Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b04c346c-25bf-3fac-be5a-ae20040693e3.roa
File:                     b04c346c-25bf-3fac-be5a-ae20040693e3.roa (raw, json)
Hash identifier:          GQQBmOSRfLqFSLx2qNT7Y3QD2riAHfR8RCgB+ptlpLs=
Subject key identifier:   0E:A6:58:83:13:CB:71:54:BF:B8:6F:A2:EF:20:FC:DB:A3:9D:AF:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC3F6A4B7EEC007747F400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b04c346c-25bf-3fac-be5a-ae20040693e3.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        2001:559:14f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:3f:6a:4b:7e:ec:00:77:47:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=dcba11c5-4418-40c7-b148-21896abea6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:95:97:40:09:09:e9:ab:e5:e4:54:bb:2d:da:
                    93:7b:de:36:c0:67:5e:d8:2a:b3:01:b1:94:4b:57:
                    f2:60:4c:8a:16:b9:fe:34:22:f7:dd:e2:d5:82:3a:
                    77:e2:89:9e:d9:ca:e7:af:53:43:4a:45:d0:81:44:
                    ec:af:01:11:17:3d:1c:3d:20:58:4a:0d:82:b9:4b:
                    cd:d4:c6:87:6e:4f:fa:14:60:80:46:fa:a6:cb:fc:
                    03:9f:88:44:43:28:bb:a9:1d:6a:b7:d7:08:0c:8f:
                    8a:90:5a:69:f8:4a:b1:76:0c:c9:8c:d5:bc:c8:3e:
                    7b:cb:b1:20:43:c1:7c:20:d3:a2:91:75:ce:11:de:
                    d0:3b:bd:a1:3e:da:8d:2d:38:e1:ab:05:c1:bd:76:
                    72:25:8e:e1:d6:66:83:fb:6d:6b:09:ef:e8:9d:dc:
                    72:b5:b6:a4:fb:ac:d8:3a:ed:60:6c:e3:63:53:84:
                    10:2b:db:1d:67:42:8f:ef:bb:28:ab:7e:be:51:5a:
                    17:a8:f4:35:dd:eb:9e:3d:49:b2:df:24:d3:b7:2f:
                    45:54:f5:07:51:ca:ec:14:fd:a6:0b:73:54:20:08:
                    40:9a:b5:a1:09:63:e9:61:27:4c:fe:75:d6:89:88:
                    c6:c4:1d:f6:ed:79:82:b8:eb:7d:93:8c:f4:d9:85:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A6:58:83:13:CB:71:54:BF:B8:6F:A2:EF:20:FC:DB:A3:9D:AF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b04c346c-25bf-3fac-be5a-ae20040693e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:14f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:70:7e:1e:0d:04:01:2e:32:8f:b4:f9:4e:7d:f6:e8:b6:54:
         f3:f0:66:75:e4:87:98:a7:fb:65:a1:41:c1:fc:38:83:2f:26:
         ea:74:df:78:d1:9e:c9:c2:e4:b0:14:46:ae:0b:5e:28:53:01:
         3c:a1:7f:94:63:8e:8c:5b:7d:c3:df:b4:ed:a6:d2:f9:4b:56:
         fa:ce:c9:3f:88:a5:cd:9c:15:eb:8e:13:42:78:58:45:dd:d3:
         ac:96:70:38:f2:de:28:b1:b0:69:8e:e2:fd:f3:6f:c2:4d:6f:
         3b:28:c9:db:8a:bb:ba:b6:b3:ab:f2:d1:a2:1c:df:46:49:73:
         0f:f0:d2:1e:3a:c1:0b:32:e7:3c:71:3f:a0:c6:a9:c2:8e:2c:
         5b:99:29:bf:b0:f4:ea:45:f5:91:cb:63:2c:05:a2:09:18:73:
         5f:51:c0:65:11:d7:48:ff:b3:84:05:eb:a6:a3:b1:96:a8:92:
         b7:59:a6:5c:58:15:ed:08:82:2c:7d:05:e0:d7:fc:6d:de:a2:
         32:87:51:28:71:0b:54:70:8a:d0:7c:d4:0d:64:38:f7:f1:96:
         25:39:1e:3d:44:b3:41:6d:77:e1:46:9e:6b:aa:80:15:24:8e:
         cd:2c:43:a8:d8:8d:fa:a4:8a:fb:b1:73:19:91:9a:4f:dd:62:
         0a:f3:e6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:43:38 2025 by rpki-client