Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40fbf9f1-74a5-3b02-b051-db81e81db417.roa
File:                     40fbf9f1-74a5-3b02-b051-db81e81db417.roa (raw, json)
Hash identifier:          v9muoaCDRJnWv0lBcvh9TtvIa/fpTyEKkqWc3J/qVc8=
Subject key identifier:   A2:EB:2F:35:0A:DE:FE:44:1D:85:91:1B:14:50:C3:7F:AD:FA:1C:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7A104DE7707AB9B53CEF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40fbf9f1-74a5-3b02-b051-db81e81db417.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        2001:559:358::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:a1:04:de:77:07:ab:9b:53:ce:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=e4ceaa2c-ac86-45e9-abb8-2e7849a0cbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:dc:5b:db:88:7c:79:61:04:c7:cd:1b:1c:
                    53:01:95:ff:28:83:70:4d:8d:47:13:fe:58:61:45:
                    bd:c0:4a:d6:07:f4:64:09:08:82:f3:9b:c8:64:6a:
                    e4:10:52:df:e0:90:a0:98:ef:10:8b:fd:80:78:f4:
                    92:4a:0c:e1:da:20:de:d7:cd:fa:1b:11:e8:60:04:
                    d8:63:62:dc:91:14:24:ae:4d:c5:9b:e1:3c:58:9b:
                    ae:03:31:35:64:9f:f7:11:4a:27:48:ee:01:f3:a2:
                    b8:81:79:bb:e8:8e:c0:c2:ca:70:c0:29:6f:d6:e8:
                    87:d7:19:d2:10:b7:35:14:0e:7f:99:9d:6b:3e:98:
                    39:60:b1:9d:fc:f5:28:a2:41:b0:cd:1a:d7:0d:fc:
                    a7:df:ef:31:d1:cf:d5:ff:19:ed:cf:52:f0:36:b2:
                    a3:ae:21:57:59:f5:b1:14:fe:1e:29:4a:dd:0b:b8:
                    55:fc:fc:f6:7b:1e:fa:34:42:eb:dd:7c:e6:da:e2:
                    05:e9:3d:3e:0f:58:7a:5b:f9:fd:81:4c:70:0b:d6:
                    6e:d3:68:ec:67:2b:5c:3a:7f:6e:68:c3:3f:36:81:
                    70:7d:63:9e:02:22:26:89:1a:d5:56:79:6a:d6:65:
                    ac:ff:36:b3:a9:11:67:4e:11:09:fd:e6:72:29:84:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EB:2F:35:0A:DE:FE:44:1D:85:91:1B:14:50:C3:7F:AD:FA:1C:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40fbf9f1-74a5-3b02-b051-db81e81db417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:358::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:60:7a:77:2d:fa:da:9f:3c:25:09:13:8c:5e:bb:5a:df:3b:
         87:ec:e0:e8:a9:e3:1f:80:aa:e2:44:8d:05:5a:b1:bd:b6:af:
         fb:58:96:a0:76:da:d1:05:fc:60:b8:b4:cf:36:11:35:f6:48:
         77:d3:8f:00:28:28:28:8b:0a:ae:69:4e:e9:bf:e7:99:dd:4f:
         29:c2:2b:6f:a5:49:a8:b0:4e:dd:a5:66:a0:d3:05:53:1d:65:
         2e:4e:64:8d:07:bf:44:df:fd:38:f5:de:14:14:18:75:4e:b9:
         2e:2e:93:df:5c:6f:c2:e8:c0:a1:d4:bf:09:27:47:3b:c0:e6:
         66:f5:b0:dc:8c:cf:1d:9b:e5:b2:f9:f2:7f:70:44:4b:9f:de:
         30:db:b7:fc:85:ac:57:94:35:70:52:a3:a2:15:b9:11:11:42:
         26:1f:45:ae:77:5e:f8:e9:e9:f5:3f:95:94:1a:c7:71:e4:4b:
         91:70:c1:0e:c9:d4:bc:1b:f2:b7:e8:36:05:af:56:11:7c:d0:
         be:94:ec:77:9f:89:d2:be:0b:78:cb:30:00:cb:67:58:29:9e:
         21:06:e5:c7:cb:89:30:cc:c2:f1:d0:36:60:13:e4:0f:f4:77:
         ac:36:33:67:0d:81:0d:ab:1d:ae:f7:c1:dc:1d:95:43:be:c0:
         5e:48:6b:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t6EE3ncHq5tTzvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
ZTRjZWFhMmMtYWM4Ni00NWU5LWFiYjgtMmU3ODQ5YTBjYmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7zcW9uIfHlhBMfNGxxTAZX/KINwTY1HE/5Y
YUW9wErWB/RkCQiC85vIZGrkEFLf4JCgmO8Qi/2AePSSSgzh2iDe1836GxHoYATY
Y2LckRQkrk3Fm+E8WJuuAzE1ZJ/3EUonSO4B86K4gXm76I7AwspwwClv1uiH1xnS
ELc1FA5/mZ1rPpg5YLGd/PUookGwzRrXDfyn3+8x0c/V/xntz1LwNrKjriFXWfWx
FP4eKUrdC7hV/Pz2ex76NELr3Xzm2uIF6T0+D1h6W/n9gUxwC9Zu02jsZytcOn9u
aMM/NoFwfWOeAiImiRrVVnlq1mWs/zazqRFnThEJ/eZyKYTx5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKLrLzUK3v5EHYWRGxRQw3+t+hyxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBmYmY5ZjEtNzRhNS0z
YjAyLWIwNTEtZGI4MWU4MWRiNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQNY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACNgenct+tqfPCUJE4xeu1rfO4fs4Oip4x+AquJEjQVasb22r/tY
lqB22tEF/GC4tM82ETX2SHfTjwAoKCiLCq5pTum/55ndTynCK2+lSaiwTt2lZqDT
BVMdZS5OZI0Hv0Tf/Tj13hQUGHVOuS4uk99cb8LowKHUvwknRzvA5mb1sNyMzx2b
5bL58n9wREuf3jDbt/yFrFeUNXBSo6IVuRERQiYfRa53Xvjp6fU/lZQax3HkS5Fw
wQ7J1Lwb8rfoNgWvVhF80L6U7HefidK+C3jLMADLZ1gpniEG5cfLiTDMwvHQNmAT
5A/0d6w2M2cNgQ2rHa73wdwdlUO+wF5IaxQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:53:29 2025 by rpki-client