Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f23c5e72-3b20-31cb-96ac-b7a9d79eecbf.roa
File:                     f23c5e72-3b20-31cb-96ac-b7a9d79eecbf.roa (raw, json)
Hash identifier:          lGbbBifYF6P74VDbAaY5m1sMVzQNmg98zVNu6OT20nY=
Subject key identifier:   4C:50:11:98:9E:78:B3:5C:14:C8:0D:A6:E2:73:5D:BB:36:01:5C:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBD092846BD14EAE97A800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f23c5e72-3b20-31cb-96ac-b7a9d79eecbf.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33662
IP address blocks:        2001:559:c410::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:d0:92:84:6b:d1:4e:ae:97:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=43a214ac-3818-4d4a-8277-a71e9e0a21d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c9:af:04:47:8b:4d:af:fa:83:33:86:23:df:
                    61:19:48:26:68:cb:df:90:03:bc:e7:06:8a:d0:46:
                    0a:73:99:73:fc:54:4e:81:40:0b:11:84:c0:46:9c:
                    41:93:79:cf:99:f0:52:a4:d4:6b:b5:f8:dd:20:e8:
                    d3:c7:24:23:54:a7:cf:35:4d:f8:5f:71:4e:3b:ef:
                    cf:4c:69:b7:23:de:88:26:b0:3a:57:19:0e:18:de:
                    78:0b:79:f0:bb:88:0f:9e:3e:71:d1:cb:dc:e1:48:
                    46:b9:9f:56:b5:b8:84:a8:26:a0:cb:4c:f5:c0:01:
                    5f:b6:72:89:e4:02:ee:db:f3:ac:ff:4f:b4:37:58:
                    92:d5:14:dc:be:35:cb:cd:58:f7:fc:17:10:da:d2:
                    45:2d:91:46:cf:a2:5e:d2:19:1a:71:64:85:74:6b:
                    98:18:c0:53:87:38:37:6e:1f:08:db:c7:7d:16:70:
                    49:b0:2a:1c:0b:76:82:95:88:c1:4b:0d:5e:97:50:
                    62:ef:fd:39:ea:e5:35:c6:c0:8c:ff:36:29:33:45:
                    53:8c:2c:1e:2d:22:5e:47:fa:67:16:9f:b4:d9:08:
                    63:a5:b2:b6:cf:d8:23:8a:0f:3c:95:b0:b5:fe:70:
                    06:d8:15:73:40:2a:16:8c:08:e5:65:f4:06:fa:bb:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:50:11:98:9E:78:B3:5C:14:C8:0D:A6:E2:73:5D:BB:36:01:5C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f23c5e72-3b20-31cb-96ac-b7a9d79eecbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c410::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:7b:8a:f8:8e:86:fb:81:bb:e3:34:47:a2:11:60:0e:7f:06:
         2e:0d:c3:db:98:fa:d2:df:de:77:ed:89:aa:a0:e4:7f:7a:74:
         25:8c:1d:05:03:ad:3b:c3:c5:5b:b2:be:f1:de:7f:1a:c5:b3:
         08:fd:12:8a:55:f9:d7:4f:b3:0b:fb:b2:85:cd:ae:9e:8f:e4:
         c8:e1:e7:68:df:fa:24:ae:ed:00:5a:e3:13:3b:01:2c:48:76:
         9e:d1:81:1a:a3:ba:f6:03:89:b9:e9:61:42:0f:d2:cf:7a:3a:
         24:a3:36:ed:79:a5:1c:85:4a:d8:74:ff:56:b5:f3:a7:ee:dc:
         09:5e:18:65:d0:2e:2d:9b:23:07:4d:ba:86:4a:b5:cd:f0:5f:
         5c:d6:06:21:c3:58:ce:c8:4e:9d:4f:21:59:2d:15:76:36:31:
         d4:28:87:37:d9:eb:54:28:77:67:3b:48:89:75:a8:82:22:7b:
         3e:c2:70:e6:ca:4c:7c:29:78:ea:83:a3:0c:6b:ea:8a:0e:75:
         3b:8a:c5:31:bf:f9:73:c7:00:28:e7:e8:7d:c8:b7:6c:2c:0a:
         a9:c7:f9:a1:44:a5:d0:93:f8:d0:e2:59:eb:f8:fc:fc:33:d8:
         29:c2:6e:fc:65:ac:36:ca:84:27:5c:ed:c9:2e:76:88:66:0e:
         b3:aa:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:38:47 2025 by rpki-client