Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/482e3aa4-d1f7-31ba-91b9-b93c5c0380dd.roa
File:                     482e3aa4-d1f7-31ba-91b9-b93c5c0380dd.roa (raw, json)
Hash identifier:          FjtfRphA9KxjLEXTq/mXE4itBE7itXSYO5iBJVvw8dY=
Subject key identifier:   94:C3:F9:8E:8D:28:A9:DB:BB:C3:A3:F6:3C:ED:16:80:CB:88:6D:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB879ACDABE3F963E3811B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/482e3aa4-d1f7-31ba-91b9-b93c5c0380dd.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        2001:559:84ae::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:79:ac:da:be:3f:96:3e:38:11:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=9d555b5d-90fe-434b-9924-b23ad3d15a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:1f:8e:6d:5d:ab:af:1d:5d:ac:d4:34:1f:
                    44:df:eb:d0:b7:3b:07:44:b7:f7:34:d5:32:b5:99:
                    5f:93:25:e8:0c:7f:a1:9f:8c:3e:2b:5b:c4:d6:6d:
                    a0:da:48:b9:cd:79:ba:c6:e2:8b:57:3b:ce:c9:95:
                    ff:b7:17:90:a2:34:f6:21:05:5e:7a:8d:4f:0a:ef:
                    7b:3a:ee:75:d4:b7:97:c7:62:47:70:99:94:86:57:
                    63:63:ee:2c:cd:41:fa:68:3b:e8:02:b0:99:a6:89:
                    44:77:96:36:10:a0:44:cc:f4:f2:ea:fd:b5:e4:ee:
                    af:f9:9a:19:09:cb:f1:a9:19:b6:bb:4b:23:9f:55:
                    52:5c:e2:a8:54:2c:0b:57:a1:69:e7:c9:7d:36:04:
                    ed:ea:c3:cc:94:99:a4:1c:02:1b:c3:a4:4c:86:ae:
                    92:89:14:9b:59:07:08:30:6f:17:0b:2e:f2:72:96:
                    67:14:97:d5:be:a2:9d:60:85:33:0b:86:af:b5:d5:
                    35:89:2b:be:ed:d4:5b:5b:58:46:0a:33:12:8c:57:
                    50:d4:b4:76:59:99:b0:3c:2b:2d:25:8c:e6:67:ba:
                    75:c9:63:44:2f:de:b4:43:c1:e0:61:9b:e1:5c:68:
                    a5:8e:9f:f4:d6:27:dd:49:33:df:d2:c4:b1:b6:50:
                    92:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C3:F9:8E:8D:28:A9:DB:BB:C3:A3:F6:3C:ED:16:80:CB:88:6D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/482e3aa4-d1f7-31ba-91b9-b93c5c0380dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:84ae::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:4c:1a:57:a5:34:4e:50:a0:72:91:f9:c5:6b:47:5e:57:
         b9:3c:a8:38:2d:e9:65:b9:01:9c:5e:9f:43:c9:3d:f1:d9:5d:
         29:b8:2c:66:fd:93:5c:15:21:be:ec:1e:40:08:d2:f2:00:e9:
         3e:fd:5a:b6:61:64:52:a6:6f:b0:7f:7a:bc:8d:64:90:eb:45:
         b5:17:a1:e3:da:2a:c5:2b:4a:f4:50:f2:b6:21:d1:32:43:25:
         2c:04:c2:f3:d8:c5:18:a6:ff:a4:e1:6b:f7:74:10:41:c4:25:
         29:0a:db:1c:c7:24:14:7c:d4:09:2e:b7:1d:b8:e6:75:9e:af:
         2f:62:ff:75:44:59:f3:5a:d2:6a:dc:4e:0a:51:aa:7c:e6:f3:
         e3:b6:44:08:e0:66:d9:81:90:5b:19:41:c9:a5:a6:d4:f8:54:
         34:1e:f2:fb:8e:15:13:59:ea:fb:2f:36:5a:b5:4d:f3:c8:8d:
         52:f2:e2:b5:71:ec:35:52:82:73:69:e0:27:4b:e1:c9:db:cd:
         1e:3c:32:52:c7:36:93:29:d6:6e:0e:f6:cc:e0:da:83:4d:ab:
         1a:56:f6:57:4b:3c:b8:01:4b:9f:ad:b5:84:46:a1:67:30:11:
         48:b5:dc:69:6e:01:e2:0d:67:1e:1b:0c:75:04:ff:3d:24:b8:
         f1:5b:22:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:49:23 2025 by rpki-client