Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ec50d42-f70e-3de1-aaa5-e3c4494c70d1.roa
File:                     9ec50d42-f70e-3de1-aaa5-e3c4494c70d1.roa (raw, json)
Hash identifier:          XzCxj6BUkRP+t15iHw92ZpAGUk7hKlhyPQI3zkUhiVE=
Subject key identifier:   09:08:C7:71:41:F2:48:61:DF:56:51:6A:15:12:7E:9A:99:00:68:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBCEF1A82CFDC3C4C76500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ec50d42-f70e-3de1-aaa5-e3c4494c70d1.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33662
IP address blocks:        2001:559:81f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:ce:f1:a8:2c:fd:c3:c4:c7:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=5079304b-d305-463d-abd3-739f1b38efa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:09:88:7e:34:de:9c:f6:bf:d3:41:d5:01:
                    e8:f0:40:63:2b:0e:d7:09:34:41:db:ad:ca:1a:82:
                    d3:49:f4:04:9e:5b:97:dc:e3:ab:8d:01:ea:1a:e5:
                    fc:63:cd:ed:39:5e:9b:4e:62:dd:38:5f:61:1f:8e:
                    26:d5:71:66:8c:cb:ef:23:3f:ac:d7:84:5d:52:cf:
                    45:e8:a1:5f:a4:4e:17:a6:8c:6f:c6:90:e4:4c:e9:
                    5f:1b:d6:a2:c6:d1:a3:50:14:41:a2:4b:71:5e:47:
                    6b:78:9f:92:d1:7f:51:c7:f8:a7:f2:fa:60:2d:8e:
                    42:42:26:9f:59:f7:cb:c1:a9:4d:25:b9:12:f2:52:
                    14:33:de:66:4a:17:84:37:62:58:22:c2:53:4b:92:
                    08:71:4e:02:5d:63:10:c2:a8:b5:ae:54:bb:6c:b3:
                    b4:cd:c0:eb:bf:e9:7a:b3:e1:1f:a7:a5:41:c1:92:
                    21:95:12:a7:e6:e0:9a:de:91:ef:d2:e4:59:e2:23:
                    87:67:fc:c7:3f:63:3d:eb:7d:74:0a:b9:8d:32:fe:
                    bb:9d:49:35:b1:73:fa:8e:3c:33:44:d3:41:16:7e:
                    1c:21:eb:90:e2:bf:9d:43:7e:5c:49:e5:c0:aa:38:
                    a1:7a:f0:5b:58:b4:7d:cb:0a:95:3c:95:69:1a:f3:
                    6c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:08:C7:71:41:F2:48:61:DF:56:51:6A:15:12:7E:9A:99:00:68:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ec50d42-f70e-3de1-aaa5-e3c4494c70d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:81f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:94:76:c9:e2:84:87:c9:64:f9:38:a6:3b:ce:35:71:7f:8f:
         16:43:42:6c:1d:55:f0:3e:6c:22:ed:e7:3f:00:02:49:5f:30:
         55:90:2a:76:13:24:e0:9b:a7:93:fe:14:32:fb:fa:da:cd:16:
         63:45:e5:84:12:7c:d2:f7:da:ed:a7:87:ca:d2:f5:f3:52:1d:
         4c:4c:a0:ff:50:93:06:a3:71:e0:5e:67:0c:7b:b1:69:b0:af:
         4e:b9:fd:a2:1c:cf:1c:b1:93:ad:ec:c2:ce:16:04:ee:03:54:
         da:41:a9:61:10:8b:f5:07:3b:a3:28:c0:59:ac:64:e5:1a:86:
         cb:50:81:bf:d1:c1:a8:d2:d6:18:20:95:7d:ba:a7:9d:1b:1c:
         0a:63:6c:ab:55:ae:f1:3c:37:6d:46:f9:e2:5e:85:c0:1c:e4:
         aa:c9:56:62:7c:69:7b:eb:92:a9:2c:16:ac:ae:a0:35:2e:53:
         bd:ab:c4:f7:29:97:3b:13:d5:db:6f:df:76:72:21:d7:2a:33:
         b2:5d:08:44:31:59:8c:73:b8:d1:bf:56:33:f6:a8:95:f0:7b:
         50:71:1a:11:ca:c3:aa:e0:de:8d:3b:4f:37:ab:61:a9:52:f3:
         26:46:f9:ba:b8:6b:37:fb:9b:c5:f9:ba:5e:a1:7e:40:1b:c3:
         e9:26:84:32
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc+87xqCz9w8THZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
NTA3OTMwNGItZDMwNS00NjNkLWFiZDMtNzM5ZjFiMzhlZmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKoJiH403pz2v9NB1QHo8EBjKw7XCTRB263K
GoLTSfQEnluX3OOrjQHqGuX8Y83tOV6bTmLdOF9hH44m1XFmjMvvIz+s14RdUs9F
6KFfpE4XpoxvxpDkTOlfG9aixtGjUBRBoktxXkdreJ+S0X9Rx/in8vpgLY5CQiaf
WffLwalNJbkS8lIUM95mSheEN2JYIsJTS5IIcU4CXWMQwqi1rlS7bLO0zcDrv+l6
s+Efp6VBwZIhlRKn5uCa3pHv0uRZ4iOHZ/zHP2M96310CrmNMv67nUk1sXP6jjwz
RNNBFn4cIeuQ4r+dQ35cSeXAqjihevBbWLR9ywqVPJVpGvNs8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAkIx3FB8khh31ZRahUSfpqZAGh/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWVjNTBkNDItZjcwZS0z
ZGUxLWFhYTUtZTNjNDQ5NGM3MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYH0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANiUdsnihIfJZPk4pjvONXF/jxZDQmwdVfA+bCLt5z8AAklfMFWQ
KnYTJOCbp5P+FDL7+trNFmNF5YQSfNL32u2nh8rS9fNSHUxMoP9QkwajceBeZwx7
sWmwr065/aIczxyxk63sws4WBO4DVNpBqWEQi/UHO6MowFmsZOUahstQgb/RwajS
1hgglX26p50bHApjbKtVrvE8N21G+eJehcAc5KrJVmJ8aXvrkqksFqyuoDUuU72r
xPcplzsT1dtv33ZyIdcqM7JdCEQxWYxzuNG/VjP2qJXwe1BxGhHKw6rg3o07Tzer
YalS8yZG+bq4azf7m8X5ul6hfkAbw+kmhDI=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:02:21 2025 by rpki-client