Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35c47736-b4d5-3526-8060-67d5c2aa6a03.roa
File:                     35c47736-b4d5-3526-8060-67d5c2aa6a03.roa (raw, json)
Hash identifier:          uWKHpLUw31A4YwWo18rkE4W+v9bAS7LiULf3u1fB2EU=
Subject key identifier:   B4:B0:7C:9F:A0:5B:AF:7D:99:B7:6A:C1:65:E9:4C:48:E9:04:BD:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDCD351069ADB6805E4880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35c47736-b4d5-3526-8060-67d5c2aa6a03.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        2001:559:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:cd:35:10:69:ad:b6:80:5e:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=d4f5dfb9-512b-4cf0-a72c-befe73788ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:07:41:b6:d6:7f:fc:6d:73:95:4e:44:9d:
                    82:9a:28:28:34:05:d2:e5:0e:eb:de:7e:ac:41:d2:
                    60:a7:e5:bd:58:ed:01:6f:5c:e6:51:73:2f:dc:89:
                    01:a8:d3:1a:67:3c:93:b5:a2:3f:b6:ac:e0:63:cf:
                    9d:64:fa:45:47:24:30:d5:6a:c7:fc:50:8d:44:8e:
                    82:9b:88:1e:b3:d2:57:c8:f3:3d:03:e2:0a:e7:0d:
                    da:b9:01:d5:27:52:10:16:cb:db:a7:a4:fa:6b:eb:
                    5f:57:3f:b9:b0:88:72:70:76:e0:1c:ac:b8:cb:35:
                    d0:d3:85:5c:7d:13:8e:b3:6c:d7:e5:47:f4:a0:e2:
                    73:5f:d5:8c:5c:79:09:33:d8:6a:9a:ee:e0:7a:34:
                    c0:d3:27:19:21:99:5e:6c:d4:aa:fb:19:fa:1b:14:
                    9d:0b:ff:c6:2f:76:bc:c7:6b:7c:91:0a:31:7e:eb:
                    70:3a:28:52:6f:78:3b:4b:f1:d5:91:df:83:7c:4b:
                    9d:7e:ad:5e:fe:b8:22:10:db:a9:2f:73:46:87:f7:
                    2a:2a:4b:44:1d:a6:bb:38:bf:f8:af:ad:f0:e6:80:
                    9e:b0:14:c3:56:5d:28:f3:72:09:27:51:48:a6:0c:
                    4e:89:73:23:63:a5:97:e6:db:b2:c5:1f:e7:c2:fc:
                    00:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B0:7C:9F:A0:5B:AF:7D:99:B7:6A:C1:65:E9:4C:48:E9:04:BD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35c47736-b4d5-3526-8060-67d5c2aa6a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:59:9f:cc:7e:f6:c7:74:76:49:29:b3:49:07:d4:a3:90:36:
         77:a1:5f:91:67:05:68:00:dc:4e:36:7d:3f:52:fd:11:74:b4:
         a2:b2:76:81:80:3c:ca:8a:42:f2:c0:38:76:74:8e:8a:84:b8:
         92:ed:6f:a0:06:f3:61:8e:65:db:c5:f0:85:4f:42:ca:9c:12:
         e2:74:6b:55:34:78:c7:1e:7c:be:06:fe:51:20:79:e5:7e:21:
         66:66:7b:ad:27:14:e5:ac:90:c8:32:16:8d:8e:e5:58:92:d9:
         53:63:39:83:8c:2c:25:0a:37:8b:85:27:56:4f:bc:d6:df:c7:
         10:d8:33:b3:30:a5:e9:b2:1e:59:5f:dd:46:09:be:86:0b:59:
         3a:fd:7e:5b:7a:4c:39:35:9d:ce:2d:35:43:a4:f7:dd:ef:24:
         56:89:6d:93:36:9e:f8:89:e6:0f:ec:ea:78:30:a2:75:95:0e:
         46:27:bb:a6:3c:b2:cb:da:15:05:24:d0:f8:14:d4:9d:a2:27:
         fb:d2:c2:6d:9f:1d:d0:08:e7:0b:aa:b7:0d:03:1f:90:44:70:
         4d:89:f9:6e:24:e2:4f:b3:de:ba:44:1a:d6:ab:7c:07:1d:ae:
         24:92:07:0b:f9:18:36:63:89:9c:b2:6b:2f:23:02:61:c2:d5:
         49:32:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:49:10 2025 by rpki-client