Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/744d16b1-53da-3204-81fa-b8aec676f672.roa
File:                     744d16b1-53da-3204-81fa-b8aec676f672.roa (raw, json)
Hash identifier:          2T5uC1OdfW0Y4GqFRgMs2f0UbNNNPFh8HIpRAUVhX8w=
Subject key identifier:   4A:85:F6:F5:B8:86:52:5B:C1:F0:E0:A9:8F:C2:EB:C9:C0:66:F1:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC7B513C2C1E99E4B21400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/744d16b1-53da-3204-81fa-b8aec676f672.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        2001:559:83b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:7b:51:3c:2c:1e:99:e4:b2:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=83aabd4c-8bd8-40aa-b779-bb4c9b75b3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:4e:59:b0:03:66:8d:a8:35:c1:27:84:12:
                    32:f6:ea:7a:a5:8c:61:e2:5f:78:1c:f2:cb:be:4b:
                    97:04:98:f4:1a:ed:c6:c1:ce:5d:d4:af:99:91:d0:
                    fb:95:01:37:b8:b1:d2:3b:31:9d:d4:db:2a:ab:59:
                    62:8b:5a:6e:be:7d:17:fc:e3:dd:5f:d4:43:72:26:
                    a2:e1:e6:c1:dc:95:94:8d:74:58:6d:94:9d:5a:ce:
                    63:a4:47:97:5a:d3:d4:49:d5:4b:dd:bf:7c:dc:3a:
                    42:6a:ea:d6:59:75:92:08:0a:88:cc:f2:fc:88:0d:
                    2c:2c:4a:3c:f0:98:cd:55:da:25:e6:a1:13:28:b2:
                    3b:97:61:3d:29:f9:66:21:fc:f2:64:62:a4:fa:f0:
                    9d:95:da:fe:2d:4d:93:90:6d:bc:b5:dd:72:36:33:
                    79:58:15:22:2b:3f:c8:ac:61:dd:38:cd:02:70:8f:
                    c6:66:b8:e5:98:c2:40:17:68:b9:69:a0:bd:f6:8f:
                    05:af:85:bc:94:76:e2:8c:26:63:4d:19:ec:f6:93:
                    7f:f9:f7:24:4b:47:31:fc:1c:22:e9:a2:1e:f1:b5:
                    83:f1:26:f9:51:cb:75:00:9a:89:4b:43:34:f2:c0:
                    17:1d:31:22:0c:ea:31:77:96:c1:24:3b:76:4a:21:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:85:F6:F5:B8:86:52:5B:C1:F0:E0:A9:8F:C2:EB:C9:C0:66:F1:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/744d16b1-53da-3204-81fa-b8aec676f672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:83b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:a2:ed:6f:aa:9c:3c:05:11:25:6f:9b:7b:02:c3:6c:6f:4c:
         af:89:2c:12:01:b6:49:65:47:ad:47:65:4a:e2:89:06:6f:33:
         39:e6:5b:86:39:b0:0a:fb:ec:39:4b:ae:1e:83:b5:0b:17:4e:
         6d:84:d6:78:59:5d:80:61:d3:04:85:ff:dc:a6:3a:cf:bc:8b:
         60:2c:ae:e1:ce:45:ee:ba:7a:f7:1c:b6:8a:27:02:a5:ff:f8:
         e7:d9:10:22:70:f7:62:26:92:19:a2:67:9b:17:1c:5b:cb:73:
         8a:c8:a4:2d:7a:14:63:1d:7b:9c:1e:d8:13:3c:97:27:3e:71:
         39:11:fc:1a:8c:74:f2:14:e0:c4:08:4f:2c:13:ff:f4:7f:d4:
         a8:be:f4:22:aa:b8:89:b6:b4:25:b5:f8:3f:9b:78:8a:36:9a:
         c5:14:1a:78:02:57:4b:07:29:36:aa:1d:b1:5a:3a:c1:58:f9:
         25:0b:e4:b8:30:9c:8b:90:d2:b0:32:1b:71:7b:5f:c9:85:7a:
         4f:fe:dd:48:cd:28:48:f7:a6:c5:55:10:f9:99:d1:8f:54:05:
         3e:9d:ab:68:fe:47:be:5a:3e:c1:ac:6d:62:6d:f9:da:39:f8:
         48:8b:82:bf:9e:dc:10:50:d6:85:f1:3e:65:a7:a9:fd:ad:ce:
         41:ae:45:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:07:40 2025 by rpki-client