Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2c96092-044b-33b2-b733-b8c08d1875cd.roa
File:                     c2c96092-044b-33b2-b733-b8c08d1875cd.roa (raw, json)
Hash identifier:          iiX4cGv0mjJY5wVq9W2TDwcC0L09nWDoxVKYq2A72a8=
Subject key identifier:   4D:A9:4A:9D:40:B7:71:5C:5A:0F:0A:65:90:41:1C:D3:57:F0:8C:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DBA029DAF5079C5CBB1C980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2c96092-044b-33b2-b733-b8c08d1875cd.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        2001:559:1f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:02:9d:af:50:79:c5:cb:b1:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=15cbadb7-473d-4008-ad67-997b89d9b395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5c:7a:e6:28:51:97:06:0d:43:d5:07:41:07:
                    e4:7c:fc:f2:fe:03:c1:8d:1c:ac:1b:8b:4c:36:71:
                    7c:5c:d6:20:55:03:6a:e6:08:d6:2f:8f:bb:7c:b8:
                    ed:4b:3b:21:48:73:a3:19:76:7f:db:0d:8a:d1:be:
                    54:64:eb:11:d1:78:d5:34:ad:3f:97:00:f5:55:c4:
                    f1:f3:40:cb:c9:b5:26:09:00:f9:a0:6e:81:f4:cb:
                    20:ca:f9:b2:2d:cf:63:c8:02:b5:b0:4b:7c:0f:fd:
                    20:e9:7c:c0:a6:c8:85:77:08:29:0d:bf:ab:87:4c:
                    04:8c:e1:55:9d:d4:83:3b:d9:42:a5:71:63:28:b8:
                    28:59:39:83:16:52:68:ef:10:a5:51:80:b4:be:62:
                    14:2b:4c:0c:9f:34:fb:4e:73:72:21:c7:11:1d:d7:
                    d2:c3:08:43:38:68:8f:ee:64:f1:ab:0f:6d:12:54:
                    3c:9e:98:bb:cd:83:56:c8:a2:92:2b:f3:16:50:07:
                    4c:6b:17:80:b0:e9:30:c7:cf:2e:80:5a:bc:5c:5f:
                    11:91:6a:a7:d2:81:61:9f:d4:47:c0:7b:03:49:f1:
                    6e:39:55:25:b5:a3:1c:3c:91:0f:6b:62:41:52:7a:
                    56:0e:3c:f1:8d:a2:b7:51:f0:6f:8b:09:63:9b:6e:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A9:4A:9D:40:B7:71:5C:5A:0F:0A:65:90:41:1C:D3:57:F0:8C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2c96092-044b-33b2-b733-b8c08d1875cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:1f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b0:69:89:1b:8b:e5:30:b7:f6:d8:c2:87:78:ec:d9:c4:7a:
         82:b1:60:a1:99:8a:d3:54:16:77:9e:96:14:d0:e4:0f:5f:44:
         bf:15:cc:33:e4:3a:a1:34:8e:ad:9e:31:0d:09:c1:c7:f2:eb:
         b6:8c:88:bc:3a:fd:51:8a:c3:0a:6e:ff:a2:08:6b:4a:cd:4e:
         58:30:55:35:09:ef:c3:18:b2:be:ac:b0:64:b3:6b:3d:f8:a3:
         22:1f:b1:b2:17:21:7a:c4:69:e6:3d:1e:37:8f:6b:e0:93:77:
         53:13:53:aa:04:d1:98:d1:c1:6b:06:db:2f:0a:52:4c:01:95:
         6c:4a:88:ea:24:1b:e0:ce:f9:5e:b0:b2:d5:97:7f:73:8d:99:
         0b:8a:ae:37:39:0b:b1:5e:7f:a3:0f:57:83:b8:cd:93:4f:8c:
         72:13:54:e3:f8:0f:6f:e7:3b:50:c6:39:a4:ac:ea:ba:df:84:
         31:90:91:91:5f:a7:45:0b:9d:ff:92:c8:d4:e2:7a:a3:79:54:
         20:4f:5c:48:2a:28:e3:da:54:ab:0e:56:28:83:7b:24:39:9c:
         ce:82:b1:36:99:7f:97:2b:47:cc:bb:9f:44:80:b1:71:1b:ca:
         b2:24:28:1a:bc:e6:03:71:bd:6a:ae:fb:e8:35:f1:13:da:24:
         15:9b:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:11:31 2025 by rpki-client