Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/555fb477-e151-348b-8340-849a45726cfb.roa
File:                     555fb477-e151-348b-8340-849a45726cfb.roa (raw, json)
Hash identifier:          3yDXvGCUxbpOgbDyoI3Qi6CGD4z3Vn7v/T5TFK7J5Qc=
Subject key identifier:   EB:BF:A2:69:20:E0:76:6A:3F:6A:77:67:F4:7A:39:2F:77:D0:C5:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB83FF44BFAB76999641A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/555fb477-e151-348b-8340-849a45726cfb.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        2001:559:845b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:3f:f4:4b:fa:b7:69:99:64:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=daa1d82c-405d-46b0-a6f2-b714df51d327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7a:ad:40:37:75:49:dc:a2:0c:29:c2:53:fb:
                    c1:45:dc:21:e0:fb:32:e7:a5:b1:ff:45:05:66:14:
                    3c:25:c1:98:e4:cf:ad:b1:7e:ef:be:3d:83:88:d2:
                    3f:56:2b:f9:07:69:df:21:34:8e:30:b6:72:ea:1f:
                    ec:97:b1:e7:45:1c:16:fd:75:ca:a4:71:df:6a:28:
                    de:ac:78:c5:22:9b:e8:7a:ba:91:e5:13:a2:70:a7:
                    8b:43:78:7b:d1:2c:8c:8d:93:a8:e2:ce:e2:dc:9c:
                    84:5e:67:b1:55:43:b9:0d:cd:ba:9f:fc:c3:49:08:
                    13:9c:83:24:a9:2f:0b:0d:8b:35:8a:3b:11:3d:7b:
                    8d:92:bf:d7:d1:e8:83:cc:73:9a:db:fb:27:02:ee:
                    c9:64:29:50:2f:d3:5c:2b:7e:bf:02:2b:75:c1:87:
                    5a:77:f8:e0:e3:4e:8a:cd:87:42:ff:5a:71:eb:4f:
                    c3:fa:8f:24:12:2c:81:2f:6f:65:a2:ed:1a:ac:39:
                    63:27:74:20:a5:ef:8f:74:2d:a0:9c:5a:44:06:b3:
                    db:1f:ee:ce:14:f4:fd:30:d7:ee:3c:fc:08:17:2c:
                    5f:08:09:90:f9:90:b8:38:09:a5:8d:e2:a1:e3:08:
                    2f:15:d5:ff:a0:f7:f1:70:be:44:67:9d:e1:16:d8:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BF:A2:69:20:E0:76:6A:3F:6A:77:67:F4:7A:39:2F:77:D0:C5:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/555fb477-e151-348b-8340-849a45726cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:845b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:94:8d:7d:38:21:4b:e5:b0:bb:bf:0f:d8:77:b1:03:5a:95:
         9a:7f:17:cb:68:59:51:55:74:c6:fd:6e:74:05:fd:05:17:c3:
         a4:42:9a:13:67:a7:8e:49:00:37:91:4f:24:03:a1:7e:b1:ad:
         d3:f0:40:77:7f:c6:00:42:bd:76:7c:66:7e:61:85:3c:aa:d4:
         f3:e9:fc:29:79:ea:e4:28:b7:11:3e:4b:64:b0:05:6d:3c:6c:
         ff:e0:af:45:95:d0:c8:a8:24:47:db:29:cc:3d:ae:e9:7a:b4:
         f7:2b:cb:02:a5:ac:b6:53:02:32:da:ca:83:3d:67:61:5a:0b:
         cb:dd:02:0c:62:4f:ef:8d:a5:2f:fc:22:f5:22:27:88:02:46:
         04:c3:09:5c:d8:b1:e9:07:0a:8c:fb:5f:e6:51:19:07:80:af:
         c6:19:c9:75:96:da:34:b7:fc:90:18:0e:b9:a3:93:94:a5:65:
         b0:15:95:c5:b1:88:4a:c4:db:82:63:87:94:af:de:48:8d:5f:
         b2:d4:c0:18:31:68:d4:1c:d7:89:e5:66:cc:e7:1a:fc:86:a5:
         e3:54:11:9b:bc:8f:88:ae:e5:5f:db:5c:a0:ec:a3:4c:43:82:
         67:fb:1f:15:dc:79:26:96:c1:19:d7:d6:60:4c:31:f1:5d:d4:
         c8:08:1c:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uD/0S/q3aZlkGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
ZGFhMWQ4MmMtNDA1ZC00NmIwLWE2ZjItYjcxNGRmNTFkMzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXqtQDd1SdyiDCnCU/vBRdwh4Psy56Wx/0UF
ZhQ8JcGY5M+tsX7vvj2DiNI/Viv5B2nfITSOMLZy6h/sl7HnRRwW/XXKpHHfaije
rHjFIpvoerqR5ROicKeLQ3h70SyMjZOo4s7i3JyEXmexVUO5Dc26n/zDSQgTnIMk
qS8LDYs1ijsRPXuNkr/X0eiDzHOa2/snAu7JZClQL9NcK36/Ait1wYdad/jg406K
zYdC/1px60/D+o8kEiyBL29lou0arDljJ3Qgpe+PdC2gnFpEBrPbH+7OFPT9MNfu
PPwIFyxfCAmQ+ZC4OAmljeKh4wgvFdX/oPfxcL5EZ53hFtjOFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOu/omkg4HZqP2p3Z/R6OS930MUUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTU1ZmI0NzctZTE1MS0z
NDhiLTgzNDAtODQ5YTQ1NzI2Y2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYRb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAISUjX04IUvlsLu/D9h3sQNalZp/F8toWVFVdMb9bnQF/QUXw6RC
mhNnp45JADeRTyQDoX6xrdPwQHd/xgBCvXZ8Zn5hhTyq1PPp/Cl56uQotxE+S2Sw
BW08bP/gr0WV0MioJEfbKcw9rul6tPcrywKlrLZTAjLayoM9Z2FaC8vdAgxiT++N
pS/8IvUiJ4gCRgTDCVzYsekHCoz7X+ZRGQeAr8YZyXWW2jS3/JAYDrmjk5SlZbAV
lcWxiErE24Jjh5Sv3kiNX7LUwBgxaNQc14nlZsznGvyGpeNUEZu8j4iu5V/bXKDs
o0xDgmf7HxXceSaWwRnX1mBMMfFd1MgIHBU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:49 2025 by rpki-client