Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57cda33a-0518-39f0-9d28-2dee2b642977.roa
File:                     57cda33a-0518-39f0-9d28-2dee2b642977.roa (raw, json)
Hash identifier:          6fvpdchcUgEZ72oCXv70axbL3XLyL4EMkpTjUcv5W9A=
Subject key identifier:   E3:53:77:9E:3E:59:1D:AD:03:1B:5B:21:98:D1:CF:AD:2E:7A:5D:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7E8CF352CAC8FC828C780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57cda33a-0518-39f0-9d28-2dee2b642977.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7015
IP address blocks:        2001:559:c1ad::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:e8:cf:35:2c:ac:8f:c8:28:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=668d2097-bb56-4c07-809a-7aafab7220ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:6c:92:11:22:7a:6d:5e:fb:2a:91:c2:4c:
                    ca:16:c1:64:5d:10:2c:ba:db:a4:67:47:da:4b:6c:
                    57:c5:54:5a:e0:0d:07:a3:d0:ff:9e:32:99:ab:61:
                    c7:5a:99:e9:cc:9b:34:df:cc:68:c9:a4:c1:f4:66:
                    fd:43:08:29:78:ba:85:39:dc:0c:94:fa:d2:3c:0f:
                    14:6a:fc:7e:be:da:51:8d:df:7a:57:b1:9d:42:01:
                    d6:36:05:ac:5c:24:e6:8c:fa:d1:d6:87:49:1d:fa:
                    b0:25:c4:6f:99:98:64:6e:a6:75:13:2e:52:cf:ac:
                    5e:bb:1d:7f:32:38:e4:58:76:f4:d6:8c:05:b9:27:
                    a7:b8:c8:1e:4a:15:cc:a6:90:d2:c8:ec:fa:fd:0e:
                    3d:c2:7d:d4:fc:0a:86:11:51:11:da:f1:e4:0a:94:
                    b0:0e:56:f9:a7:94:26:21:9d:3a:2c:4c:c2:63:64:
                    93:84:fa:0f:c6:ef:a1:05:12:4a:0f:e1:c8:4c:cc:
                    f6:1e:3d:5e:c2:7a:bc:37:32:10:3b:fa:39:8f:34:
                    7f:d9:b2:a2:cd:94:0c:5c:88:da:4f:f6:f6:94:ab:
                    cf:97:70:a3:97:53:37:cd:4d:67:11:b8:1d:fe:9b:
                    e9:20:53:02:ce:d0:83:40:11:a0:37:aa:33:2a:d1:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:53:77:9E:3E:59:1D:AD:03:1B:5B:21:98:D1:CF:AD:2E:7A:5D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/57cda33a-0518-39f0-9d28-2dee2b642977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c1ad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5d:40:0d:56:a9:72:96:7f:df:6e:fa:7e:8f:42:9a:f7:00:
         2b:48:05:1b:b6:0d:03:be:3a:6b:42:bd:8a:19:24:ec:d0:96:
         22:49:38:d2:63:c3:c9:64:6b:e0:5c:45:44:7c:11:9d:21:48:
         05:69:cb:d1:3b:65:6f:7f:f8:72:b3:e2:9f:84:69:a9:ca:c9:
         ed:86:fd:93:96:f4:84:61:77:b1:d1:1d:7d:4c:5e:77:e8:3b:
         13:8e:2d:57:45:98:b5:d8:94:3e:63:a6:46:d4:dc:89:66:5f:
         1f:4b:92:d2:dd:f2:cd:40:9e:13:93:13:ac:f3:70:de:be:e2:
         c2:32:38:44:46:bf:bd:61:b9:d0:d6:18:a7:10:ae:58:d9:02:
         9e:ee:1e:dd:2e:63:90:23:25:8e:0c:b6:ea:09:73:f5:9a:9a:
         c8:a4:32:a8:73:27:f3:61:72:aa:62:fd:a5:13:f5:65:c7:5a:
         fd:6e:8f:04:7a:71:45:8a:7a:2c:0b:15:fe:40:1b:94:8f:ea:
         a3:54:d4:a1:8c:7a:d3:3c:e2:d7:fd:51:7d:a8:4b:f3:d0:82:
         20:eb:90:84:92:ec:a7:72:58:81:79:cc:ae:90:cb:78:75:bc:
         ec:26:a7:eb:01:f4:7e:90:51:cb:71:de:69:44:5f:b7:6a:2f:
         fa:5d:a8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:54:38 2025 by rpki-client