Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473079ba-6400-3a63-8ddc-404ddc4db4f3.roa
File:                     473079ba-6400-3a63-8ddc-404ddc4db4f3.roa (raw, json)
Hash identifier:          k2fH5EhlfL8ecKOzxryFreTXvWv9Yh+rDUwXD4H2UhE=
Subject key identifier:   A1:FC:27:C4:DF:2A:EB:2A:19:68:30:90:F5:38:68:CC:03:95:F0:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD49E3B667DC73AAE62680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473079ba-6400-3a63-8ddc-404ddc4db4f3.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7015
IP address blocks:        2001:559:8124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:49:e3:b6:67:dc:73:aa:e6:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=82c60743-b48c-4176-a58b-c892bbcc3627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:51:79:ff:8f:c2:ea:f8:39:de:ee:0b:c8:
                    ab:27:5f:77:4a:7c:1a:41:06:b9:cb:f2:35:b9:1c:
                    4e:4c:ec:5a:dc:82:32:77:92:d6:1d:2d:8c:09:35:
                    41:99:4f:be:ed:a6:c9:94:05:1b:9b:db:31:4f:c0:
                    86:9b:b3:ab:23:67:35:eb:35:dc:a8:82:83:7e:8f:
                    79:c0:60:44:a3:d9:7d:91:52:89:02:d9:8f:5a:ff:
                    7c:33:df:40:86:81:22:26:a1:c4:a1:0f:38:fc:da:
                    d6:41:fa:53:70:ad:f0:96:e7:b7:c8:7a:1a:f5:61:
                    c5:04:d2:33:2e:0a:2c:32:86:01:a1:6f:87:d6:98:
                    51:3d:d0:8e:b8:77:1d:95:f1:a3:b0:21:7e:b0:c8:
                    b9:73:c8:88:ff:2b:c7:35:55:1b:48:e5:4f:a2:61:
                    eb:12:d3:1e:53:ec:93:2f:d1:86:0c:6d:18:d1:ba:
                    1c:02:ee:e0:72:a0:0e:f4:87:1f:19:d6:3e:6a:fe:
                    63:51:cb:65:ee:ae:dd:05:40:a2:f0:19:a5:dd:1b:
                    35:c8:bc:cb:f8:82:4f:bb:a3:00:3d:63:6a:55:0d:
                    27:ea:0d:5e:16:cd:62:3d:1c:ea:6d:9a:ca:97:fe:
                    47:33:98:04:90:33:ed:b1:f2:25:8c:25:42:bd:54:
                    f1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FC:27:C4:DF:2A:EB:2A:19:68:30:90:F5:38:68:CC:03:95:F0:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473079ba-6400-3a63-8ddc-404ddc4db4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:18:c1:50:03:ff:51:c6:2a:ef:7f:f3:f2:23:b2:a6:f4:09:
         d8:8a:5c:5c:cd:d1:fb:07:88:d6:ee:9e:f2:7f:19:5d:ce:48:
         8c:22:d4:b9:b3:d0:1e:17:3c:a8:f8:d0:35:db:ff:b0:f5:bb:
         e8:28:eb:14:fe:56:82:03:d2:50:36:f6:fe:60:4e:69:dc:72:
         1f:a7:fa:55:8f:21:a9:e7:5e:9f:93:00:61:69:1c:69:ce:04:
         af:cd:9b:b2:ad:50:0d:5b:55:09:15:51:ac:19:3d:0d:c9:c2:
         88:28:eb:9a:4a:6e:1e:89:3d:e4:92:2d:ea:02:29:ef:17:89:
         03:03:84:67:f8:1e:17:c2:82:54:c9:58:21:3f:e2:6d:d8:ae:
         51:86:00:9b:ab:2f:95:6f:b4:43:37:14:20:9c:7b:ab:fc:d5:
         12:88:cd:2e:c4:2f:e6:97:d2:c8:d2:b4:c8:10:2b:18:0d:5a:
         48:be:35:88:8c:36:e0:21:cc:e2:09:86:13:be:8f:c2:3a:fd:
         3e:38:2c:55:df:fb:cb:eb:47:82:fe:6b:be:b5:75:79:a6:ba:
         c4:b5:af:50:d4:73:56:bb:0b:f3:e7:bc:fd:ce:23:25:ef:ff:
         7b:ff:56:c2:37:49:24:d8:0d:c2:2c:d7:08:8f:5f:f1:48:f8:
         48:7f:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:14:07 2025 by rpki-client