Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb897b32-226d-3e53-94bc-18ad57cbfd5a.roa
File:                     bb897b32-226d-3e53-94bc-18ad57cbfd5a.roa (raw, json)
Hash identifier:          r/6MNF0KC1BRHdsFZKDKy0Pa1N6XPKKxlvnza+Gp/o4=
Subject key identifier:   EB:8E:DA:5F:1E:1A:C2:40:33:C3:14:5A:38:6E:96:52:14:9B:D4:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9CB73FBC281512E295C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb897b32-226d-3e53-94bc-18ad57cbfd5a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        2001:559:2ea::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:cb:73:fb:c2:81:51:2e:29:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=c7b1b3ab-1f41-42ab-83f2-0f67c1c32cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:88:22:05:f2:b1:30:d5:6c:a1:31:d0:51:
                    92:1b:3a:72:6e:b3:d8:91:eb:c6:3b:c9:b2:7e:5c:
                    f9:c9:63:25:e4:70:f6:6f:45:83:ee:a4:66:78:2c:
                    92:93:8d:5b:26:34:0e:00:02:41:4b:f4:5c:1c:68:
                    e1:c3:4c:42:da:a5:39:93:c5:7b:71:d9:ce:fa:6b:
                    21:2f:73:75:3d:85:6b:51:72:25:a9:c4:39:bc:b6:
                    df:3d:06:a1:4a:da:87:c3:42:06:b2:db:fa:1e:2f:
                    78:ae:dd:1f:ef:5e:b4:e0:35:2f:ed:c7:a2:ed:07:
                    f2:bf:50:7b:54:38:64:e8:98:a2:58:53:1d:05:17:
                    c3:19:47:e8:b2:80:9d:22:1d:7e:63:99:30:26:af:
                    08:11:bf:40:2f:6b:f8:b8:c5:25:d2:94:81:ba:61:
                    43:b1:6b:26:a6:92:b0:a7:fc:95:32:52:9a:2c:3b:
                    0c:ae:ad:df:02:fc:e0:c7:3a:59:73:1f:00:86:89:
                    3b:cc:99:9e:97:1f:82:2d:39:5a:b5:d7:ad:4a:42:
                    6d:77:3c:15:1c:fd:4a:01:d5:93:82:4f:b0:1f:b4:
                    f5:4b:57:98:c2:ee:81:ad:2e:27:db:2e:ad:ee:cb:
                    91:a9:25:b1:eb:5d:9e:aa:bb:9a:cb:48:fa:81:73:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8E:DA:5F:1E:1A:C2:40:33:C3:14:5A:38:6E:96:52:14:9B:D4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb897b32-226d-3e53-94bc-18ad57cbfd5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:2ea::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:73:1d:97:8a:26:f6:86:a8:0d:e2:c5:5c:63:f7:65:d4:6a:
         46:a7:5b:e3:29:a8:2a:38:78:3e:b7:fe:d5:d0:eb:8e:c2:87:
         53:9d:39:4d:95:f2:11:3e:ee:7a:f3:0f:20:87:6b:c5:35:83:
         a5:61:f4:d3:7c:aa:49:88:fc:8c:c0:69:e4:a2:8f:cb:87:b2:
         b9:85:25:2d:8d:41:a6:ed:a8:80:af:8b:32:9b:9a:45:2f:64:
         ae:7b:f0:ad:dc:49:a7:15:70:1c:93:b0:65:e5:72:34:d4:c7:
         c7:45:71:12:bd:81:2d:79:4c:7b:85:c0:12:5c:1b:2f:46:2f:
         eb:c3:2b:40:70:73:64:45:9a:dc:ff:ba:41:77:a7:f6:6e:dd:
         24:a9:70:59:b8:24:c9:67:4d:c5:84:22:b0:67:59:41:e8:a3:
         67:3a:53:00:6b:ad:d0:7e:52:a8:48:73:aa:31:1b:21:5a:ff:
         7e:72:b5:4e:28:29:ca:ca:8e:e2:58:33:85:f1:ff:ab:4f:a5:
         5d:d7:45:59:b0:cf:8d:d2:5f:86:4e:c2:e8:d0:3b:41:b3:15:
         44:7f:ac:b0:3c:12:49:8b:cc:f2:f3:f4:fb:6e:e5:31:31:a6:
         bd:f4:bf:dd:b6:86:ff:28:e5:b3:3e:7a:63:83:00:68:ab:6a:
         a5:b3:69:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:32:59 2025 by rpki-client