Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5931a24f-a975-3d1b-9db5-be3f60eb0742.roa
File:                     5931a24f-a975-3d1b-9db5-be3f60eb0742.roa (raw, json)
Hash identifier:          EdJ1MqVjZSJifF+FXSyc52/KaPxakJrYHQAaaANeKkg=
Subject key identifier:   71:9F:39:CF:4B:C2:BC:94:89:8B:68:D0:B3:71:20:D0:B2:A1:06:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB846B622CA0F763F20E380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5931a24f-a975-3d1b-9db5-be3f60eb0742.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        2001:559:c2ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:46:b6:22:ca:0f:76:3f:20:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=4a67edc9-097d-40bd-a863-73782ab556bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:70:da:a2:70:8d:60:5c:95:41:30:59:39:
                    e7:86:d6:c5:5e:be:ef:ae:8b:b3:98:07:85:b4:61:
                    18:d8:94:16:4e:55:0e:bb:d7:00:70:f5:05:ac:70:
                    9b:b3:0e:05:06:cb:e9:e2:5e:47:33:50:c8:69:be:
                    27:27:07:06:f8:9d:6a:b9:59:a3:47:ce:bd:12:e1:
                    76:df:36:03:45:fe:08:1e:36:da:3d:d4:17:e5:77:
                    0e:c0:4b:ac:e7:4f:fa:bc:fb:a7:f8:3c:a7:18:3a:
                    de:96:b6:ef:f4:52:71:ff:82:18:57:4c:1c:05:7c:
                    64:35:75:f1:4e:d1:bb:b8:f7:b5:c0:93:18:0f:0b:
                    02:7f:99:8d:74:0d:dc:25:2d:cd:18:af:69:5a:40:
                    2c:04:f6:cb:d7:9c:6d:ad:e3:6c:9c:34:75:01:af:
                    c2:6f:8e:2f:0f:2e:0e:f3:28:16:fa:df:40:ac:3b:
                    98:0e:88:62:ef:f1:75:a8:80:ad:fd:89:2e:2d:5d:
                    b3:7c:d3:13:0c:34:3e:ef:5c:fe:b0:61:25:18:ae:
                    30:cc:d6:66:a0:bf:09:4c:f4:f2:f2:a5:61:66:38:
                    35:17:49:cc:19:37:5d:8f:4a:f0:c0:37:de:29:97:
                    32:79:3c:19:6c:c2:6f:5f:9a:d2:5a:ee:2f:6d:6c:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9F:39:CF:4B:C2:BC:94:89:8B:68:D0:B3:71:20:D0:B2:A1:06:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5931a24f-a975-3d1b-9db5-be3f60eb0742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c2ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:65:92:6c:21:d8:76:ff:c9:a6:b7:51:fd:52:66:8f:f3:
         6b:c4:39:b7:e9:b8:19:e7:42:c3:bf:92:90:a5:ad:71:65:a0:
         b1:a9:ba:32:ab:b4:6a:6d:8a:ac:8e:93:0b:da:07:35:b8:07:
         21:12:f8:67:a0:c9:8b:3d:95:34:09:92:b7:50:2a:66:8c:ae:
         b5:8c:67:24:f1:1f:c9:74:74:4a:84:54:48:14:f8:9f:3d:5b:
         10:ca:ae:5e:7e:6a:29:14:8d:84:15:e8:9b:f5:b1:49:92:de:
         ac:76:49:f3:6f:e9:1b:95:a8:73:ee:32:d6:ca:56:6c:74:c9:
         09:aa:ed:85:30:7d:b9:3c:39:63:a0:dd:ac:da:3d:74:57:25:
         4c:ae:25:35:fb:9b:6b:8e:ba:50:ea:17:fe:d1:7e:c7:8b:92:
         08:30:24:4a:22:2c:32:03:4b:3a:ff:ad:fb:ef:27:0d:59:6d:
         f7:e3:95:19:3a:f6:f5:fc:9f:c1:3e:38:ea:0e:56:da:74:da:
         2e:5c:83:9a:be:ed:4e:6a:5d:28:00:46:35:72:2f:2a:d8:93:
         10:eb:f5:5b:58:05:06:33:e1:89:c9:f6:59:2d:6f:32:b8:0b:
         33:ca:1b:a7:8c:b2:e8:88:b9:42:97:0d:5f:eb:39:7a:0a:54:
         41:64:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:34:17 2025 by rpki-client