Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b803f7fe-ed9f-3ff3-8083-d35728473022.roa
File:                     b803f7fe-ed9f-3ff3-8083-d35728473022.roa (raw, json)
Hash identifier:          ynVMw14hwHOj8AwkLTWoe7u2O35GW6QRa9a80y79wdY=
Subject key identifier:   E3:5B:93:BE:0C:E3:85:6D:AB:41:2F:60:5E:98:CE:BD:BA:08:FD:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DBA027D2ACFD5FCDF9EAD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b803f7fe-ed9f-3ff3-8083-d35728473022.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        2001:559:1c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:02:7d:2a:cf:d5:fc:df:9e:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=e7899338-c62f-4122-b825-d9aa186d9bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7e:e8:6d:7a:ce:3a:71:32:e5:92:68:31:f8:
                    7c:9c:1d:30:28:ec:e1:1d:83:cd:b9:6d:15:e9:c9:
                    93:a2:bf:8f:c1:42:cd:c1:2f:76:d8:b8:5a:68:84:
                    7f:37:bb:00:2c:39:ee:e0:5d:a2:c5:fb:b8:f4:c6:
                    59:33:82:e2:14:a2:dd:a6:2d:42:18:b7:3b:cf:e5:
                    cc:4e:9b:8c:30:79:88:2b:f0:88:3d:ac:15:56:c1:
                    55:d7:74:12:66:c1:64:01:0e:c0:56:6c:b7:76:ac:
                    08:65:07:e7:73:90:60:d1:73:c3:be:52:91:f0:48:
                    77:16:67:31:ab:e1:d2:f1:7c:5a:a5:39:6a:9c:65:
                    30:4e:04:23:f6:4d:c0:b7:f5:14:d1:d5:06:16:d7:
                    85:1b:a0:56:1b:09:79:6e:71:c4:90:b8:d9:19:3c:
                    02:54:66:59:c5:f4:f8:4b:d9:bd:9a:0d:bb:68:0f:
                    db:c2:af:04:e8:79:9b:65:a8:7c:e2:6e:b2:a2:a9:
                    40:73:b0:d7:47:33:18:1a:c7:b0:12:1a:91:f9:3e:
                    0a:4f:09:5a:9e:62:5a:b8:37:54:26:36:68:e1:7b:
                    33:4a:dc:32:07:95:4b:1e:58:2f:2d:28:c0:99:69:
                    10:14:2f:d2:0a:9c:5e:7e:75:70:34:c9:80:b6:78:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5B:93:BE:0C:E3:85:6D:AB:41:2F:60:5E:98:CE:BD:BA:08:FD:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b803f7fe-ed9f-3ff3-8083-d35728473022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:1c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:09:ac:54:bc:08:10:ed:13:c0:f6:a8:f3:10:21:ad:f3:
         77:0b:6a:50:27:fb:60:85:42:31:70:3f:9e:ad:fe:c6:81:c4:
         9d:c2:8e:f9:6c:c4:41:27:48:11:be:b5:40:84:07:bd:55:de:
         51:91:d8:da:1c:b2:c3:b1:b3:81:5b:d6:5f:7f:d6:11:bf:e4:
         6f:d9:2c:1d:21:f4:b2:70:d0:67:61:13:e8:af:cf:cf:7f:81:
         b7:72:89:fa:1e:57:fe:94:9b:6b:40:ad:cc:c0:7c:ca:bd:82:
         d1:61:a9:5e:da:8c:ab:64:ef:ae:56:09:88:cd:48:f2:00:9d:
         c9:c6:1f:11:49:63:2e:45:0a:50:29:68:be:b9:51:29:57:de:
         58:65:74:2d:71:24:48:1c:62:40:3c:9b:a2:73:b7:7d:fe:ce:
         37:8c:3e:b9:07:c6:35:a4:da:a7:f5:ef:2e:60:ea:89:52:12:
         92:c9:88:e7:26:9c:d1:bc:7b:7c:fe:36:6b:b6:5f:77:49:9a:
         60:ab:ed:9b:56:3c:0f:b7:08:d0:d9:c3:65:88:8a:a2:13:31:
         2c:aa:42:09:f8:36:94:06:a1:03:44:1a:e6:ec:21:b4:b7:ae:
         d5:dd:c9:5b:d4:d4:3c:8b:01:0c:ee:90:64:5c:89:bf:e9:54:
         62:bf:9b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:43:08 2025 by rpki-client