Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18c57b03-6b43-30ed-905b-c4de9ddd2ba0.roa
File:                     18c57b03-6b43-30ed-905b-c4de9ddd2ba0.roa (raw, json)
Hash identifier:          Tf1G1EITjjoRPS9/VtKh5kWNCqXIqYeqS8swKyQVzRw=
Subject key identifier:   7C:62:37:BC:C8:E6:9E:E7:6F:9D:5B:BF:BD:B3:D9:AE:B4:8A:B7:C9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF7574DCD608F7458F1832A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18c57b03-6b43-30ed-905b-c4de9ddd2ba0.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7015
IP address blocks:        2001:559:e028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:74:dc:d6:08:f7:45:8f:18:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=40f1e804-2d7e-4800-b12e-e77c2882a542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:02:08:31:88:4d:1d:eb:ca:0a:85:44:8c:
                    78:74:08:a8:b5:51:9e:bc:32:13:fb:be:73:d2:dd:
                    b3:00:a0:58:0d:f9:4b:07:62:98:b0:15:b0:3a:07:
                    f2:1d:21:4d:d4:77:44:92:2c:48:b4:cd:cb:c5:fb:
                    f7:ee:3e:13:90:81:4d:92:81:31:f5:fd:88:10:18:
                    dc:7c:29:69:3c:97:30:fb:6b:a0:91:14:92:ce:f7:
                    c1:77:f5:69:57:86:b8:ff:28:4c:20:f9:d5:ed:5f:
                    81:f4:70:e4:b8:9b:c8:df:28:01:08:ff:e9:1a:36:
                    e9:d0:45:cf:bf:98:0e:f5:71:38:fe:24:04:78:26:
                    34:d1:43:6e:30:e7:74:97:ea:03:2d:cb:f5:77:6a:
                    99:37:65:fc:2d:76:ea:98:06:d7:08:5a:e6:01:fa:
                    2f:db:96:08:38:21:d1:88:6a:56:4a:e5:8c:37:c2:
                    99:89:64:b2:d4:89:80:7f:6b:4e:fb:12:13:7a:30:
                    2b:96:87:f5:61:d5:f1:38:78:c9:95:5e:b8:8e:5f:
                    76:64:69:d5:2e:29:d6:5f:5e:1a:23:4d:98:2c:8c:
                    5b:71:18:f2:bb:37:d7:76:4f:80:20:4c:70:a4:92:
                    5f:bd:81:f6:56:c1:f9:34:e9:51:8f:c9:2a:e2:05:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:62:37:BC:C8:E6:9E:E7:6F:9D:5B:BF:BD:B3:D9:AE:B4:8A:B7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18c57b03-6b43-30ed-905b-c4de9ddd2ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:3c:1b:90:b3:db:a6:53:9c:87:d5:0a:b6:a6:00:42:03:
         5c:d2:30:fe:25:4b:90:fb:eb:b3:18:cd:06:31:f9:b1:96:f4:
         71:33:a2:b2:2d:7c:4a:91:47:31:13:27:1f:2d:55:ba:52:5f:
         81:95:b7:14:50:89:e2:97:71:7c:15:44:03:8a:43:0a:93:b1:
         fa:7f:c3:df:7c:d3:5b:d5:89:1f:9f:29:6b:f0:30:fb:ab:85:
         60:15:3a:bd:9a:c1:13:a1:9b:3e:71:49:e8:47:4b:18:2f:af:
         3e:2d:2d:e1:43:d5:d7:d7:00:24:fe:9c:9c:6d:18:29:7e:fc:
         eb:fe:99:1d:0f:50:14:2c:08:5e:75:9a:0e:69:2b:8a:65:90:
         23:f2:e2:c7:8b:fb:56:c8:4a:84:6f:3b:2e:85:dd:aa:91:f1:
         f8:39:b6:86:41:e4:0a:29:64:f3:31:a7:5b:a6:d2:ef:c5:34:
         12:53:71:a0:88:1c:24:9e:ee:b1:b6:30:88:77:68:76:01:08:
         73:0e:49:a5:dc:67:95:84:0d:8c:f7:b8:60:76:55:69:75:30:
         2f:dc:8a:c1:d3:6b:77:6f:41:39:2a:1e:e7:2e:37:c3:a9:eb:
         ef:83:59:f7:d7:93:6f:ae:80:92:f3:d1:6d:01:1c:84:02:18:
         1c:bd:17:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:57:05 2025 by rpki-client