Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b632bb8c-cf1b-3526-8068-81933e9dd74f.roa
File:                     b632bb8c-cf1b-3526-8068-81933e9dd74f.roa (raw, json)
Hash identifier:          P6DzX4ijHU2zVwGrRwZPKoOmFYlhXnpLl1c9Eca5Fbs=
Subject key identifier:   2B:D5:50:A5:C4:D7:48:DE:83:08:B5:50:8F:CF:75:07:F6:86:A2:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD8F21E8C1B305DE0A7380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b632bb8c-cf1b-3526-8068-81933e9dd74f.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        2001:559:8223::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:8f:21:e8:c1:b3:05:de:0a:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=a6b039a8-2025-4840-8f3d-a43fdedba1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:31:56:c4:a7:23:67:19:45:65:82:b5:1d:
                    db:ec:45:33:18:6d:ca:ed:d3:02:16:8a:8d:f5:66:
                    3a:17:6b:0b:55:03:c4:3e:2f:3c:12:cd:c5:fc:a5:
                    e4:4e:19:06:5b:aa:eb:13:10:bf:0d:52:30:e7:fc:
                    bf:76:19:20:ba:c1:b1:9c:ba:c6:1c:c3:fc:ae:3b:
                    f5:e4:76:84:ac:3b:09:f7:55:32:44:f4:7e:ee:f7:
                    5b:83:1b:aa:9e:1a:72:79:5c:1b:41:b8:7d:5a:61:
                    d4:4e:25:78:01:9e:1e:a0:ba:d3:96:a3:65:ad:64:
                    8b:d3:88:56:fa:ad:56:7f:b0:7f:95:e3:64:2b:51:
                    ef:ba:aa:40:2c:37:56:f5:38:81:ed:84:61:56:9b:
                    db:f0:13:9c:2c:0e:8b:e7:bd:bb:ac:1b:f1:b9:b4:
                    36:0a:c2:84:ce:3f:ba:e4:0c:68:08:11:61:69:66:
                    fc:4a:d0:d8:ba:e1:d9:02:12:ec:76:32:b0:12:d3:
                    7c:aa:5e:23:68:ac:1e:91:ee:10:e2:13:6a:c0:20:
                    d2:f0:9e:e4:08:75:5d:6d:54:16:50:1c:99:0b:b3:
                    dc:7f:4a:b4:43:0d:f6:76:b0:cf:4a:c6:5b:43:66:
                    4c:ab:b0:a5:f0:e6:a6:7d:3f:0e:a4:36:1d:d6:d8:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D5:50:A5:C4:D7:48:DE:83:08:B5:50:8F:CF:75:07:F6:86:A2:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b632bb8c-cf1b-3526-8068-81933e9dd74f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8223::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f4:42:70:99:bf:3d:e0:0f:e5:a5:5a:ba:11:f5:f7:f6:1d:
         70:6d:68:84:1e:31:b7:c6:38:0e:83:34:e7:e4:97:8e:ed:fd:
         5f:cc:e0:6d:8c:4d:39:7f:a4:09:a4:ee:ea:45:99:aa:79:bd:
         18:93:67:01:81:46:2a:50:0b:43:26:fa:d9:92:6c:f2:74:ec:
         4b:5a:ea:3e:24:6d:37:a1:0b:1f:e3:ac:5d:56:3f:41:74:dd:
         8f:18:af:49:61:5f:a0:fc:a6:8f:c4:b6:ad:18:59:48:83:06:
         b7:f1:08:16:b3:29:6e:11:3e:76:37:cd:9f:b5:c3:44:16:89:
         bc:fb:a6:09:24:d7:f5:02:43:e9:dc:8d:95:b0:65:4e:00:98:
         7a:13:31:3a:c8:a3:b5:bc:18:ac:e8:ec:d0:f0:f9:52:ed:82:
         dc:06:80:ed:0a:d8:78:22:3d:ce:e4:3d:ea:2c:b9:8d:ae:b9:
         8d:c9:c1:c3:b7:98:6d:0a:56:82:59:50:42:21:13:27:b5:c3:
         17:35:7b:99:70:fd:10:d7:0d:7b:06:2a:20:a2:a8:47:77:1a:
         90:31:1b:a8:f4:83:4a:8f:5c:14:f0:a3:26:23:91:1e:0c:92:
         50:e7:62:47:4d:f3:92:cb:01:99:9b:0d:cc:21:5d:d5:8c:00:
         03:d4:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:14:22 2025 by rpki-client