Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c170d409-2787-31a5-aba0-58b48b52fd1e.roa
File:                     c170d409-2787-31a5-aba0-58b48b52fd1e.roa (raw, json)
Hash identifier:          n6UvUnq1+wEraVrZPCsfPJ7SCfYAU82QY1TdX7yro+0=
Subject key identifier:   4D:77:F9:26:F7:C3:D7:D5:D0:7F:B9:E3:09:C2:F7:4B:F3:11:4A:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCE3D9876F725DACD40480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c170d409-2787-31a5-aba0-58b48b52fd1e.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7016
IP address blocks:        2001:559:8442::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:e3:d9:87:6f:72:5d:ac:d4:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=8d7ddf89-d4c5-4f10-a5a5-45fcbb56309a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b5:68:f6:c9:a9:54:d1:09:23:9f:b5:fc:93:
                    e3:5d:13:45:94:a8:99:35:78:e6:e3:58:21:6a:40:
                    a7:b9:b1:59:69:ed:fc:d8:04:73:07:63:9d:b9:25:
                    2d:35:46:9f:88:68:10:c2:0e:58:31:f9:98:c8:68:
                    f0:ff:ca:78:53:84:2c:ab:f3:8f:15:33:49:5d:db:
                    fc:6e:b7:31:30:d8:6f:ff:99:93:f3:a4:d7:79:7d:
                    d4:9c:3b:77:d3:b6:bc:1d:14:74:f6:c9:8f:9d:5f:
                    7b:a8:3a:8c:07:02:3f:68:b9:34:73:a6:91:a3:94:
                    12:95:95:6c:89:7f:5f:f6:18:e2:7e:dc:a0:23:89:
                    5e:ca:a9:4b:e1:fc:f7:ce:a3:1c:7e:7c:be:ac:34:
                    98:29:39:d1:a9:68:8b:68:bf:1a:41:5f:ae:86:df:
                    7d:cd:42:4f:01:eb:a3:f2:2c:86:22:e1:c8:87:33:
                    76:1a:94:1e:b0:59:03:11:71:29:03:16:4c:03:30:
                    19:31:e9:bb:ce:bc:e9:f7:4d:83:ce:ea:7a:df:90:
                    1f:dc:05:33:a8:72:2e:47:79:01:39:e8:60:38:09:
                    94:b0:3f:e5:fe:7a:69:fb:06:71:de:24:2a:fc:39:
                    26:d2:2b:bd:da:ca:d4:08:21:09:4f:81:13:92:44:
                    11:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:77:F9:26:F7:C3:D7:D5:D0:7F:B9:E3:09:C2:F7:4B:F3:11:4A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c170d409-2787-31a5-aba0-58b48b52fd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8442::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:63:37:c3:3a:26:62:77:44:10:8c:bb:ed:1e:5d:f0:e5:92:
         54:c3:1c:92:82:d7:1a:74:2f:4d:bb:07:b9:49:cf:24:07:11:
         8b:70:d7:c1:c5:0d:f2:be:88:23:a7:0b:2e:75:73:da:18:a1:
         87:cb:bf:e3:6e:8d:9b:35:17:c4:3a:ab:da:6e:3c:79:bb:52:
         fc:bd:52:ae:46:a9:15:e4:86:78:33:a2:ae:e0:bd:e8:79:b0:
         0d:a5:6c:66:79:24:0a:b5:d7:48:b7:21:ba:4f:ef:58:f6:01:
         b9:4c:50:47:19:3a:e3:6f:84:d5:33:7f:59:c3:63:29:e9:73:
         1b:0c:89:1d:fd:30:69:ec:3f:c8:68:2a:c7:0d:fa:c6:d7:a7:
         05:2e:ce:1c:cb:ec:0c:c6:95:73:30:53:ff:43:eb:c6:12:71:
         8e:2c:5e:39:43:fe:7b:84:f9:fd:26:da:33:8f:ba:f6:61:da:
         de:2f:d8:f2:01:33:1f:ab:2a:ae:78:15:f7:8f:a2:f7:1c:26:
         d5:95:c8:69:75:ed:fd:d6:3c:f2:fd:98:7f:82:71:4b:1f:c8:
         eb:1d:bb:7c:47:a5:e2:26:64:8f:e2:7f:96:8e:40:9e:7d:e5:
         54:41:d6:93:2e:a5:b2:48:25:52:c5:6b:61:5a:bb:7e:f5:69:
         e7:d0:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:35:08 2025 by rpki-client