Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18c57b03-6b43-30ed-905b-c4de9ddd2ba0.roa
File:                     18c57b03-6b43-30ed-905b-c4de9ddd2ba0.roa (raw, json)
Hash identifier:          csNXxvYCr4PeNjU6cMw/WXiwBopxSnXqlTjJoN2+W+8=
Subject key identifier:   73:3A:64:C7:B3:83:61:EF:8D:B9:7C:2B:25:60:0A:C2:01:ED:C3:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE0318789F86CDA6F07D26F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18c57b03-6b43-30ed-905b-c4de9ddd2ba0.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        2001:559:e028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:87:89:f8:6c:da:6f:07:d2:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=f2b26814-b533-4da4-a968-90e938348c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:01:78:30:4a:ae:c6:b4:42:ee:5f:72:ab:3d:
                    2c:6b:1e:a4:d2:b7:5d:73:7d:f0:8f:40:1f:9a:c2:
                    eb:df:6b:4a:6b:5b:1d:06:f5:0f:97:f7:b6:08:06:
                    e9:7b:8a:8c:de:90:d5:ad:b6:95:52:0f:04:51:43:
                    b7:e1:50:ec:0e:91:7e:ab:e7:c3:73:ba:e2:ed:e5:
                    95:84:65:eb:2c:15:a7:6e:f5:d5:df:a0:da:22:d4:
                    d5:3a:c9:bd:5b:72:da:b9:af:53:7d:8f:5c:6e:43:
                    b2:f6:d4:e6:3c:4b:b0:bb:97:58:61:bc:8b:65:b8:
                    14:83:f9:0d:6b:0b:46:60:bf:bc:b7:02:45:02:56:
                    63:4b:79:e5:0b:8a:91:dd:90:be:41:f7:e0:07:07:
                    fd:a8:25:74:a2:55:e9:51:46:37:5b:27:fe:68:7b:
                    96:74:79:38:36:2c:ad:8f:27:df:4a:2b:c6:97:b9:
                    5b:a5:56:e9:22:c2:9f:0b:f9:56:f1:d5:17:40:bc:
                    b3:28:e6:6e:87:33:c1:a8:32:89:c3:65:84:96:92:
                    94:1d:5d:b4:f1:92:4d:13:6f:77:23:09:51:32:f7:
                    7c:c4:36:a2:9e:1d:37:98:c5:ca:e3:d6:6e:5f:df:
                    98:08:15:f7:26:38:65:06:05:5a:9a:76:7d:6f:14:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3A:64:C7:B3:83:61:EF:8D:B9:7C:2B:25:60:0A:C2:01:ED:C3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18c57b03-6b43-30ed-905b-c4de9ddd2ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:73:b4:ac:7d:b4:b0:7a:a2:97:49:59:23:6d:73:06:8a:0a:
         41:db:44:30:c7:7f:d8:6b:30:1a:e8:0d:33:0b:08:a7:a5:03:
         f9:3c:77:65:ba:b7:9b:4e:dd:4d:d2:80:8f:51:24:4f:1c:be:
         93:df:27:ce:44:ec:96:37:85:31:ff:7c:f6:e1:00:d6:d0:f7:
         d8:e3:37:0e:bd:6c:9a:07:07:5a:fa:ab:25:a6:81:fa:f4:79:
         b2:7b:07:11:d9:fc:d8:ae:aa:cd:d9:d9:ac:ae:0b:0b:64:36:
         9e:7a:01:9e:54:73:8e:84:2c:17:9d:16:1d:a7:c7:0a:74:a5:
         6f:be:df:87:c5:0b:ea:c7:67:85:94:2d:12:12:e4:ce:6c:4e:
         41:08:65:aa:a0:1f:91:9d:9f:e3:98:de:46:52:2b:63:84:cc:
         a1:18:62:9a:28:13:eb:2b:34:75:9e:66:d7:77:e7:ae:8e:80:
         da:22:5f:98:26:a9:4e:f5:b2:79:eb:1a:a4:8e:04:5b:33:e2:
         b2:ff:11:87:49:4d:8d:25:9a:d2:30:82:d5:46:ea:6c:ce:67:
         70:71:9e:50:95:c9:37:71:bd:a4:d6:90:a0:ae:fe:67:52:ea:
         f4:98:2a:58:25:4a:db:e7:f0:d3:76:cf:77:d7:6a:70:ce:e0:
         2b:a4:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:04:31 2025 by rpki-client