Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6907abc-79f2-32d7-85d6-c1982f33530e.roa
File:                     d6907abc-79f2-32d7-85d6-c1982f33530e.roa (raw, json)
Hash identifier:          xx/dpYANre2WkJGPmK0aqB04kAs0JfxTYv/jVLo/Xkk=
Subject key identifier:   BE:BF:E3:A1:25:18:FA:92:6F:BF:67:51:E3:85:F7:D2:64:BF:E7:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB87A6B2DF18CC2F8B93180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6907abc-79f2-32d7-85d6-c1982f33530e.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        2001:559:8563::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:7a:6b:2d:f1:8c:c2:f8:b9:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=b1e6981a-3bcf-4f94-bc39-d2297956deb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:db:b3:81:91:a3:3e:37:89:e3:3e:6b:c1:
                    0a:f3:3b:e6:c9:00:44:50:f3:63:eb:50:b7:57:9d:
                    19:bb:3f:4e:47:19:a9:3a:fc:09:92:23:22:f9:5e:
                    65:0c:2a:12:82:52:52:17:2c:55:9c:25:04:e9:67:
                    bf:2f:a9:b7:3f:5f:43:34:21:68:84:0a:f3:16:81:
                    ca:63:af:c6:ff:ec:83:7e:cb:59:4f:53:82:69:96:
                    f5:e6:a4:a2:8a:eb:51:54:fe:ab:55:91:c4:df:75:
                    3f:6b:3c:eb:f0:81:84:13:77:2e:35:cb:c1:eb:8c:
                    0a:cd:75:3e:51:56:87:b8:29:0f:d0:78:dc:95:bc:
                    db:b7:22:7e:e9:a0:c2:08:28:ba:8e:d3:64:a2:21:
                    66:ea:36:2e:f3:33:63:91:82:fe:b3:91:b2:30:8e:
                    e4:85:af:6c:39:57:f7:76:87:77:17:1e:ce:21:7c:
                    98:90:63:de:c4:77:02:cc:01:43:9c:d2:00:35:9d:
                    01:38:66:4c:54:89:d3:ed:30:34:c0:f1:05:7b:da:
                    76:8f:ea:d9:56:3c:75:af:78:f5:37:92:82:da:73:
                    f6:4b:2f:14:6c:a4:2a:cf:f1:09:3d:d4:d3:b6:ec:
                    d0:57:74:3f:32:1a:2d:71:f1:a3:f0:c8:b1:c2:86:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BF:E3:A1:25:18:FA:92:6F:BF:67:51:E3:85:F7:D2:64:BF:E7:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6907abc-79f2-32d7-85d6-c1982f33530e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8563::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fc:53:69:54:d0:34:50:d9:f1:9d:e5:e1:63:c8:03:2c:b6:
         c6:6b:13:8a:a2:04:b6:1a:fa:9e:6e:b0:2b:07:fa:a4:9c:94:
         47:78:d5:78:e2:6b:b3:82:e9:b5:00:0e:14:23:72:c9:fe:64:
         f9:de:03:cf:af:e5:b0:50:eb:90:ce:51:87:a9:36:5d:de:25:
         fd:fc:11:0b:09:8a:0c:3a:03:84:ed:69:54:20:4d:be:46:43:
         22:b5:95:90:6c:47:8f:c2:40:fc:25:54:28:8c:18:1c:c5:72:
         38:3c:5c:3c:a2:ef:c9:4d:8a:f5:5b:de:c2:65:69:ea:fb:18:
         8f:b5:ba:5e:88:8f:fd:cb:b9:61:1a:c7:54:ab:be:d0:da:cf:
         15:d1:a9:3c:a2:df:48:3d:5a:e1:8e:5d:66:69:67:e6:18:7f:
         59:c8:7d:f9:fd:75:93:37:2f:fc:e7:dd:44:cd:02:1d:6a:cd:
         5a:cc:cf:96:30:95:00:33:2d:5f:7f:36:aa:18:ab:34:71:04:
         0a:0d:44:04:79:be:62:a0:65:9c:9c:e8:25:2f:92:29:2e:e6:
         9f:e7:d7:8f:e4:04:0a:08:e7:b2:6f:db:bf:a9:6c:52:e2:08:
         3e:a9:0a:06:b4:94:ed:65:20:c1:81:59:c3:1d:5a:e1:22:ed:
         91:95:c5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 03:53:51 2025 by rpki-client