Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d44f75-79aa-3239-9f37-1a40bb2161d4.roa
File:                     02d44f75-79aa-3239-9f37-1a40bb2161d4.roa (raw, json)
Hash identifier:          zLuJBOF0+xuaelJyvxanJ3d220qUMz5xcxf65Bwclcc=
Subject key identifier:   9C:D8:9E:9A:3D:C2:F7:3A:BA:C1:A5:7C:82:D2:C2:4C:1D:31:F1:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDCE171E3A9CB70ACB9E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d44f75-79aa-3239-9f37-1a40bb2161d4.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        2001:559:28f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:ce:17:1e:3a:9c:b7:0a:cb:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=9749384f-0aec-48dd-99e0-6e7032941aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:72:36:0f:21:e7:8c:83:bb:74:70:ad:6c:d5:
                    77:eb:91:f7:c0:6e:87:aa:88:2d:77:9e:40:4a:e2:
                    45:5e:89:d9:a1:a0:cc:f9:c6:8c:7b:ab:4e:5c:13:
                    b5:92:7e:3a:8f:11:04:73:1f:fc:ee:5f:1a:73:63:
                    38:0b:43:51:2a:93:e5:3e:52:0d:e7:52:60:e2:a6:
                    b0:10:ca:1e:df:e2:0a:96:b4:33:f1:92:e3:7a:1e:
                    42:57:49:27:bd:49:aa:f5:6d:e4:1d:0c:c2:6b:8e:
                    81:c9:76:e9:d8:05:92:2c:1e:91:c3:28:4a:26:07:
                    a4:60:be:a9:97:5e:5a:21:07:06:f2:cb:49:61:35:
                    21:7f:85:35:dd:57:07:36:82:aa:d8:0b:f2:87:0d:
                    bd:ec:b7:e9:07:dd:48:5b:c8:4e:6d:ef:b4:d6:a8:
                    87:dd:d9:bb:e8:1b:a2:4a:0e:08:f4:f8:65:e8:1f:
                    a5:99:8c:61:e5:8a:46:dd:be:34:50:32:44:9e:e5:
                    c8:d0:e8:ad:73:33:e0:1f:96:b2:d2:a8:bc:83:e6:
                    52:ef:41:a1:b8:94:47:a7:c5:98:3d:5e:13:c5:04:
                    84:10:56:08:2e:bf:7d:dd:1a:83:53:d2:ca:52:07:
                    8c:46:d8:76:1a:eb:03:d7:e3:63:59:e8:c9:c9:e2:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D8:9E:9A:3D:C2:F7:3A:BA:C1:A5:7C:82:D2:C2:4C:1D:31:F1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02d44f75-79aa-3239-9f37-1a40bb2161d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:28f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:0d:cf:1f:36:6a:87:58:80:9b:0c:c4:d9:9b:a0:e5:ea:e6:
         fb:cd:1d:f4:03:05:82:90:37:12:cb:53:55:7a:da:3d:b1:94:
         95:ad:d2:2c:83:df:eb:31:f2:fb:65:b2:50:23:58:82:1a:e7:
         84:07:e1:97:5a:c8:bc:3e:ab:71:3d:e9:85:8d:2f:6e:b4:a7:
         41:3c:89:6f:8a:85:98:08:e7:8a:41:6a:da:86:02:b3:aa:2b:
         38:39:27:22:89:b8:92:69:de:70:7c:48:a2:2f:50:29:20:c7:
         5d:04:98:42:21:d0:92:a3:bd:32:ba:f0:e4:50:72:4e:ca:aa:
         da:26:86:9d:7f:97:ce:18:d9:5b:1b:5f:36:57:0c:82:a1:47:
         f4:88:22:49:af:7d:56:bc:09:82:03:9e:f7:b2:ba:c5:ce:30:
         85:41:d3:19:cf:1b:a9:e2:7f:35:33:28:0a:c6:0d:8f:b0:a7:
         e4:49:e9:92:a5:99:bc:2c:dc:29:58:c5:bd:0a:89:eb:30:09:
         bf:81:9d:42:4d:19:8e:3b:79:56:60:db:51:3b:41:be:9d:c7:
         d9:3f:a4:a8:9b:d8:2d:1d:70:06:e1:9c:7d:b3:43:58:d8:33:
         a7:95:54:19:a9:f3:22:7b:0c:a9:d2:83:ff:ce:38:fc:94:8d:
         55:07:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:05:59 2025 by rpki-client