Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe8606d-fa8e-3c90-8d90-3053471cf31b.roa
File:                     afe8606d-fa8e-3c90-8d90-3053471cf31b.roa (raw, json)
Hash identifier:          fHlSUXWTfqRLP8C4+kWc+NQPSjHt5DSw29stY97x82k=
Subject key identifier:   CF:62:3C:27:01:C9:71:38:80:73:1E:B7:05:53:CC:B0:74:79:76:43
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FF8D5A480871240168D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe8606d-fa8e-3c90-8d90-3053471cf31b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2001:559:e040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:f8:d5:a4:80:87:12:40:16:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=26421a87-8eaa-472c-829d-9a63be70c35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:52:c7:7a:17:fa:5d:64:4c:66:5b:b8:39:
                    2b:55:0e:7b:69:15:6a:19:c5:3f:f6:b8:01:26:37:
                    94:35:28:11:fe:b6:61:df:e2:54:36:fe:06:50:f2:
                    9f:8c:71:19:af:6d:37:7d:ec:76:c3:e3:f3:ad:65:
                    36:a4:47:3d:6c:44:95:39:9f:84:e2:fc:4c:70:e6:
                    42:c9:b6:24:a4:1c:97:3c:92:2b:b5:15:b2:f3:7f:
                    cb:10:57:89:a5:1a:68:44:60:c7:8d:30:ad:91:f8:
                    18:0f:ec:fd:b5:de:8f:3d:2c:e9:74:34:68:00:19:
                    78:e5:f7:cf:03:e0:6a:4c:70:eb:5c:c4:2d:96:b6:
                    aa:bd:f3:cd:10:4d:7d:75:3e:7b:cd:f5:7a:cc:66:
                    54:27:4e:b3:8f:9b:5f:eb:6e:b4:ad:cf:5c:3b:81:
                    e4:05:94:25:0c:d9:dc:89:ea:67:69:03:ba:cb:27:
                    2f:69:3f:39:8c:de:85:bd:06:32:7f:08:c8:c5:e4:
                    c8:15:5d:2c:23:17:40:4e:22:2a:d4:39:7c:20:f0:
                    b8:74:16:fc:b9:b1:c4:29:40:84:12:e7:b5:55:6a:
                    b4:5f:3f:78:b6:63:33:4c:6f:0e:a5:3f:03:53:48:
                    cb:23:f7:32:51:e0:02:bc:6e:45:7c:b7:70:24:31:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:62:3C:27:01:C9:71:38:80:73:1E:B7:05:53:CC:B0:74:79:76:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe8606d-fa8e-3c90-8d90-3053471cf31b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:11:4f:7d:9b:59:63:f0:43:5b:f6:e7:37:cf:0f:80:71:
         57:6e:0d:4c:5c:8a:e1:30:75:79:f5:1b:21:ad:69:ff:5e:5b:
         66:ce:e0:50:19:43:68:8c:ef:ef:d0:c4:87:63:73:f5:f5:c3:
         4d:29:ed:5f:55:c1:47:c4:60:fc:e4:32:33:0c:22:2e:cc:ae:
         ee:02:f2:8c:22:5a:03:cf:38:ce:f8:97:dc:4f:dd:d1:a2:99:
         da:f0:4b:7d:56:09:63:a5:37:8c:11:ab:62:21:d6:ab:40:25:
         49:3d:ed:6a:f7:01:a5:d9:9f:06:c5:e9:7c:c1:a9:ea:e8:64:
         90:f9:88:cb:bd:d1:c2:04:93:61:bf:4d:4d:e4:e5:eb:f7:18:
         ab:40:c7:bf:94:8f:bc:87:c6:b1:8d:bd:b9:61:cb:21:0a:17:
         1e:5e:a5:2c:3b:51:4c:9a:c3:b2:7e:4f:23:b9:bb:d5:cc:cc:
         91:0e:3c:bb:ae:f3:15:74:53:1a:47:f0:58:35:fe:3d:26:ea:
         b6:fd:81:f2:95:85:a4:76:c7:f1:7e:3f:ae:a7:1e:95:11:08:
         f3:a1:1f:03:9b:f1:b4:52:c1:cd:07:ed:3b:ad:e2:97:58:7e:
         ea:40:3d:0b:2f:9f:29:84:97:eb:5c:44:31:53:5a:6d:91:5f:
         b5:e6:5d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:31:38 2025 by rpki-client