Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f8d4939-27ba-3f50-ad07-90cdd861c63c.roa
File:                     6f8d4939-27ba-3f50-ad07-90cdd861c63c.roa (raw, json)
Hash identifier:          W+r3FNNsTx9YF7SUb7Gm0gfF0u4wF0p7qWzEmdIWL14=
Subject key identifier:   51:AA:F1:0F:B9:5D:97:0A:C9:9B:5B:63:17:AD:F0:90:09:A4:D4:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8E684E2029347774A4980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f8d4939-27ba-3f50-ad07-90cdd861c63c.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     19047
IP address blocks:        2001:559:0:6d::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:e6:84:e2:02:93:47:77:4a:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=a1b3d2c5-f38e-43d4-b850-63f0063baed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:54:db:7f:bd:86:5c:e0:0c:5a:36:47:9c:
                    4d:ca:b0:bb:1f:09:84:a6:7f:7f:7a:5b:1e:fc:c4:
                    77:d9:f4:c8:fb:c4:a5:41:1f:0d:b1:4f:9a:7a:72:
                    6b:eb:d9:e9:c6:a8:a9:63:96:6f:e6:25:ad:f6:37:
                    a6:c5:a0:7c:68:1e:72:44:a7:27:8f:a5:74:2a:92:
                    b8:0b:99:ce:bc:a6:1c:db:c4:00:e9:0c:65:24:ea:
                    ff:81:73:15:9e:a4:fa:da:8e:31:87:e3:f6:8d:d3:
                    bd:b0:42:47:26:ad:7f:8d:a7:d0:ca:7d:ca:98:bc:
                    e1:cd:56:ac:7b:eb:ed:6f:db:5f:13:71:b3:a3:f8:
                    e7:4a:31:8c:d0:e9:f6:5e:f2:c6:13:b6:58:46:72:
                    f1:ad:d6:fe:94:ff:57:39:d6:c9:56:db:00:26:8a:
                    14:61:e8:a8:cf:98:c7:3f:05:07:69:8f:a5:50:26:
                    db:ad:71:61:48:79:2f:22:59:3c:81:84:ee:dd:c9:
                    32:06:35:98:f0:c7:e4:ba:61:01:79:e7:39:1a:1c:
                    15:a6:45:d3:8b:09:5e:11:d8:f4:6a:59:94:62:69:
                    e7:50:75:da:56:a0:eb:df:59:e7:ca:43:1d:c6:a1:
                    3d:78:56:d0:ae:8a:a3:76:0d:cb:4b:e1:62:19:d3:
                    62:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:F1:0F:B9:5D:97:0A:C9:9B:5B:63:17:AD:F0:90:09:A4:D4:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f8d4939-27ba-3f50-ad07-90cdd861c63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:6d::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:6a:e1:ff:24:56:34:84:70:e8:2f:d0:c3:88:15:7e:d5:6e:
         8f:45:47:f7:ca:f5:eb:b6:ed:a0:e5:0d:8e:7b:d2:8f:9f:b6:
         46:d7:36:46:8c:68:f5:c4:f4:e3:41:e6:b9:80:95:16:8f:91:
         a7:11:80:00:5d:36:36:e4:c5:69:4c:28:9f:39:6a:d4:e7:12:
         b3:5b:8c:50:74:66:ca:6b:49:3f:04:b4:bf:ad:1b:c3:15:e4:
         17:96:79:73:b4:0d:28:a7:0f:35:0b:e9:67:c4:eb:f0:8f:eb:
         fd:e8:52:bd:0c:f2:4e:1a:96:33:77:f6:c7:f0:1a:37:02:70:
         eb:ff:e1:6f:1c:dd:c1:6d:19:2e:7b:04:6c:e6:9a:d5:10:26:
         08:6b:4d:a4:e8:53:ed:fb:c0:bc:e1:21:43:43:74:0c:2d:1e:
         78:5f:09:31:1c:3c:b8:12:27:00:de:53:21:89:46:86:eb:a2:
         db:6f:c2:1b:9a:14:5e:cf:51:71:cb:70:21:94:26:f3:38:05:
         72:2a:8e:4f:6d:db:cc:5a:5a:d5:be:66:bf:cd:7c:64:73:bb:
         d8:ad:e5:25:3c:e9:0e:a4:a5:cb:d9:98:04:4c:81:3d:b1:50:
         f8:89:cf:ff:f0:7e:ca:6e:09:d8:39:82:08:b2:7a:0e:3b:5c:
         c0:f3:08:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:21:45 2025 by rpki-client