Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a345df-c92f-3803-a7ef-8aa376febdb3.roa
File:                     91a345df-c92f-3803-a7ef-8aa376febdb3.roa (raw, json)
Hash identifier:          FaazNvu/1YJCCQFVekUpJ12xoS+xuG3FqF3qdXUFQ0g=
Subject key identifier:   6D:9C:92:75:95:43:51:B7:DB:71:52:A6:73:38:89:D7:9E:1B:80:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B44B1C084F4E5E6BA943670D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a345df-c92f-3803-a7ef-8aa376febdb3.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     36040
IP address blocks:        2001:559:0:a6::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:c0:84:f4:e5:e6:ba:94:36:70:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=1489cdfb-2b3c-4c95-8e98-3c6b65fae2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:ca:c6:9d:c5:b8:df:88:02:15:11:66:3c:
                    01:fa:52:19:9d:33:7a:6e:06:54:60:7a:a4:04:8a:
                    a5:89:04:ee:43:34:80:77:bc:85:3d:fc:d2:e8:66:
                    f5:9f:b8:b1:a0:52:d3:36:52:33:44:ee:4d:dd:ce:
                    0b:00:6b:aa:9b:b3:7a:77:06:21:95:26:de:44:be:
                    fb:c6:37:a3:45:5f:89:63:bb:5f:b0:44:b7:a7:f3:
                    73:25:67:e1:4c:5f:67:f7:98:93:ad:a5:72:13:5f:
                    3d:91:79:3e:a4:9d:9c:1c:70:26:32:cc:79:0b:06:
                    16:89:09:1f:a1:55:b2:cd:25:6a:62:1d:90:d9:f9:
                    2b:12:96:d5:6a:4c:18:a8:cb:7b:61:f4:05:f7:c9:
                    02:ce:78:ce:27:4b:6b:5e:b8:27:37:69:f8:b0:30:
                    a9:9a:49:05:dd:49:00:c5:e3:5c:e0:9d:e6:a2:70:
                    40:ea:72:a4:71:87:0e:27:c9:61:7f:6f:6a:48:37:
                    a8:15:63:75:cd:07:eb:2b:9b:bc:3c:d3:a1:82:43:
                    bd:2a:47:56:03:e0:b2:66:af:dd:79:6d:27:91:d6:
                    01:1f:30:f1:7e:7a:ed:05:7f:a1:1b:15:ca:be:1e:
                    b3:a8:66:0c:b1:90:f0:e1:78:e5:a1:aa:bd:43:2d:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9C:92:75:95:43:51:B7:DB:71:52:A6:73:38:89:D7:9E:1B:80:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a345df-c92f-3803-a7ef-8aa376febdb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:a6::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:0f:1a:84:cb:c7:a1:18:40:4f:e7:54:ce:55:49:6c:b2:08:
         9b:69:59:28:81:07:be:e9:56:cd:e0:0a:5e:0c:0d:0a:7d:75:
         d5:3a:49:6d:bd:66:70:32:ef:32:84:de:f4:8c:44:eb:bd:3e:
         46:29:12:d0:bc:08:46:68:8f:24:f8:ce:0b:24:30:13:07:59:
         fa:67:63:8e:2b:a0:ce:fe:35:4a:0a:9c:3f:80:38:e1:79:72:
         54:42:e8:00:e0:ae:0b:0a:91:e1:04:15:dc:5a:2a:f7:16:e0:
         c3:79:48:4f:81:de:32:e2:12:fe:2a:62:9e:6e:ba:04:8c:48:
         45:93:d6:8a:20:d1:86:71:1e:3f:4d:93:f5:75:2a:f7:d3:fe:
         fb:66:13:70:93:1d:68:c6:e6:7a:2d:31:17:1e:90:aa:28:dd:
         c2:71:ea:64:ea:7a:dd:92:1b:33:3c:4b:00:ce:d0:80:6e:bf:
         6e:03:77:86:60:6a:d5:92:b4:53:d6:68:1c:9e:fc:a8:6f:98:
         d0:10:a0:28:e7:69:6e:43:ad:58:08:04:92:f7:23:99:a0:7b:
         c0:6e:45:72:ac:7a:5f:0c:8a:83:71:ef:89:77:58:b4:5d:e9:
         61:d2:0c:a7:a4:22:13:9a:eb:8f:11:7b:0c:1c:45:bd:38:d8:
         8b:04:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:37:55 2025 by rpki-client