Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6136898c-c985-307b-896f-1587482da0fd.roa
File:                     6136898c-c985-307b-896f-1587482da0fd.roa (raw, json)
Hash identifier:          DhTULLaK/H7e1JQom+Sj6XVeAN7vOvppQaUI2N56GkA=
Subject key identifier:   79:88:3D:9F:4E:92:F9:72:77:6A:AE:90:A5:5D:57:B9:15:29:FA:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCE3B6D32433E75BC7EB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6136898c-c985-307b-896f-1587482da0fd.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7016
IP address blocks:        2001:559:8411::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:e3:b6:d3:24:33:e7:5b:c7:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=ed298252-5f89-4648-8d7e-24f2908ad55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:2a:10:c1:ac:e0:16:d1:cd:74:4a:57:a3:
                    93:29:9f:81:78:4d:55:5c:7c:5d:b5:b2:23:60:49:
                    aa:cd:ff:7d:58:08:37:1b:98:e0:6f:0b:cf:27:cd:
                    dc:c7:4d:1b:fc:20:27:17:8e:d8:c5:8c:5f:81:f4:
                    5b:88:53:63:b1:29:e8:cb:56:9e:07:9f:36:13:6c:
                    41:82:e5:30:02:63:bf:c7:35:fd:54:7c:92:51:7c:
                    96:64:5c:e2:d9:06:33:e2:95:38:2c:e5:99:e8:5f:
                    13:b6:47:38:35:0e:b9:f6:eb:e5:b6:01:b0:72:42:
                    e2:9d:f5:e5:7a:54:3b:7c:d9:17:41:55:9e:3b:b5:
                    ff:44:60:ac:ee:56:6c:6d:92:d4:82:c2:85:fe:ef:
                    75:a5:e0:c8:4a:de:bc:62:e5:7b:8e:90:44:85:a8:
                    c3:90:4f:95:ed:77:03:57:ba:78:7b:2d:7a:7e:83:
                    19:78:38:8c:69:45:d7:61:5c:97:d4:df:20:e3:58:
                    a8:c6:3a:42:71:79:03:55:6c:81:89:71:a4:55:57:
                    61:5a:25:a0:ec:08:42:0b:83:ac:3e:e9:a9:de:45:
                    5e:c1:19:f9:70:44:d3:8c:b8:d9:1f:49:1c:30:ef:
                    1f:aa:00:54:04:39:f4:fb:52:b0:dc:2c:25:15:d9:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:88:3D:9F:4E:92:F9:72:77:6A:AE:90:A5:5D:57:B9:15:29:FA:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6136898c-c985-307b-896f-1587482da0fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8411::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:f8:8d:55:ea:ec:73:5e:ae:27:d0:4a:2b:1f:cc:78:46:18:
         57:2c:09:88:d7:a0:c4:d3:17:90:08:37:76:be:3f:72:54:78:
         c6:eb:42:9e:85:db:35:77:d4:d2:d6:b0:26:22:3e:3e:28:bd:
         12:1d:35:8d:9c:cb:ab:1d:48:5a:94:82:15:ad:ca:5c:7f:22:
         0a:72:c1:33:cb:d8:78:6c:00:2f:70:ff:04:88:26:17:a1:88:
         5f:78:44:e2:88:c2:de:6c:f6:be:c5:1f:9b:62:21:4c:fe:94:
         d3:ca:69:79:b6:68:a4:c9:93:18:d1:58:95:59:4d:ba:e5:f4:
         a7:5e:75:2c:4f:58:22:4d:20:88:8d:19:4c:70:e9:3a:00:26:
         66:d4:2e:7e:9b:5b:7d:d2:c6:03:23:d7:77:4c:da:29:52:80:
         7f:c1:f0:5c:30:07:af:59:02:53:f3:9c:6d:a5:4b:31:62:f4:
         67:0a:26:7c:39:82:87:32:59:74:fe:8a:75:6d:dc:74:0e:3f:
         52:08:40:0c:ce:80:78:6e:84:f2:c9:83:1e:d3:2e:36:66:02:
         6a:55:fa:93:3b:44:ac:01:eb:8b:ad:4f:21:20:cb:ad:b1:e0:
         1c:b7:77:37:58:9c:74:91:e3:56:33:62:24:04:da:1d:0d:4c:
         d4:d2:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:35:00 2025 by rpki-client