Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5274861-2108-397c-be56-d936b9aafe64.roa
File:                     a5274861-2108-397c-be56-d936b9aafe64.roa (raw, json)
Hash identifier:          GR+BGkyLxtvxWb0uEIDcL6v4Q8LocxF6vd8LMfHdzH8=
Subject key identifier:   0A:67:F3:DE:C7:83:23:8A:2E:93:6B:DB:61:79:00:86:82:10:C2:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD1AA3D6F56A169CC7EA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5274861-2108-397c-be56-d936b9aafe64.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        2001:559:86a5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:1a:a3:d6:f5:6a:16:9c:c7:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=90818f26-64ad-44e3-af6d-bf4ac3b4ab50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:eb:ba:ed:65:4d:45:0c:92:eb:eb:bc:05:
                    00:ce:d2:5c:0c:47:68:15:0a:e5:41:9c:53:a1:32:
                    35:8d:74:f5:e4:85:0c:e6:cd:ba:70:b5:a0:05:c7:
                    30:2a:0e:64:3f:ff:0f:0e:c5:79:1f:db:ae:af:7f:
                    7c:0c:84:22:a4:2c:01:ec:90:fb:4e:04:91:ce:4d:
                    3a:40:c9:1c:8f:42:89:60:a9:b5:72:05:7f:2d:d7:
                    37:ee:38:69:12:3c:69:4a:23:44:d5:bc:d8:9d:a7:
                    18:e1:20:b6:b7:f5:40:2c:f3:04:a1:ec:84:ac:90:
                    69:72:e4:38:65:87:75:66:52:f2:56:a8:ae:b1:8d:
                    82:4b:03:56:36:54:f3:ff:4d:8f:cc:49:e4:06:12:
                    bc:2c:7b:83:70:cd:0a:81:12:fb:e0:75:8f:b7:8f:
                    ec:37:05:37:99:4d:15:89:a0:6f:28:c9:93:b2:5d:
                    ad:89:79:31:1c:3b:fa:a3:f3:c2:7c:a7:14:44:b9:
                    90:00:70:fd:58:d3:8c:57:38:0d:6f:89:c5:7c:48:
                    01:ea:09:b9:ca:07:80:fd:e3:11:3c:97:c7:a6:d0:
                    ef:20:82:85:80:5d:cd:ab:5c:74:8a:7f:ff:0e:a2:
                    d9:04:84:65:10:df:68:6e:5d:b3:1b:15:04:bd:f5:
                    30:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:67:F3:DE:C7:83:23:8A:2E:93:6B:DB:61:79:00:86:82:10:C2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5274861-2108-397c-be56-d936b9aafe64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:86a5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:97:c7:81:06:5a:3f:18:03:42:93:5c:2b:99:fc:be:00:8d:
         c4:74:3f:7b:02:5b:a5:01:b3:d7:e9:68:19:14:07:b2:43:52:
         93:52:86:4b:e5:04:d8:61:12:17:0b:16:ce:c4:5e:9e:53:c6:
         61:06:2d:b4:3d:e5:55:3e:a9:d5:db:9e:d4:de:3b:f8:52:60:
         be:d1:82:cc:44:da:07:57:f3:5a:24:ce:2c:ca:40:12:cb:92:
         5d:4a:c5:68:ec:2b:34:47:c9:12:d1:ce:ca:5a:94:b8:6a:96:
         7e:e7:fb:8f:27:73:9e:42:86:12:a0:bf:ce:7c:f6:e7:54:55:
         35:13:b6:1c:45:84:65:4a:94:ac:53:65:fc:58:ed:cf:33:29:
         1b:a0:65:1e:a6:1b:97:7c:7f:02:ce:c9:e8:2c:f4:f7:1a:7f:
         6b:1e:14:78:b0:85:93:44:3f:fc:f8:f7:00:04:e7:8b:48:fa:
         7e:3f:f4:5a:09:e7:31:56:5e:8d:2a:45:28:6d:fc:b3:3d:b9:
         9e:61:87:d2:17:dd:f2:4d:09:d2:25:60:68:a0:73:92:a4:97:
         b6:30:5d:77:6b:d9:82:77:e2:e0:0a:b0:97:0d:ec:b6:39:60:
         96:c2:27:56:85:10:ad:7b:61:ea:91:07:94:52:25:42:d3:21:
         88:0d:1e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:25:40 2025 by rpki-client