Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32cbec92-0a35-37d3-bfb8-f9a71fccfd6d.roa
File:                     32cbec92-0a35-37d3-bfb8-f9a71fccfd6d.roa (raw, json)
Hash identifier:          wdc4v8/BU19irxU42KX35aIG/AO05J22mifw6ZFt9RA=
Subject key identifier:   3E:73:46:5F:18:33:51:08:97:57:24:25:D5:1A:97:0F:3B:5A:89:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB7ED5732917611AC97180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32cbec92-0a35-37d3-bfb8-f9a71fccfd6d.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7016
IP address blocks:        2001:559:2af::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:7e:d5:73:29:17:61:1a:c9:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=7375aa46-1e8f-4bcc-997c-b2228f967f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:58:f2:75:f3:ca:43:39:45:ad:3b:0b:13:
                    e7:d5:e9:46:7a:6b:3a:0c:ab:d8:20:72:51:44:ae:
                    e0:eb:84:65:42:1c:69:e0:10:54:a2:8b:a7:d5:3c:
                    49:d5:f6:1b:fb:14:57:b8:52:97:c1:9a:a5:ea:89:
                    0f:7e:2d:7d:09:c1:59:7d:c5:66:55:d5:bc:04:19:
                    ed:77:7a:e5:0e:21:1b:53:e4:12:9c:73:fb:6b:84:
                    24:8a:af:3a:c7:31:3c:e9:97:04:e3:11:17:f6:98:
                    f0:48:ca:4b:43:98:fd:11:2f:0b:25:72:23:28:ce:
                    d5:76:ea:ed:0b:a9:93:7a:00:af:70:c4:ae:86:83:
                    d5:48:15:bf:e7:d0:21:35:db:3a:ec:23:01:f1:0e:
                    b0:c0:99:e9:94:80:4c:b3:d6:ac:56:52:96:fd:9d:
                    26:92:bd:a1:f4:42:22:c8:df:25:62:d8:92:1c:73:
                    be:77:60:ff:12:0d:71:55:6f:5d:05:97:dc:8f:66:
                    5c:86:93:d9:76:4d:58:8d:c0:63:ff:69:6e:5a:9f:
                    5b:0f:78:01:80:8a:3a:18:23:8d:d3:e6:26:00:96:
                    49:7b:39:cd:03:61:f0:b2:a4:06:f0:26:47:47:d4:
                    ab:f0:75:d9:1f:3d:1b:e4:b7:fa:ff:2d:5a:3a:6f:
                    cc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:73:46:5F:18:33:51:08:97:57:24:25:D5:1A:97:0F:3B:5A:89:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32cbec92-0a35-37d3-bfb8-f9a71fccfd6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:2af::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:cb:e0:fc:c9:dc:40:3e:37:bc:92:18:6e:8e:d5:53:58:fc:
         b2:48:76:18:68:a4:62:34:f1:00:02:fe:bd:3a:3e:17:cf:49:
         5e:a1:e1:38:b6:8c:15:a3:4f:96:37:f9:cf:26:c5:80:5e:34:
         35:ee:7d:79:28:ed:c2:c7:76:a3:48:84:f8:c0:67:6a:44:cf:
         95:e1:3b:d8:9e:ed:5f:6d:bd:a6:04:77:80:3a:3a:13:39:42:
         77:5c:6f:c4:57:6f:a8:1a:12:3c:0e:dc:ff:e6:36:ad:50:c6:
         f1:ad:ca:41:c4:6b:c3:bc:51:df:e6:51:f2:b1:38:0d:ff:e5:
         78:c7:4d:05:23:ee:3d:84:11:db:68:f4:79:7a:84:00:1e:d0:
         97:63:c3:c0:b9:22:d2:b8:03:0d:c2:55:61:7d:29:04:f1:b5:
         3a:23:6a:c5:b5:19:97:07:9d:4a:2d:4b:7c:88:ce:f8:fe:d6:
         94:45:9d:51:1e:c1:9e:8e:10:5d:30:c5:5a:f1:ac:7d:a3:46:
         31:e0:6f:bb:e1:d3:d4:49:db:77:0f:0e:fd:df:2b:8c:59:79:
         f1:b4:6e:b4:b6:65:87:fa:b5:1f:05:bb:70:94:c6:71:9f:44:
         25:fd:ba:3a:a2:13:6e:ca:39:09:3e:6e:d5:73:a6:a8:0c:a5:
         a5:12:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:32:08 2025 by rpki-client