Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2066c3fa-0524-3c09-bf9c-1da3d42a0acf.roa
File:                     2066c3fa-0524-3c09-bf9c-1da3d42a0acf.roa (raw, json)
Hash identifier:          ZDSTw51kXhyAcPK95EY754uKMlX48m9B3O8vcT5V9Ko=
Subject key identifier:   10:ED:93:E0:04:87:B4:73:31:89:27:CC:8A:83:97:5F:8A:DC:DB:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B5141C4B82961AD206C4579A8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2066c3fa-0524-3c09-bf9c-1da3d42a0acf.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        2001:55a:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:c4:b8:29:61:ad:20:6c:45:79:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=e41bb1e6-8e92-4ca2-a88b-37fcaff4fd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:65:fa:63:a8:d0:ed:7c:4d:b4:ed:b6:ff:
                    e0:3f:ed:0e:56:1e:09:02:9a:e8:1a:be:5e:07:c8:
                    c8:57:05:63:2d:83:ea:66:44:66:b1:d8:08:6f:bb:
                    fe:63:35:31:3e:d3:14:3d:c5:e2:24:6a:ae:66:7b:
                    61:15:df:c0:9c:fb:10:4c:2e:24:df:80:32:cc:d4:
                    d6:b7:f6:4c:cc:c0:13:e2:45:51:3f:37:f8:12:8b:
                    cd:6d:f9:e5:e5:c9:22:2a:f4:36:75:bf:5e:38:12:
                    ec:98:ee:c9:96:40:b7:4e:e6:3e:38:8c:40:6e:94:
                    28:8e:88:9a:ce:04:12:f1:ae:41:2f:f6:63:f6:e3:
                    af:0c:67:f6:90:54:21:73:13:f1:cc:44:f1:80:5c:
                    49:12:a7:e0:3c:85:a9:55:20:2e:ec:e8:77:0f:6f:
                    d5:cb:3e:17:09:6c:c8:f3:8f:58:e6:a9:30:18:4a:
                    71:0b:e7:37:57:2c:b2:92:88:ea:86:12:a3:9e:c2:
                    f9:39:a5:9a:b5:d7:ed:ab:f0:e0:f9:45:27:91:27:
                    ed:0b:c5:67:f1:80:4f:8c:4c:08:ae:2e:6a:cc:81:
                    3c:8b:a5:22:a2:57:13:6c:3d:61:65:91:a1:ce:12:
                    15:00:a1:d4:16:a8:98:a9:97:ff:16:fd:ac:cd:91:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:ED:93:E0:04:87:B4:73:31:89:27:CC:8A:83:97:5F:8A:DC:DB:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2066c3fa-0524-3c09-bf9c-1da3d42a0acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:55a:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:07:bc:b7:ef:bd:15:b6:f0:23:1a:08:80:23:5a:3b:d3:28:
         db:75:07:56:3f:bf:23:c4:5e:e5:c7:fa:3a:1b:33:aa:c8:1f:
         47:f1:31:09:a9:8b:1d:6b:8a:1f:19:7e:89:1b:da:d3:12:f6:
         b9:e9:6c:65:12:03:14:92:93:79:52:68:37:8a:af:37:5d:d1:
         f3:2f:3c:b8:46:04:e3:9f:c3:2d:ea:a7:b5:8f:56:58:ec:b9:
         05:90:f7:34:b6:b6:58:b6:e0:d6:6a:be:3a:1d:4f:f4:8a:73:
         f4:dc:36:00:1e:cd:6a:42:97:c4:7f:66:f7:ae:52:94:9e:37:
         56:61:d4:8d:3b:2f:6e:48:de:d0:19:70:5f:e6:09:8d:2f:1b:
         02:3d:81:5e:88:91:45:8f:29:3b:fc:bc:ac:e6:0d:86:68:47:
         9e:92:2c:ca:06:b8:a3:b8:28:68:71:9c:c3:9f:dc:af:c0:30:
         7f:58:49:26:ad:e7:f1:6d:c6:ed:4f:d7:08:fd:a5:a1:fe:60:
         9e:cf:d1:66:1e:64:91:10:26:bf:f2:a4:85:c8:03:f2:43:bb:
         a1:89:76:0c:2f:dd:78:01:35:d7:8f:5b:cc:96:ba:26:84:da:
         ac:d7:93:6f:13:22:7a:51:2d:80:22:77:b0:ee:4a:ea:8d:f8:
         51:78:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:56 2025 by rpki-client