Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cdd53f9-2ad8-346d-b6da-4b33ec8dfbb1.roa
File:                     6cdd53f9-2ad8-346d-b6da-4b33ec8dfbb1.roa (raw, json)
Hash identifier:          e+UVrati5PLVu+50+kZRNPd0i2dJlW6T0RPP899APoE=
Subject key identifier:   82:D1:3F:43:2B:9E:03:9A:6E:6D:1F:DE:9C:F8:CE:A2:29:2B:B2:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7EC120298E207C8656C90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cdd53f9-2ad8-346d-b6da-4b33ec8dfbb1.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7015
IP address blocks:        2001:559:c473::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:ec:12:02:98:e2:07:c8:65:6c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=df5fd0ce-2ddb-45bf-b7d3-f354c8128487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:43:29:02:47:1a:85:06:25:0a:a3:d7:07:
                    58:1d:d8:bd:64:16:b2:f6:52:45:dd:16:e8:df:91:
                    6e:32:2f:6d:9d:02:32:57:ee:f9:a2:83:28:b4:c2:
                    2c:86:74:6c:42:17:ce:8e:2a:a5:38:09:0a:0b:a8:
                    97:94:97:8a:66:95:27:a8:cd:9c:eb:f6:a2:36:72:
                    dd:82:21:58:f5:32:f8:86:6d:18:dd:f1:2f:3e:93:
                    32:28:85:b1:76:05:54:51:71:e9:e5:66:5a:35:25:
                    51:b8:b1:3c:b2:90:9f:c0:47:d7:94:32:16:c2:3c:
                    55:44:6e:a7:4b:88:7d:8c:6d:af:f8:0e:d9:4c:79:
                    a3:81:37:85:3f:42:42:e1:cc:f6:96:4b:90:dd:82:
                    42:2f:d7:24:73:bd:65:61:eb:27:b2:91:95:57:75:
                    cc:3f:df:41:cd:b8:3b:d7:0f:79:1f:53:6f:9a:73:
                    79:05:ce:38:9e:ce:c4:fe:84:9b:c7:00:10:e9:48:
                    f0:bc:9e:57:b3:c2:ac:07:61:05:dc:2e:ea:23:be:
                    47:44:30:45:1e:fd:f7:d1:d7:96:cb:15:06:3b:b5:
                    e8:10:97:cf:80:96:8a:1c:80:5e:31:b2:f0:a8:5b:
                    3d:43:da:ed:6a:24:72:9b:bb:82:32:6a:16:92:7d:
                    51:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D1:3F:43:2B:9E:03:9A:6E:6D:1F:DE:9C:F8:CE:A2:29:2B:B2:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6cdd53f9-2ad8-346d-b6da-4b33ec8dfbb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c473::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:7e:00:b7:84:a9:69:73:69:93:ce:16:c7:ed:88:fd:6e:f1:
         22:04:30:c0:d4:b1:d2:a4:a0:f1:f2:7a:82:b7:18:88:78:1d:
         aa:06:c9:d2:05:da:69:0f:dd:70:d3:54:fe:a2:6c:09:86:88:
         15:7d:a1:4f:4e:18:30:19:08:b5:65:1d:0d:f3:fa:db:a5:b5:
         8a:89:66:d1:85:07:3c:7e:80:7f:c2:53:11:9e:2d:7e:f0:bf:
         cc:cd:92:ee:ae:c4:54:ce:9d:8d:b4:56:e1:f7:88:01:83:9e:
         f0:06:27:ff:04:92:25:ff:1e:37:53:ad:cc:40:81:69:60:af:
         2d:37:01:ea:5e:e7:8b:fe:f8:42:75:46:02:3b:6f:a3:85:25:
         6d:fa:0b:a7:5d:da:c2:39:14:ad:01:3d:99:8a:92:5d:82:8d:
         28:c2:bc:69:f8:0b:f9:41:20:b5:e9:97:c7:28:ff:4e:1f:de:
         30:c6:f1:e5:74:bb:2a:ca:b2:64:9d:f4:33:df:15:aa:6d:19:
         56:f0:0a:b1:6d:88:19:38:06:2e:71:00:36:c5:2b:0d:ea:b9:
         2d:28:72:05:d0:c1:0e:a8:5d:a6:0d:7b:21:fa:ea:58:07:1f:
         d7:41:9a:75:d6:49:9e:9b:09:61:67:d6:6d:bd:ee:9d:80:5e:
         80:6e:75:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:30 2025 by rpki-client