Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8ad0c0-59cf-3ca6-9ae7-3c62e6b63baf.roa
File:                     7e8ad0c0-59cf-3ca6-9ae7-3c62e6b63baf.roa (raw, json)
Hash identifier:          IEY/A67Rkfz55P2Tc4LoxEdM9jMVGNA/isxFQAgNMjo=
Subject key identifier:   C1:12:36:56:AE:45:D0:FA:5D:13:7B:C3:4F:9D:05:93:54:09:E3:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9CE74ABA08E2F3653CD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8ad0c0-59cf-3ca6-9ae7-3c62e6b63baf.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        2001:559:81ea::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:ce:74:ab:a0:8e:2f:36:53:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=df0f4bd6-f96a-4a49-86fc-635f74a789da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:27:a6:e9:10:34:b4:29:1f:5b:6d:ef:bd:
                    4d:95:2f:30:8b:70:1c:ca:64:74:e8:99:a6:9f:4f:
                    f4:a5:40:aa:e3:63:b9:7f:76:64:e6:a3:66:9b:fa:
                    d4:62:40:05:91:64:c0:cd:b5:57:5d:5f:ed:39:e0:
                    fd:86:54:4a:dd:1a:9a:f1:c9:c7:f3:7a:71:66:c5:
                    e8:28:b4:df:2a:7a:ad:98:1e:1e:9c:f6:2e:d6:a9:
                    6e:7e:5e:90:ce:21:a7:21:2b:1c:b8:e2:3d:47:15:
                    b2:50:04:ea:f9:92:45:ce:25:bc:bc:ae:10:37:27:
                    cd:98:b4:3e:3c:01:0f:2e:fe:54:d2:f3:fb:32:27:
                    aa:12:02:1b:cf:9b:57:d0:ce:9f:7f:3c:5c:7c:40:
                    34:99:a7:dc:be:20:4e:2b:07:62:fc:f1:b7:71:4b:
                    b4:f4:07:a1:3c:36:7e:eb:6d:bc:98:bb:37:a8:fb:
                    3d:1f:c8:ff:44:28:96:93:69:93:59:68:60:ff:e5:
                    cd:d2:94:81:28:8c:09:86:8f:b1:34:65:75:fb:76:
                    6e:69:69:b8:4b:9e:26:bd:32:14:8f:3a:50:00:aa:
                    e9:68:d6:2d:b3:34:94:1d:27:21:55:6a:38:b0:87:
                    ca:dd:05:cb:9b:5c:a2:e8:87:f6:9e:eb:af:75:32:
                    8b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:12:36:56:AE:45:D0:FA:5D:13:7B:C3:4F:9D:05:93:54:09:E3:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8ad0c0-59cf-3ca6-9ae7-3c62e6b63baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:81ea::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:54:47:75:8b:dc:c7:08:1d:7e:bf:5c:f3:94:2e:75:e4:e5:
         26:5d:10:57:14:8f:21:c4:c5:38:31:67:31:0b:68:94:76:69:
         ca:ff:ab:a3:22:3d:47:d4:3a:36:7a:73:d1:e2:f7:cc:c7:3b:
         eb:79:5c:e1:7c:f8:4c:25:5f:be:93:e5:b5:0a:fe:6d:8f:c3:
         ab:ff:aa:d4:1e:da:23:29:e4:12:4e:69:64:0d:fb:e9:55:57:
         c2:09:6f:44:2a:4b:69:0e:69:28:0f:d5:04:57:3f:de:94:6c:
         03:19:70:95:3d:59:6c:56:89:4b:2d:91:23:0f:76:b0:87:95:
         aa:02:d5:e7:0f:83:6b:52:2d:72:bd:aa:00:2a:e1:72:15:90:
         c5:e8:42:61:36:7d:4c:54:2c:2e:de:1b:b8:f1:d3:e6:37:e7:
         08:ac:42:63:17:fb:6d:04:ef:f5:69:78:fd:04:04:df:02:5e:
         86:43:47:19:e2:50:cf:52:2c:32:82:c4:c8:d4:d8:94:18:50:
         83:e2:bc:df:64:51:7f:fe:18:5e:c0:91:d5:2a:56:1b:3e:b9:
         6c:ef:86:cb:a2:c6:f3:8d:a2:c8:5b:99:73:a4:36:d4:f8:9a:
         d3:3e:47:a1:c1:a4:ff:bf:f8:48:fb:1e:ec:28:d4:49:82:f7:
         41:4c:a5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:28:06 2025 by rpki-client