Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e52aace-9b96-3772-a595-aed6c88b12b5.roa
File:                     0e52aace-9b96-3772-a595-aed6c88b12b5.roa (raw, json)
Hash identifier:          sVJjh72dh58Iv21/yseiiqAfhO1KI/4SNSxG72v9Szw=
Subject key identifier:   00:07:A9:F9:A3:A7:C5:CD:DD:96:39:DA:3B:E8:FC:2D:30:12:BA:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB831CCE61BCECA5FABA580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e52aace-9b96-3772-a595-aed6c88b12b5.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        2001:559:b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:31:cc:e6:1b:ce:ca:5f:ab:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=caeca08a-c7f4-4abc-b9d2-f70e1392cd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:34:04:03:03:d9:51:de:7c:8a:0a:63:ff:
                    b8:4e:47:16:56:2e:77:3a:76:65:56:6b:27:4a:6f:
                    09:a6:4a:2b:96:a9:a9:f6:2f:38:08:03:7e:75:eb:
                    bc:62:d6:cd:ec:e0:6a:94:8b:3f:d5:fd:e1:27:2d:
                    d8:b8:e6:74:01:9b:11:e4:23:4b:d4:77:94:b3:47:
                    27:a9:7d:5e:77:fc:80:97:e2:7b:df:8e:7d:06:e5:
                    38:16:96:bc:2f:b2:b6:ac:16:44:35:72:7d:f3:c6:
                    29:cb:5b:66:eb:67:59:de:d6:94:95:e8:65:2b:6e:
                    b6:1e:04:ad:2a:97:15:80:ba:68:1b:63:bf:b9:c2:
                    18:9f:3a:3f:97:f4:38:10:40:d1:19:3a:dc:1d:bb:
                    72:42:64:72:1e:08:76:0b:1e:68:c3:02:7a:86:7c:
                    32:f5:93:b3:30:94:4b:a0:d9:d7:01:f1:bf:93:e2:
                    a4:d4:1e:b4:b5:ce:3d:d9:e2:7c:cd:13:69:6c:f4:
                    75:80:fe:95:0e:10:ae:79:58:56:fc:e7:09:c2:1b:
                    a5:e6:60:7b:2c:1d:a5:58:aa:74:5c:a6:45:f3:69:
                    2a:c4:48:b4:63:1d:d1:1f:e0:b5:12:dc:46:96:e0:
                    35:8a:9f:a8:49:87:41:4d:e1:8a:c5:a6:55:bc:1c:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:A9:F9:A3:A7:C5:CD:DD:96:39:DA:3B:E8:FC:2D:30:12:BA:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e52aace-9b96-3772-a595-aed6c88b12b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:42:f3:84:b5:b1:7a:1b:5a:64:6c:31:be:a1:ff:e0:46:
         d7:9b:99:1b:0e:ec:a4:1a:70:38:66:f7:25:0a:da:17:e8:f4:
         fd:36:36:94:e6:6e:c8:bd:8e:eb:79:eb:bd:0d:70:f0:fa:a6:
         86:21:63:09:a0:b0:dd:e9:8a:72:57:98:89:a7:66:fb:65:d7:
         60:cd:aa:70:83:a3:5e:cd:49:7b:ea:38:23:9c:9b:f9:fe:50:
         0e:2c:2f:ae:6d:58:00:ff:9f:c3:74:1c:00:00:4a:e6:f1:f1:
         f6:d4:5f:82:7c:be:65:47:85:83:3e:5d:78:65:f2:19:9f:7d:
         c4:88:0e:fe:0c:5f:01:39:f2:30:40:6d:f4:ba:27:fa:6a:19:
         24:66:b1:f4:d0:03:37:38:d3:1f:33:35:71:e4:20:ee:a5:cb:
         df:aa:09:8d:31:d1:7a:02:87:15:05:10:cb:bb:0a:7a:41:d5:
         53:2d:24:e0:7a:bc:9d:d0:84:87:6d:4c:34:e4:e1:1f:17:a5:
         b0:b2:c4:cb:09:d7:91:ac:88:f9:7c:9c:39:36:f4:9e:58:5f:
         d0:e9:f7:a1:86:45:f3:56:3e:81:c5:bd:16:87:63:c6:d0:fd:
         6d:3f:e9:04:02:91:00:88:65:7a:19:cb:18:47:66:ec:aa:e8:
         df:d5:46:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:10:51 2025 by rpki-client