMR3rONuwyk5E=
Subject key identifier:   66:2F:8D:1E:CF:4F:A0:25:04:3A:7A:B4:B1:BA:DD:C5:6E:4E:1D:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC6C4B898E447F6218C010
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/499a1b17-d66a-3873-9ccf-9e9d09d714a7.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33657
IP address blocks:        2001:559:a00c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:6c:4b:89:8e:44:7f:62:18:c0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f048501f-db8d-40de-a4ab-ff3860ac813b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:77:44:03:88:df:da:a6:94:e4:ca:3f:ec:
                    a3:4c:8e:b7:87:c7:c7:18:27:b3:4d:d9:89:e7:be:
                    07:e9:60:99:79:75:ce:6e:f6:43:ce:6c:e7:bc:fb:
                    17:bc:45:d9:f4:3d:ab:e2:b7:ee:0b:e5:d3:5d:92:
                    03:34:b0:f3:48:fd:2b:86:55:3d:6a:90:37:4c:5b:
                    c5:b8:51:bf:62:18:d6:55:4e:d6:41:6b:5b:1b:ad:
                    ec:e6:93:89:ec:b5:06:cc:48:8e:f4:ac:f7:24:c0:
                    4f:a2:93:c6:58:4e:27:bf:19:5d:d4:81:58:a1:06:
                    21:90:fc:3a:6d:8e:cd:9f:be:d6:40:6c:b3:12:57:
                    0a:7e:92:9a:5d:05:06:41:4a:9d:7f:2e:07:7d:91:
                    d0:87:13:e4:7a:79:68:5d:f0:0c:00:0c:ba:75:88:
                    86:24:ce:69:a2:6f:aa:1a:bd:d8:2e:49:fb:ab:4b:
                    7f:b5:ca:04:da:4d:1d:7c:42:3b:48:57:89:0e:8d:
                    e4:28:ee:cc:ac:f9:11:47:ad:f8:9a:c7:a5:49:b7:
                    12:1d:00:76:52:af:af:c7:ef:fc:c9:63:f1:28:03:
                    04:db:64:f1:86:53:7e:c2:7f:21:d2:41:d3:14:c0:
                    7d:8e:45:c5:9e:e2:ab:7a:79:82:26:a9:c3:e8:4b:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2F:8D:1E:CF:4F:A0:25:04:3A:7A:B4:B1:BA:DD:C5:6E:4E:1D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/499a1b17-d66a-3873-9ccf-9e9d09d714a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:a00c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:30:98:0e:3c:7b:15:7c:97:7b:51:b0:48:a1:40:21:2d:6b:
         03:a0:3c:0e:3a:79:f5:6e:89:6f:ae:c0:54:a4:cd:9f:11:e6:
         2a:99:1f:0c:66:ba:7b:03:c0:1f:0e:ff:60:06:4f:cb:e0:02:
         75:34:dd:e8:77:48:eb:04:1b:11:00:43:3d:96:5c:a2:11:38:
         b2:2f:f3:b6:09:d6:ee:84:e0:fb:e5:0f:2f:ab:66:41:1e:22:
         d2:36:28:f9:13:d2:3b:73:d6:25:27:b1:57:80:c3:64:88:e9:
         00:c2:36:44:37:79:5b:aa:65:a1:99:f8:4b:3b:d2:58:66:dc:
         e4:44:ec:db:79:b6:b0:29:3f:ce:33:59:9a:3e:ba:2f:ab:3f:
         27:cd:34:c2:31:69:e1:83:46:79:82:e1:3f:e1:23:dd:81:8d:
         4e:d8:40:e4:a9:34:38:ca:58:e9:47:70:73:2f:79:89:f9:af:
         b8:c4:49:2e:e4:85:d4:ce:2d:31:07:4c:65:a8:26:40:30:f1:
         9e:1e:6a:10:06:6c:0c:ff:41:61:44:cc:73:9e:3e:36:bc:aa:
         6c:a9:40:56:d2:b1:78:57:be:7c:76:9b:64:34:31:f8:48:5f:
         a6:4d:6b:fa:e5:bd:15:05:1f:d5:5d:da:0f:20:6b:53:f4:d6:
         6d:38:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:27:08 2025 by rpki-client