Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4082c1d-7911-3bfd-992c-d2cada546d0c.roa
File:                     d4082c1d-7911-3bfd-992c-d2cada546d0c.roa (raw, json)
Hash identifier:          pJciAPVgAGsz7QTcbMYisl8bYL1oUgPUB6OQsEq7baM=
Subject key identifier:   21:36:47:D8:9C:36:0B:29:B5:29:7D:33:B5:C7:D8:EA:A2:10:4E:64
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5FC5EC505093A4A7A9486E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4082c1d-7911-3bfd-992c-d2cada546d0c.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     33662
IP address blocks:        2001:559:c4e2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:ec:50:50:93:a4:a7:a9:48:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=ded2f0dc-b034-40fc-b684-f4421a91293b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6c:63:1d:ce:3f:d7:d3:0e:6a:80:8a:b8:61:
                    5a:14:e8:bc:da:61:e9:75:99:47:ec:c1:98:d8:8e:
                    b9:d8:9a:ce:f6:2d:b6:a6:32:94:9b:48:1a:79:d9:
                    f7:12:54:bc:81:29:0f:0a:b8:72:3f:e0:5c:78:fa:
                    56:e3:4b:ad:1e:7d:49:4f:44:1a:0c:c3:34:5b:71:
                    a8:7d:6d:c2:70:50:44:b7:44:67:53:21:52:b0:d0:
                    9c:46:98:c7:65:d6:47:2a:85:70:95:90:55:f9:b3:
                    55:be:6d:f6:7d:f0:9b:ce:cb:b3:1c:48:58:3a:36:
                    8e:ce:36:0a:9b:49:1a:d2:61:f4:c0:cf:27:3a:60:
                    6a:58:61:f3:b5:45:87:54:56:95:ca:69:c0:74:33:
                    55:1e:9a:8c:36:1b:ff:1a:ef:49:58:f1:7c:40:d4:
                    86:09:5b:b2:dc:07:6b:3c:08:6c:79:c5:4a:19:7a:
                    a3:f8:c9:5d:0a:45:4d:74:3e:12:9e:9c:c0:25:51:
                    55:14:81:fc:ed:f2:5e:36:a4:5a:7a:a1:e2:45:ea:
                    84:3d:7f:9f:20:c1:63:2f:42:9a:05:56:b7:7c:bb:
                    39:1d:47:8d:55:94:68:3d:8f:ff:bd:02:8f:fc:a8:
                    73:ea:29:00:a6:63:9a:fd:a4:bf:20:4c:8a:27:8b:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:36:47:D8:9C:36:0B:29:B5:29:7D:33:B5:C7:D8:EA:A2:10:4E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4082c1d-7911-3bfd-992c-d2cada546d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c4e2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:5a:81:c9:2c:b2:4c:c6:ec:ae:cf:e0:bd:2f:76:8b:47:
         7b:92:7e:fe:a3:4b:d2:38:7e:33:40:b7:8a:33:2e:5d:b5:e7:
         3b:68:e5:44:f8:f5:ce:f6:cb:36:8e:58:41:0a:d0:52:58:fe:
         2a:62:76:95:2d:e6:64:e2:e6:e0:fd:d1:af:02:d9:a1:ba:4d:
         b3:e8:56:22:df:ea:79:e1:a4:62:9d:1a:68:bb:67:11:f9:12:
         46:73:74:f9:3a:8e:c9:09:89:8d:60:52:7b:cd:b7:28:77:96:
         ca:07:4a:64:67:a6:5f:4b:6b:7b:d5:49:44:23:dc:ca:1c:3e:
         11:39:dd:a5:54:eb:db:ba:a6:a0:ce:ba:f2:df:07:40:2e:fb:
         ef:aa:43:0d:b4:8c:5d:02:75:12:44:2e:25:3a:be:1e:f3:f7:
         36:a5:c0:ba:eb:7e:68:28:38:40:bf:d7:86:eb:11:1f:a4:a1:
         ee:eb:f2:a7:1b:cd:d1:9b:5b:e4:06:80:06:b1:f0:ca:d2:b4:
         eb:3b:ca:ba:44:60:03:b2:62:f1:84:6e:15:b2:9f:0f:d6:ac:
         55:61:0d:d4:a6:63:42:0f:a5:37:1e:2b:32:ce:5a:da:a7:a7:
         31:b9:8f:76:e2:c0:b0:c5:d0:ff:5f:ed:00:b7:d4:89:a9:ee:
         7f:0a:c9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:07:05 2025 by rpki-client