Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1a5a095-c684-3393-bb28-9566c561c817.roa
File:                     b1a5a095-c684-3393-bb28-9566c561c817.roa (raw, json)
Hash identifier:          RvH+XcKmqRl+R872ORtKKDqtsWmD7vIEl0w8B5XpBSM=
Subject key identifier:   E1:3A:88:F3:68:52:60:1D:A1:EE:59:3F:AB:C2:62:04:31:1F:79:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDD3C022566C600C24C000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1a5a095-c684-3393-bb28-9566c561c817.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        2001:559:8415::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:d3:c0:22:56:6c:60:0c:24:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=1e0ea223-8a0b-47f9-acb9-571c154a73d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bc:1c:a2:b9:3b:c1:50:37:42:94:be:54:90:
                    3a:2d:16:db:21:3c:98:93:db:29:54:b9:e9:19:ae:
                    bd:17:8f:20:ed:c4:16:85:46:de:d6:80:84:f2:44:
                    f5:30:82:c1:1e:ff:08:8a:f3:1f:65:f0:65:fc:b2:
                    9c:d2:8d:cb:dc:ba:66:8a:54:39:54:3a:de:2e:c4:
                    77:60:06:d6:45:75:42:35:e6:b4:bd:4d:6c:23:58:
                    39:e1:34:72:f8:d3:43:21:13:95:fb:19:66:31:39:
                    92:26:82:94:f9:b1:29:68:85:60:13:c0:26:92:20:
                    8d:ab:be:58:d9:1b:c8:dc:6c:72:6a:97:f4:77:5b:
                    d4:b6:a8:1e:a6:7e:38:0f:96:31:66:00:d9:48:4b:
                    ea:b2:a1:77:ad:36:8e:20:25:2d:9f:19:72:98:ca:
                    9a:bc:d2:e8:11:ac:6a:75:5c:06:39:a8:e4:fd:7f:
                    73:71:63:63:cf:30:54:06:f7:91:37:5f:f2:36:e1:
                    91:ff:5a:2b:8b:4e:4e:ae:db:84:c5:7e:e7:c2:c3:
                    3f:8c:7c:68:4a:73:71:17:8f:21:43:1b:33:1c:1b:
                    0c:e6:db:b2:6d:9d:5f:48:59:97:60:df:cd:a6:f2:
                    0f:93:92:82:f9:99:59:68:4f:66:63:8e:bb:8a:34:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3A:88:F3:68:52:60:1D:A1:EE:59:3F:AB:C2:62:04:31:1F:79:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1a5a095-c684-3393-bb28-9566c561c817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8415::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:2c:f0:30:09:ee:33:2b:7a:ed:09:10:d1:b7:3d:c2:04:86:
         00:dd:67:7a:d3:03:3b:4f:4b:c4:5a:61:a9:b3:2a:c4:29:c7:
         6b:82:e2:ea:58:48:2f:0f:47:ca:2b:6e:7e:5e:78:38:94:7a:
         85:eb:84:fc:b0:96:34:c8:ee:b2:7c:2a:03:06:4d:17:57:38:
         e2:be:87:bc:c7:c0:7b:06:7d:f4:01:70:01:e3:bd:bb:cb:e8:
         f9:db:d3:ce:72:b3:29:96:2b:73:cc:88:c5:7f:4b:20:e0:90:
         33:5d:d2:7d:13:8c:4e:fe:bf:67:c4:6e:5d:59:5d:91:39:ce:
         bf:91:f9:c9:dd:d6:e9:d1:b9:51:45:d8:e2:ba:fd:89:e6:b3:
         47:9f:2c:f0:e3:55:ad:d1:ca:5f:bc:8a:61:04:f0:1e:40:00:
         31:ee:cd:d8:a8:76:c9:1b:20:de:c0:79:5b:f0:02:50:0a:92:
         fd:4e:0a:f9:69:7f:64:89:e0:90:ed:21:e1:4f:40:e2:06:0d:
         a7:e3:a0:a0:03:7f:03:33:c1:88:6a:4f:ff:79:43:47:ee:88:
         e0:79:6e:7c:b7:52:3b:33:48:db:c0:43:27:46:96:69:c3:fd:
         80:ab:92:2b:6e:dd:0c:90:c7:1f:b8:76:fb:bb:1b:3a:a9:78:
         4e:4c:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:35:40 2025 by rpki-client