Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eef4576-d956-3532-a54d-0efa5843ce6e.roa
File:                     0eef4576-d956-3532-a54d-0efa5843ce6e.roa (raw, json)
Hash identifier:          afMDEnq4siIB0rmy9t9/ajOw7YMf1+ETt3Z6XLxpFUs=
Subject key identifier:   64:32:94:42:4A:6B:02:54:A0:73:EA:37:99:1C:5D:C4:3D:AA:90:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA568151B1E40D2DB2C8AC8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eef4576-d956-3532-a54d-0efa5843ce6e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33287
IP address blocks:        2001:559:82f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:68:15:1b:1e:40:d2:db:2c:8a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f72d9238-cfe3-4de5-a618-a6ad719bfd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:90:35:18:4f:dc:0d:bb:89:72:20:69:c4:
                    39:f7:07:9d:e1:29:91:96:c9:4b:2a:a6:f7:46:d1:
                    50:e8:2d:a6:17:73:7c:ed:68:b9:70:8a:7f:4e:66:
                    59:c1:06:45:06:68:62:0d:fc:cb:fc:2f:a3:bf:a2:
                    75:02:34:6e:43:72:2d:b8:be:5b:65:84:f7:49:48:
                    36:f7:50:4d:9b:db:9b:22:cf:f8:2b:a5:30:20:2d:
                    46:30:b0:2c:63:10:0a:4f:4b:9c:fc:d1:7f:16:c5:
                    2a:62:e0:b2:55:3f:21:56:0d:ec:c5:38:69:ae:a8:
                    f3:d7:3b:c4:de:27:18:a4:a3:cf:54:b9:35:1c:45:
                    43:50:1c:f5:da:6e:1c:2e:70:d3:56:ff:09:c8:71:
                    1c:94:75:b7:50:6a:44:cc:4b:90:57:03:ca:6d:47:
                    87:f6:d7:08:bf:ac:dd:b6:62:2e:b0:c8:f7:8b:9d:
                    35:68:3e:6e:40:ea:f7:53:c2:68:9d:c9:34:3d:fd:
                    f0:4d:a6:47:b0:60:fa:07:58:78:84:4f:ab:f3:2c:
                    4c:70:4e:3a:03:87:37:ba:fd:09:3e:fa:c7:88:6b:
                    57:5c:17:82:01:12:67:0d:f1:8c:1b:8c:5d:62:73:
                    5d:d1:dd:f3:da:0a:84:0e:c6:a6:03:80:39:a6:c3:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:32:94:42:4A:6B:02:54:A0:73:EA:37:99:1C:5D:C4:3D:AA:90:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eef4576-d956-3532-a54d-0efa5843ce6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:82f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:de:c8:88:b4:f9:dc:39:61:d1:68:cc:75:c0:99:ca:f9:32:
         fa:cf:a4:61:ca:9a:bd:7b:b5:74:ca:69:68:d7:a7:20:45:fb:
         43:c5:92:2e:77:bb:dc:05:d8:ba:4d:8f:dc:fb:be:19:91:39:
         bf:40:42:a1:ba:4c:24:ac:54:d6:02:fa:19:49:3c:59:e2:8c:
         38:be:77:38:30:e9:99:76:ec:5e:b0:4c:f1:bb:e3:e0:52:2a:
         de:94:9f:97:b9:5f:c2:36:b6:bd:f3:76:c1:ec:d1:a7:00:60:
         1d:e0:e2:c6:42:82:d0:d8:8e:cb:3d:f5:d8:a1:6b:76:fb:0b:
         31:c9:52:a5:05:dc:c0:b8:f3:8f:a0:0c:85:dd:c0:36:da:02:
         7f:af:7a:84:2a:30:1e:21:19:ee:f0:77:ab:17:e8:a9:97:a0:
         61:7a:1a:03:93:63:19:35:8c:10:c4:c2:38:c4:40:1a:fb:72:
         ef:06:ce:84:dc:46:cb:42:29:92:22:04:fe:a7:59:fe:ac:62:
         f6:ec:93:d8:ae:f3:4e:41:b1:fb:b8:f4:fe:ea:13:42:4e:ec:
         04:37:ae:07:73:c5:c2:36:f9:c5:17:96:c5:c6:76:bc:5c:36:
         28:5f:1b:e2:04:4f:8b:9d:b8:07:92:7e:75:57:cf:26:42:66:
         8c:cc:39:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:11:11 2025 by rpki-client