Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7365a18-8dd6-32a6-9f5a-9d7cb50ae095.roa
File:                     b7365a18-8dd6-32a6-9f5a-9d7cb50ae095.roa (raw, json)
Hash identifier:          V+DvMhSy7KGu2GCoeBT0jcg/w/K6tgSpOx3rXN2r9hI=
Subject key identifier:   BB:B7:85:D8:B9:AF:50:2F:2A:CA:06:37:E6:E7:83:E2:63:B0:8D:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB93C05D302624AB86622C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7365a18-8dd6-32a6-9f5a-9d7cb50ae095.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        2001:559:546::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:3c:05:d3:02:62:4a:b8:66:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6785acd9-bf12-418d-8343-03b2d69aee88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:8e:27:6e:f1:fc:9b:f3:e5:12:fe:05:b9:
                    73:3f:39:ad:b6:48:31:3f:63:9e:ac:6c:92:e1:0a:
                    42:3a:a1:af:f6:fc:3b:50:d7:e6:1f:5b:78:2b:09:
                    0f:88:d6:55:77:d0:0d:9b:47:ec:be:cf:47:e9:b1:
                    2c:fb:01:15:8f:a8:12:97:68:c9:13:af:2e:b1:15:
                    d3:b0:71:b7:6b:ac:a6:4f:7d:e1:85:60:2b:ff:8f:
                    55:40:d3:ee:27:39:ea:e6:5b:bd:07:7b:6a:4a:f5:
                    ce:07:a8:b9:70:c8:75:77:9e:99:54:52:3a:fc:6b:
                    45:1f:1f:b9:3e:e6:43:bd:e0:96:d8:3d:ec:90:09:
                    f5:f9:ac:57:e5:eb:4d:68:f7:78:d2:6f:75:80:09:
                    ea:ee:4a:76:09:21:90:f5:77:b3:ad:82:9b:e4:56:
                    19:04:c9:c0:ae:50:0f:a4:9d:4d:34:1a:3b:01:28:
                    9f:7a:3a:7c:7e:e4:18:49:f3:7d:30:0b:94:50:85:
                    b7:d7:10:35:df:6f:cd:1d:9c:95:b3:02:a4:83:36:
                    ae:c9:f7:f1:e1:55:a1:03:67:5d:20:6d:24:fe:6e:
                    28:b2:07:0e:64:d7:9e:1c:bb:69:4c:d1:4d:b1:0c:
                    05:cf:cb:da:f4:40:96:3f:bc:18:23:47:7c:1d:c6:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B7:85:D8:B9:AF:50:2F:2A:CA:06:37:E6:E7:83:E2:63:B0:8D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7365a18-8dd6-32a6-9f5a-9d7cb50ae095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:546::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:ee:d2:56:5a:0b:4b:40:24:fc:91:d5:76:c8:ec:7a:21:12:
         77:cf:7b:f2:c0:a5:47:18:06:32:e3:7c:f4:29:e5:4e:b9:c7:
         5b:60:b2:bf:3d:e8:a4:b0:4a:78:e3:73:58:be:55:ac:04:dc:
         3e:8d:5f:09:55:8e:a5:e0:59:0b:26:12:f7:48:27:04:43:42:
         d6:ee:af:14:34:cb:08:ed:ee:68:e5:b1:bb:64:5e:e7:4a:1c:
         d1:9e:8e:c0:c7:21:83:85:94:5b:81:21:e7:7a:71:92:5f:ff:
         fa:d2:e9:9a:db:9c:6e:44:cc:9c:6f:ce:6d:23:03:fd:dd:13:
         e7:c8:75:e2:21:54:85:3e:55:b8:b0:9f:94:6c:e2:51:e9:bb:
         cf:70:10:70:86:2a:0a:fd:1d:7f:d9:7e:1a:c9:26:5f:d5:9e:
         23:10:99:47:e5:28:ec:54:d5:50:e3:57:10:26:39:fa:3d:0b:
         c6:96:63:a4:0c:5c:ce:52:c6:fd:1f:a5:52:77:42:50:7b:de:
         af:5f:34:1f:c2:d8:1d:f5:41:8a:e3:46:09:34:ae:0e:8c:1e:
         08:e4:4f:f3:18:80:84:2c:19:b7:f7:1d:6f:73:45:42:9d:d7:
         c4:95:34:a7:1e:a1:2d:af:2f:76:ab:90:3a:fb:15:a8:c9:69:
         d9:ed:eb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:42:04 2025 by rpki-client