Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d5fed5-0678-3dbd-a2cd-6dfdd110550e.roa
File:                     94d5fed5-0678-3dbd-a2cd-6dfdd110550e.roa (raw, json)
Hash identifier:          f/+smtaRQ4zTXGpQmSPCo/5v5wD1IBH1rJfGHs6piBQ=
Subject key identifier:   86:10:CF:46:CC:8A:C7:7E:B3:CB:5F:65:5B:12:FE:C0:A3:92:DA:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB86559CFAF0BD4B5199F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d5fed5-0678-3dbd-a2cd-6dfdd110550e.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33657
IP address blocks:        2001:559:c1b8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:65:59:cf:af:0b:d4:b5:19:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=5b355cb1-595d-42b1-ae7d-7e06fe0de916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:a2:9c:fb:1c:c6:44:e9:16:d9:a0:51:da:
                    0b:ce:ad:ba:c2:f0:c7:8b:25:05:fa:bf:69:5f:3e:
                    f5:f9:f1:47:6e:cb:de:b4:15:0d:bb:91:9d:8e:be:
                    8e:1a:3c:e4:53:1b:be:55:4f:ad:16:36:77:8d:63:
                    2f:7b:91:3f:70:25:22:cf:29:6d:fe:a4:55:9d:e5:
                    53:a7:f6:c8:ba:56:1a:1e:70:ca:88:e7:26:0c:ab:
                    36:17:0b:d6:e4:28:75:a7:44:c1:a1:e6:b3:67:9b:
                    76:e9:a5:8a:73:9b:dd:26:43:e2:32:90:a9:0e:9d:
                    3b:15:20:37:47:e3:a4:15:e1:5f:cb:33:ce:66:e5:
                    c7:2f:c2:ab:37:c5:0d:ff:62:7d:f5:36:72:5f:a2:
                    9a:46:09:a1:8e:8d:59:c3:04:bd:b2:5c:37:25:cc:
                    10:b0:c9:0b:a9:25:cb:a8:2d:6b:4e:ae:31:a8:c3:
                    29:34:be:31:c5:81:7d:10:b9:05:d0:a1:d5:fe:53:
                    b3:1a:5c:3d:36:14:57:42:27:25:88:b7:1f:d3:a6:
                    40:9d:07:8f:66:e3:91:60:2a:fe:cf:80:b3:47:1a:
                    6a:ae:49:0c:6f:76:51:8a:62:ff:c6:74:06:66:8f:
                    53:3b:b4:2b:8d:c6:d5:3a:cb:fe:fa:67:10:f1:84:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:10:CF:46:CC:8A:C7:7E:B3:CB:5F:65:5B:12:FE:C0:A3:92:DA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94d5fed5-0678-3dbd-a2cd-6dfdd110550e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c1b8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:71:e5:9d:62:f1:1b:30:1e:b9:c1:57:19:2d:49:20:31:4d:
         f3:c1:ed:1f:17:5c:cf:68:60:89:ea:15:e7:33:6b:81:fb:8e:
         78:4e:3c:f8:ff:85:23:13:c3:69:0f:74:0a:26:26:76:3b:fa:
         8f:f7:78:be:ff:68:8b:83:49:57:69:ca:30:3d:e0:72:24:a0:
         ad:af:a2:a3:31:1f:fd:e8:48:c6:f2:87:ff:6a:7e:b7:28:ee:
         26:17:bf:1c:b4:c7:5f:b5:19:66:12:89:91:a4:ed:83:c7:73:
         58:e1:73:11:8f:3b:85:64:89:92:f3:1d:96:f5:b4:43:e4:ff:
         a8:80:16:70:63:c9:d0:6d:b8:46:ea:2e:22:54:7b:d1:90:34:
         0a:9e:a5:6d:39:3c:12:9b:50:cd:8d:8b:95:48:30:d3:96:c7:
         75:f6:a5:3a:00:48:f1:34:91:6e:93:5f:3b:97:76:67:25:63:
         af:ff:db:b1:04:67:a0:d0:61:c0:6f:cc:41:74:7c:3b:5f:28:
         db:74:9b:d4:8e:cd:83:c6:34:b8:73:e4:0f:f4:81:a9:69:3d:
         04:aa:48:d6:f0:af:e0:60:56:81:7c:7a:89:b9:77:27:96:fc:
         ef:0a:b8:7f:74:ce:3b:3f:dd:72:35:d8:44:fd:22:54:6d:77:
         e1:fd:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:27:56 2025 by rpki-client