Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39a03d2a-249d-3511-9418-0bec7b354bf3.roa
File:                     39a03d2a-249d-3511-9418-0bec7b354bf3.roa (raw, json)
Hash identifier:          /MlaTW8BVuhIAhPp3yReaU2XkENj74h66iAJ0cmcy/U=
Subject key identifier:   5E:5C:64:D4:6D:6C:DA:84:B4:CB:E6:A5:B7:D2:A5:9F:DA:0B:BA:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8411DE6E5363A0351E680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39a03d2a-249d-3511-9418-0bec7b354bf3.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        2001:559:8594::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:41:1d:e6:e5:36:3a:03:51:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=f94c173d-520e-41cf-bb54-d63446b9ee84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:06:c6:80:09:d3:76:7c:ab:3a:a5:97:11:
                    7e:52:9e:5c:ca:f5:be:45:fe:26:47:46:e6:4c:e0:
                    2c:12:96:6e:4c:b3:23:2d:14:e0:8d:01:9b:8b:c4:
                    b7:01:9e:98:33:27:bd:d7:56:f0:0e:8b:af:46:00:
                    f9:7f:c3:c4:f4:be:fd:32:c7:98:5e:20:35:59:0e:
                    69:6a:22:eb:52:eb:e1:df:89:6c:ab:0a:87:fd:aa:
                    9c:ac:9a:d9:bc:2c:10:28:84:3e:72:43:a7:9b:85:
                    64:16:51:7d:b9:78:9e:bf:cf:68:3d:72:20:ab:52:
                    69:d8:24:82:da:88:99:25:65:af:3f:42:81:7c:cd:
                    64:1b:bc:07:7b:88:55:82:4a:1a:f5:86:8d:c4:d3:
                    f5:d3:9b:7a:df:12:0f:2d:b8:1b:60:e4:c2:57:e3:
                    97:b5:2f:7d:e0:74:73:e2:85:b2:2b:d4:70:b1:aa:
                    b5:83:29:12:83:ae:62:d4:ec:49:03:d6:af:cb:6b:
                    d7:36:dd:3c:2f:37:92:ba:98:bb:a2:10:cc:31:47:
                    ae:e7:97:8b:a8:c7:94:9b:4d:af:67:79:fd:52:77:
                    b3:d1:22:1a:81:ca:f9:40:09:7b:0f:43:4c:c4:cc:
                    ff:11:5c:f1:17:52:81:45:4d:c6:53:cd:72:a6:54:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5C:64:D4:6D:6C:DA:84:B4:CB:E6:A5:B7:D2:A5:9F:DA:0B:BA:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39a03d2a-249d-3511-9418-0bec7b354bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8594::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:68:d7:80:be:8d:cf:87:00:c7:1f:93:ee:d4:c4:f7:96:c3:
         29:93:47:85:f3:55:25:73:0b:e1:a4:1c:d1:28:43:53:52:e9:
         a4:96:c9:08:c0:88:51:ad:f3:75:89:97:73:9f:70:b4:9d:2f:
         72:72:66:a8:c3:2a:24:fe:3a:12:ec:12:62:68:5d:db:46:1f:
         ac:c8:f1:02:1f:09:5f:48:9d:06:55:c4:d8:38:64:f2:88:1e:
         2d:26:11:41:5c:be:ca:c3:21:34:6b:ec:f2:6a:90:9b:b8:61:
         a0:47:b9:2f:ca:ac:05:3c:bc:42:51:8e:01:1e:2e:89:3b:dc:
         6e:30:05:a5:47:06:9f:99:5b:76:68:d3:c0:7f:33:fc:ae:8e:
         4d:fc:33:09:2b:4e:70:26:80:41:6b:46:a1:cf:ba:1b:68:92:
         0b:39:94:be:dc:9e:23:b2:81:e9:71:b2:e7:a1:ea:90:1c:9c:
         98:0e:ee:e1:98:67:2e:03:17:97:d4:53:1b:05:80:78:5d:2c:
         6a:0c:21:c8:f9:04:e5:09:b9:70:2e:f9:a5:28:b4:12:43:84:
         e3:6d:1c:3c:87:72:e0:ab:60:6e:16:a6:45:6a:45:61:2c:ff:
         12:0f:9d:34:3c:b2:b7:c3:4f:7d:77:a1:5b:b4:03:d8:3a:ef:
         66:a4:47:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uEEd5uU2OgNR5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
Zjk0YzE3M2QtNTIwZS00MWNmLWJiNTQtZDYzNDQ2YjllZTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpEGxoAJ03Z8qzqllxF+Up5cyvW+Rf4mR0bm
TOAsEpZuTLMjLRTgjQGbi8S3AZ6YMye911bwDouvRgD5f8PE9L79MseYXiA1WQ5p
aiLrUuvh34lsqwqH/aqcrJrZvCwQKIQ+ckOnm4VkFlF9uXiev89oPXIgq1Jp2CSC
2oiZJWWvP0KBfM1kG7wHe4hVgkoa9YaNxNP105t63xIPLbgbYOTCV+OXtS994HRz
4oWyK9Rwsaq1gykSg65i1OxJA9avy2vXNt08LzeSupi7ohDMMUeu55eLqMeUm02v
Z3n9Unez0SIagcr5QAl7D0NMxMz/EVzxF1KBRU3GU81yplQzuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF5cZNRtbNqEtMvmpbfSpZ/aC7pbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzlhMDNkMmEtMjQ5ZC0z
NTExLTk0MTgtMGJlYzdiMzU0YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYWU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANho14C+jc+HAMcfk+7UxPeWwymTR4XzVSVzC+GkHNEoQ1NS6aSW
yQjAiFGt83WJl3OfcLSdL3JyZqjDKiT+OhLsEmJoXdtGH6zI8QIfCV9InQZVxNg4
ZPKIHi0mEUFcvsrDITRr7PJqkJu4YaBHuS/KrAU8vEJRjgEeLok73G4wBaVHBp+Z
W3Zo08B/M/yujk38MwkrTnAmgEFrRqHPuhtokgs5lL7cniOygelxsueh6pAcnJgO
7uGYZy4DF5fUUxsFgHhdLGoMIcj5BOUJuXAu+aUotBJDhONtHDyHcuCrYG4WpkVq
RWEs/xIPnTQ8srfDT313oVu0A9g672akR68=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:20:56 2025 by rpki-client