Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/673a0fb2-c20e-3633-86f4-0bc6bce82c6f.roa
File:                     673a0fb2-c20e-3633-86f4-0bc6bce82c6f.roa (raw, json)
Hash identifier:          qrE63X388MtS9POWI8DZYP4+QqQgl0ms5eh80o6r2aU=
Subject key identifier:   5C:3B:E2:65:BC:82:A8:09:8A:EB:43:0B:2C:78:EC:FE:BC:F7:8E:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B21CC354180967E0FBFC04D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/673a0fb2-c20e-3633-86f4-0bc6bce82c6f.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     7015
IP address blocks:        2001:559:e027::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:35:41:80:96:7e:0f:bf:c0:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=708f9863-2f67-4ba4-bd8a-0ee9af855ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:01:00:05:0e:07:1a:ed:d0:4e:5b:f1:d7:c8:
                    c4:a9:d6:90:5f:cb:75:7d:0f:2a:ba:19:4b:dd:32:
                    be:d7:3d:37:0c:eb:3c:81:98:6a:69:0e:ab:f4:b8:
                    a6:d6:9d:91:f9:40:d8:79:fe:26:72:69:8e:9b:64:
                    3f:58:d9:07:a3:82:51:1e:c7:64:c0:d4:30:c1:e3:
                    33:f4:be:87:ba:dc:86:1b:67:25:0f:b9:d5:c4:ff:
                    2d:32:9b:bc:91:36:36:e7:b9:0c:6e:1f:de:e8:d4:
                    ba:4f:eb:6f:ed:1d:ed:22:c1:2e:5c:05:16:55:c5:
                    eb:98:33:3d:d7:4f:f3:03:f4:05:ac:ea:4e:1b:e5:
                    98:6b:67:d6:f0:e0:72:f4:67:70:b3:7d:06:ac:e3:
                    1a:6f:16:f8:f8:d3:29:12:7a:db:0d:e1:5b:9d:5f:
                    22:60:db:88:06:ed:b1:a0:dc:28:bf:9b:33:1a:25:
                    55:79:0f:99:9d:71:db:a1:b1:50:bf:fd:f0:3c:39:
                    e9:08:a2:69:57:0b:a1:86:4c:2c:d3:c1:bf:29:45:
                    a7:3c:9b:4f:f8:87:15:e4:bd:0e:1b:db:51:88:47:
                    48:87:4b:e0:b2:8f:7b:12:47:93:69:3e:d2:45:51:
                    f6:ba:a7:2d:25:fe:2d:44:64:bc:41:4c:1d:cd:a7:
                    88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3B:E2:65:BC:82:A8:09:8A:EB:43:0B:2C:78:EC:FE:BC:F7:8E:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/673a0fb2-c20e-3633-86f4-0bc6bce82c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e027::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:0c:d3:60:ca:81:c0:27:90:33:9d:8a:8f:c0:e8:85:d3:c3:
         40:f3:1a:25:3a:ad:5a:a2:95:bb:02:a1:ac:00:9b:b3:e0:76:
         99:38:ba:dd:79:2f:a8:cb:8e:5d:73:e9:58:e3:ee:d3:42:e1:
         ff:87:cd:3b:b2:e8:27:d4:53:27:03:c8:bf:ed:4a:70:90:df:
         ff:da:26:c5:56:23:be:a6:a9:ce:2c:0a:12:64:91:2e:84:60:
         29:c9:5d:41:74:3b:93:de:d4:79:f8:28:c0:ee:f6:67:50:41:
         43:41:7e:5e:d4:04:b4:62:e9:10:cb:2f:24:35:73:15:bd:da:
         f5:6e:e9:fa:35:33:29:86:33:d3:05:2b:28:39:6f:8a:f3:0a:
         98:72:9f:3c:fa:42:7f:a3:bd:32:47:a6:5e:f6:a2:19:66:70:
         7a:90:d5:20:c1:6c:f1:90:f7:56:71:e4:73:ee:95:a2:38:9d:
         15:02:6d:c2:db:43:0d:6a:b6:b2:cc:f9:8f:18:b7:e4:27:a5:
         3c:a0:91:78:a3:2a:5a:44:ea:77:bd:90:a6:44:37:30:69:af:
         31:55:61:53:96:31:00:8a:b3:ac:cb:c9:7d:88:b3:f4:0e:a4:
         c7:51:83:e1:3b:dd:eb:89:b6:57:7b:e1:e3:7c:14:ea:82:9f:
         fb:97:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:51 2025 by rpki-client