Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33ccb609-369f-3f71-ba0a-3d693c47f827.roa
File:                     33ccb609-369f-3f71-ba0a-3d693c47f827.roa (raw, json)
Hash identifier:          uM0EruaHBTKEVjkhjQSJhdb4Bb5a4Hj3P7uiVTMMI84=
Subject key identifier:   79:6A:94:AB:C0:09:BB:6F:5C:06:90:73:38:29:51:F3:E2:D0:A1:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DBA0A9FE940898107B0C5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33ccb609-369f-3f71-ba0a-3d693c47f827.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        2001:559:859c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:0a:9f:e9:40:89:81:07:b0:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=ec2f3efd-dbd1-4414-8c8d-649e273f5b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f9:d1:91:a9:09:9a:70:29:58:bc:14:c7:6d:
                    d6:73:c6:0c:87:4c:2d:21:f9:25:19:12:2b:b7:b4:
                    3d:34:cc:6e:f7:04:2c:7f:b0:48:c9:4d:62:3e:65:
                    84:f0:17:68:62:b7:32:a5:1f:91:fb:ba:4f:55:4d:
                    92:59:9d:4f:d6:4a:e4:a5:a6:64:51:23:69:c7:a5:
                    eb:ae:51:11:fb:e0:d2:da:0e:dd:75:82:1a:b7:6a:
                    e4:55:19:3d:9c:6f:e4:0d:63:0a:d6:e3:a2:58:f2:
                    c9:e0:ad:bc:61:52:ac:2c:36:eb:dc:3f:a6:8b:20:
                    fa:59:d1:92:cd:c1:62:67:30:18:00:c2:61:12:0c:
                    df:23:b4:b5:7f:d5:29:24:35:58:d9:2f:9d:92:01:
                    86:e7:48:d3:fb:87:05:7c:d8:73:41:84:ad:c0:e0:
                    88:d5:9b:d7:70:b9:03:13:ad:24:f2:97:8e:f1:5e:
                    60:4e:90:db:23:3a:1b:85:c1:23:74:ab:4e:17:66:
                    de:fa:68:60:de:7a:ac:43:f0:6e:28:58:3f:0b:7a:
                    f6:a7:df:9a:9c:0b:d7:33:23:81:a1:88:6e:e4:9e:
                    b8:a8:b1:9d:2a:93:9f:c9:a1:8e:30:18:66:bf:30:
                    b1:21:9f:05:46:ef:3f:3a:2f:ae:80:4e:63:f6:8d:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:94:AB:C0:09:BB:6F:5C:06:90:73:38:29:51:F3:E2:D0:A1:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33ccb609-369f-3f71-ba0a-3d693c47f827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:859c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:dc:9a:29:00:e9:ce:cb:3c:68:62:66:24:e9:5c:57:88:00:
         3a:4c:6c:a8:21:0a:56:b7:99:a5:66:9f:da:e7:7a:1a:0c:2d:
         c6:25:2e:a9:72:4d:e3:87:f2:cd:a3:eb:1f:3c:e5:14:e4:24:
         bd:ba:c1:6a:80:89:e9:45:73:dd:e7:c8:b8:5e:13:55:ee:8d:
         16:21:91:64:93:64:02:0d:d6:3d:25:fd:c5:c6:4f:5e:e4:18:
         c1:9b:4a:d0:2b:3b:42:02:c6:bb:bd:74:42:ed:6c:d6:11:a3:
         8e:e0:9b:c5:43:09:9f:5b:8c:4d:3a:55:d5:75:fc:b9:5e:85:
         fd:51:d2:32:8a:2a:5b:84:27:3d:f6:59:29:64:99:ad:10:27:
         cc:d3:22:fc:73:e5:bd:ae:55:de:ab:3f:0d:85:ab:15:a9:ba:
         41:73:60:14:41:02:c7:23:89:96:4e:95:58:5b:aa:aa:0d:06:
         ce:b1:c7:6b:d8:1d:db:b4:7a:74:c7:62:b5:77:4c:6c:58:4c:
         a0:f7:a3:66:7f:a8:71:00:91:3b:66:91:4e:c7:a1:d0:6b:95:
         db:b0:b1:8e:56:8b:a3:8a:aa:77:97:27:a1:d0:db:cd:38:ed:
         f6:87:cb:78:67:3f:62:37:d6:d8:42:1e:87:39:bd:38:0c:ef:
         34:a4:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:11:08 2025 by rpki-client