Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a963f61a-e55f-389c-8205-fbe3c48eaaf6.roa
File:                     a963f61a-e55f-389c-8205-fbe3c48eaaf6.roa (raw, json)
Hash identifier:          35VAVaKNorrx/5kqwHlSHJ2NF6G9Pnretipx4tgmKJA=
Subject key identifier:   94:2A:C8:74:26:E5:D7:90:6C:1D:96:2A:90:CD:CA:3D:A0:DE:EA:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBEBCAB5CE0F2D9B33FD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a963f61a-e55f-389c-8205-fbe3c48eaaf6.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7015
IP address blocks:        2001:559:831d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:eb:ca:b5:ce:0f:2d:9b:33:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=16fc6f06-83b1-43c0-9165-93ca68379b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7d:12:69:2b:99:ca:33:01:ad:f6:e1:b8:27:
                    86:13:33:0e:f0:22:98:87:8e:de:31:54:30:eb:35:
                    7a:dc:76:1c:cf:75:fa:8c:18:08:36:f8:da:13:a8:
                    0a:3f:33:78:2f:24:73:3e:de:59:06:51:0c:88:99:
                    cb:bf:b8:be:79:6c:37:ba:21:9a:ce:b8:54:22:c8:
                    6d:13:0d:f0:79:98:dd:95:5f:cc:53:51:d9:73:2b:
                    97:bf:50:db:a2:8d:f3:55:c3:7d:c6:4f:38:97:a9:
                    4a:77:8e:60:96:b6:d4:9b:96:2b:be:ec:eb:a8:6c:
                    64:72:65:46:fb:cd:32:62:03:3a:a4:f2:44:f2:b6:
                    8a:e9:ef:28:6b:a9:43:32:14:2e:da:93:6d:6b:cf:
                    9a:51:8f:00:08:5c:ce:64:1b:95:f1:11:d3:09:11:
                    3a:c8:ed:a4:71:36:44:3f:9c:53:9d:b3:db:64:9e:
                    ba:29:b4:57:19:18:23:a6:c9:85:13:54:cb:62:50:
                    11:c4:7a:76:50:f3:ba:e6:7f:c3:2b:f8:b0:33:71:
                    f3:66:d1:41:6a:07:37:05:17:99:ae:5c:1e:9e:e1:
                    b1:2e:f6:37:53:22:b0:6f:62:fe:9e:94:af:11:60:
                    42:ab:ad:1c:62:52:1f:09:73:87:4c:c3:b1:f4:02:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2A:C8:74:26:E5:D7:90:6C:1D:96:2A:90:CD:CA:3D:A0:DE:EA:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a963f61a-e55f-389c-8205-fbe3c48eaaf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:831d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:aa:ce:84:ce:fd:50:76:f4:64:a8:28:52:30:00:dc:15:a5:
         96:5e:63:6c:d9:1b:fe:b4:89:a8:6c:5a:ec:31:6c:5d:eb:79:
         15:07:91:2f:a2:6c:3b:fb:fd:66:8a:23:0b:1a:c0:0d:56:1e:
         f8:67:89:90:41:a0:47:b3:6c:d2:52:8d:0d:60:b7:88:d6:6c:
         42:0b:47:e6:6d:e1:75:47:24:79:28:2c:6e:5c:71:a2:96:2c:
         8b:af:d9:58:b7:11:39:20:29:14:3e:7a:d8:28:ee:c4:d9:04:
         d2:81:ff:db:4c:ac:b3:59:6b:3d:7b:c5:8e:74:1b:10:a9:61:
         2f:c9:33:e2:07:16:47:44:9e:60:b3:d3:e2:7d:17:76:4e:7a:
         8a:4f:1d:86:bb:bc:07:68:85:99:d6:d0:44:5a:0b:10:13:93:
         48:2c:6b:f8:cf:9f:b9:e4:11:8f:c5:ce:6d:c2:a8:d9:0e:34:
         b0:34:7e:b3:e3:a0:3b:2b:b8:de:f2:fb:d1:e8:93:fd:bb:b5:
         92:5e:0e:16:23:f9:35:23:75:1a:5d:87:ee:b4:15:0f:1c:2b:
         23:42:77:62:c5:1c:2a:b2:df:8e:70:94:79:4a:70:08:ca:be:
         20:17:fc:81:69:5f:fe:8c:e1:c1:2d:39:e6:5b:55:0c:33:2a:
         62:fc:7a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:00:28 2025 by rpki-client