Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9897d947-2e41-3abf-83b4-d94cae296573.roa
File:                     9897d947-2e41-3abf-83b4-d94cae296573.roa (raw, json)
Hash identifier:          oadARUVukz33AK/5Cg/n6Mqb5fRz6NTs/i1iDFjLam4=
Subject key identifier:   F8:AD:1B:0E:D9:0E:33:DB:DE:0A:69:0C:61:6F:98:A0:93:98:82:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBF26692D92EE1C5EAAFE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9897d947-2e41-3abf-83b4-d94cae296573.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7015
IP address blocks:        2001:559:87fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:f2:66:92:d9:2e:e1:c5:ea:af:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=57e92e66-c921-4e5e-8397-42a289bc6547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:bd:37:3f:99:73:50:7a:ce:2e:a1:2d:e2:
                    b1:3c:ad:66:d7:2f:25:d4:15:95:f0:95:bc:fd:b5:
                    91:99:9c:31:b6:1f:0d:1d:33:fd:ae:60:09:f5:53:
                    20:1c:d6:cc:1c:09:95:8a:1e:b9:75:70:67:c8:2f:
                    96:7c:79:70:0c:66:08:89:0f:52:da:ba:88:b7:56:
                    b5:62:cd:37:9e:a7:6b:8c:26:5a:71:3e:dd:aa:6b:
                    e7:66:dd:9b:93:e0:70:89:13:ef:52:b1:a0:0c:9d:
                    87:42:3c:fc:5c:10:d4:90:30:15:ee:94:46:ad:e1:
                    6e:77:c4:96:5f:5b:cd:3b:6b:b5:9f:a9:df:2d:bd:
                    fe:bc:f9:4f:52:8d:af:60:8f:3a:ad:8b:70:d5:4b:
                    42:b2:e8:b9:30:b8:3b:66:42:3c:ce:f6:29:2b:e9:
                    42:d2:ee:21:e2:e3:f1:40:11:79:2c:74:98:a2:f9:
                    db:cb:91:7f:b1:ce:9b:a0:7c:be:14:3f:6c:ad:ac:
                    30:61:09:f0:2d:2d:38:fe:f9:9c:ad:f0:73:ef:e4:
                    a4:8e:82:b7:7e:76:8f:6a:c9:b6:5c:42:b7:85:88:
                    6f:14:4a:8e:5e:01:75:7f:02:27:27:54:52:8e:e4:
                    a7:39:22:2d:57:3d:e7:86:e8:ee:38:be:b3:d1:bc:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AD:1B:0E:D9:0E:33:DB:DE:0A:69:0C:61:6F:98:A0:93:98:82:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9897d947-2e41-3abf-83b4-d94cae296573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:87fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:ca:e8:97:2a:29:22:3a:8d:cf:70:c2:0a:22:12:88:75:
         1f:2b:7e:c9:9c:d6:d0:f0:5b:c3:95:77:46:ad:57:1e:0c:31:
         64:1f:05:9a:f2:9b:12:77:bd:d4:5e:96:e2:c6:49:e0:19:68:
         80:d7:e2:c1:21:ef:93:4d:19:b1:1c:bd:3a:85:18:b4:bc:ba:
         0a:d0:3d:06:e3:e8:35:7b:da:f0:57:2b:f0:ef:bd:5c:83:3b:
         3d:b3:ca:cf:07:76:ef:8d:f2:47:0b:87:7f:28:38:b6:25:34:
         58:46:da:7e:a3:02:3b:5b:ab:5f:f5:ab:24:87:cd:af:7e:3c:
         36:fd:1b:2f:65:ca:a2:f0:66:1d:30:86:a3:c4:db:9d:83:ec:
         ca:e4:02:f9:15:07:20:12:38:4e:7d:01:84:fa:b1:50:ec:69:
         60:0f:fa:0c:d8:48:dd:f3:75:22:a9:de:88:5a:d4:72:98:39:
         60:a3:87:c1:f1:bf:06:70:1a:9c:76:3d:33:96:f0:62:ce:e3:
         bc:f1:5b:11:f1:3a:0d:33:e5:d2:9b:fe:f6:32:fb:ab:51:35:
         ab:fb:d6:fc:3a:93:76:6b:21:8b:e6:ed:cc:66:20:04:ca:50:
         86:c4:7d:3e:7c:14:16:a2:23:5a:c3:16:fc:70:84:29:4e:f0:
         76:95:4d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:31:11 2025 by rpki-client