Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8981edbc-5ffe-325f-b906-2401ceb73b84.roa
File:                     8981edbc-5ffe-325f-b906-2401ceb73b84.roa (raw, json)
Hash identifier:          Kb7PEBMXaQltNVJqsic4hpD1cAg00S+YmyX8bfJUtnw=
Subject key identifier:   38:0B:B7:DD:D0:B4:70:B6:01:13:C7:31:C9:1C:F0:4F:64:74:19:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8F95D0A6761AADDD49C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8981edbc-5ffe-325f-b906-2401ceb73b84.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7016
IP address blocks:        2001:559:8206::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:f9:5d:0a:67:61:aa:dd:d4:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=1420df81-1c3d-44fe-88ec-bdddb49886b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:53:05:e1:a8:08:d5:c3:08:ad:28:27:56:
                    37:05:72:f6:72:1f:34:24:47:7b:64:6e:85:44:35:
                    53:fe:8f:a2:92:28:20:ae:ce:71:f3:59:96:df:ed:
                    43:c2:b5:8a:0b:95:51:b5:3f:23:a7:e5:c2:fe:90:
                    00:ef:b6:64:56:b6:56:b3:b4:7f:0f:43:08:47:16:
                    4f:ce:09:19:c7:24:d3:20:69:f5:c9:30:43:3b:eb:
                    77:61:14:9e:e5:08:40:98:03:42:33:3c:4a:d9:f0:
                    02:b4:94:35:ed:03:3c:2a:2e:bb:74:47:bc:71:73:
                    0b:7c:65:76:e1:d8:37:0e:1d:b7:ab:5a:a0:f8:b0:
                    7c:83:4c:d6:84:3c:d3:a2:8e:89:56:cc:2f:ab:af:
                    11:d6:18:4e:cf:66:5e:2a:71:1c:ad:91:a6:d0:9b:
                    d0:a3:f8:30:d5:ca:03:cd:f8:a5:d2:9e:e3:c5:3a:
                    9a:90:f3:ad:1f:92:ed:18:86:9c:71:dc:e6:d7:ac:
                    e6:91:58:81:4e:a9:34:1d:f7:f1:a1:62:e2:46:c5:
                    23:ba:50:b8:58:6c:46:f6:43:b4:85:53:1b:19:21:
                    5c:c1:02:c0:98:7b:2d:64:6f:e4:72:90:f1:9d:6d:
                    d5:7d:77:1e:49:09:03:41:88:f0:01:62:1e:2c:4f:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0B:B7:DD:D0:B4:70:B6:01:13:C7:31:C9:1C:F0:4F:64:74:19:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8981edbc-5ffe-325f-b906-2401ceb73b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8206::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c1:26:5f:f8:f6:6e:32:68:fc:05:1b:a0:b0:61:37:14:c9:
         12:9e:02:d2:5b:c9:ba:7d:1c:62:99:03:25:31:43:cf:fe:9e:
         f0:e7:67:a9:ce:78:7d:61:a0:e9:f8:68:66:0d:ba:43:d4:c7:
         98:fd:84:05:4e:d1:48:ea:40:4b:97:3d:d5:66:59:09:57:73:
         ee:60:7c:57:3d:0e:19:53:f2:6b:22:7f:f0:fc:68:12:8b:22:
         f6:b0:58:90:0a:c3:a1:b6:d6:76:f1:21:43:5b:16:9a:87:fd:
         e7:59:cd:49:bf:35:b9:2e:20:cc:32:9c:96:94:0b:18:05:5e:
         c6:2f:be:4c:05:fa:52:0c:97:01:15:ea:a8:fa:6f:62:b8:5e:
         51:e9:88:0c:fe:be:5e:a8:44:ef:a8:d8:7f:24:b8:45:79:31:
         f0:15:14:1d:b1:4b:9a:d3:9c:48:3c:9c:30:64:84:58:f7:b8:
         27:4c:fa:2e:ae:b8:ec:f5:8a:0c:a5:b6:b3:9f:ec:94:c1:af:
         92:2d:e5:88:46:b7:9a:93:cd:2b:75:4b:3b:3c:31:15:aa:8d:
         5f:0a:26:84:09:47:ad:05:d9:de:9e:f5:7e:5d:cb:44:aa:59:
         30:0e:ab:bc:8a:36:2d:ad:5f:b4:01:a5:e0:da:ed:70:13:91:
         f5:fb:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:05:16 2025 by rpki-client