Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223ad5e2-ae57-383f-ae2a-45cecc737e7d.roa
File:                     223ad5e2-ae57-383f-ae2a-45cecc737e7d.roa (raw, json)
Hash identifier:          hfoWTUPsn6oLkXEGMhMDok2GBKCgrWonUTe7YmiuS3A=
Subject key identifier:   83:B8:D0:87:CA:43:89:98:BE:9F:2E:3A:FF:9B:71:3C:37:60:1A:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCE0C2992C00A914874F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223ad5e2-ae57-383f-ae2a-45cecc737e7d.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7016
IP address blocks:        2001:559:328::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:e0:c2:99:2c:00:a9:14:87:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=5b8dbb6b-b274-4fc0-bbfe-ec4dd074f130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3b:11:49:70:8a:cf:7a:47:0f:35:9c:e9:00:
                    24:05:00:d4:8f:44:36:dc:21:1e:38:f2:b5:8e:ba:
                    d9:c8:f9:f5:65:49:53:c3:81:e3:fb:82:a2:53:1a:
                    97:1f:39:04:12:6a:de:f9:02:c0:f4:38:d8:68:8f:
                    1c:4b:7a:18:ee:ba:29:b0:71:86:21:bc:69:31:a7:
                    02:2d:51:8d:86:42:96:38:b3:98:42:fb:85:9c:2b:
                    2b:d7:cf:62:9e:ae:43:fa:03:07:d1:22:86:cf:53:
                    cc:c7:b4:52:e0:46:4e:e6:76:df:b3:72:87:c7:7a:
                    0f:cc:ec:f1:f3:0c:f7:b5:92:d1:56:49:cd:b5:78:
                    88:03:58:be:de:4b:8e:ba:72:0d:8e:11:58:ba:ca:
                    e5:e2:df:31:2e:d3:fd:95:ca:4a:e3:fa:df:15:4e:
                    9a:c8:21:14:77:87:63:ab:27:b6:2f:6d:66:06:8c:
                    7f:8e:e3:1b:3f:da:ef:b8:70:c8:ae:31:ed:83:9d:
                    b1:5e:ae:4d:72:4d:f7:6f:4e:33:99:a0:dc:03:af:
                    2a:05:4f:af:98:52:a6:cc:02:d3:f2:dd:75:3e:12:
                    28:01:f4:bc:24:c4:21:82:db:62:eb:2b:64:fc:21:
                    9d:47:e2:ff:48:24:07:b2:09:90:14:06:06:aa:0e:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B8:D0:87:CA:43:89:98:BE:9F:2E:3A:FF:9B:71:3C:37:60:1A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223ad5e2-ae57-383f-ae2a-45cecc737e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:328::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:66:0f:83:d8:d1:ca:34:cc:5a:4f:24:39:88:e6:5c:57:91:
         85:63:f5:63:91:3f:48:f0:5d:3b:9f:3a:e5:9f:32:eb:18:70:
         10:e3:38:d2:d1:0e:bf:66:77:5d:37:49:c3:42:1e:8b:33:d6:
         02:18:26:72:4d:55:45:3c:fb:80:64:6b:ab:7c:e4:f6:c5:38:
         49:b0:11:8d:78:17:63:fd:dd:52:a5:3e:db:6d:4a:8e:bf:e3:
         82:33:dc:46:ae:a9:6c:95:84:71:78:ed:2d:5a:e5:b3:bf:84:
         16:2b:38:bf:15:92:0e:08:28:fa:65:2d:e5:af:3e:3b:66:d4:
         6b:a2:42:76:3b:fe:0a:e4:c4:62:59:21:1f:1d:a9:57:fe:1a:
         9b:02:af:cd:6b:32:5a:2c:f8:2f:29:8e:1c:b5:ed:c2:37:79:
         56:d7:23:97:e8:86:8e:21:fe:e5:4d:cf:68:c6:c7:9d:8e:05:
         2f:c0:39:16:9d:22:a1:82:1c:80:12:25:c8:5c:dc:80:ad:10:
         87:0e:52:19:f1:03:4c:08:8f:be:0b:ba:f5:95:c0:36:9e:b5:
         50:c4:1b:7d:53:6f:55:bf:a7:df:f6:d6:61:34:98:91:ac:4c:
         4f:95:54:6d:72:f8:6b:20:fa:99:f2:0e:57:6d:58:08:00:ae:
         97:1c:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:11:10 2025 by rpki-client