Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3436535-bb44-3038-a471-a0a3b9249344.roa
File:                     c3436535-bb44-3038-a471-a0a3b9249344.roa (raw, json)
Hash identifier:          Lqz8SADy3ZTS/y1AQxAoEH2e6UiDZdmIkuBrIcW0wks=
Subject key identifier:   68:A2:AC:5B:1A:FB:71:E0:7D:8C:4C:66:EE:7A:CC:71:AD:FB:5C:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC7DB7F20686B0F99817F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3436535-bb44-3038-a471-a0a3b9249344.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        2001:559:8706::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:7d:b7:f2:06:86:b0:f9:98:17:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=8e5ec7e7-db12-48d2-a795-7a176c095620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:48:a3:c8:4e:2d:d8:3d:61:87:21:82:54:
                    9b:ce:c2:a7:7f:f8:e1:4a:b6:8a:c3:fb:ba:c3:e0:
                    76:d9:4e:18:f5:cd:a6:21:14:12:6f:33:5b:b1:38:
                    db:bf:19:4d:66:79:00:7d:da:a7:93:b6:5f:a3:22:
                    67:e9:7b:3e:db:76:17:af:fe:18:27:da:07:4c:75:
                    85:2b:26:cd:a3:f4:b6:3e:4d:57:57:7a:f8:5c:13:
                    4d:f9:41:ee:a3:88:12:9e:f2:c3:2c:2c:d7:b6:78:
                    74:06:3e:33:90:c5:0f:09:85:45:38:ed:1e:48:38:
                    73:0a:db:27:e1:2b:e5:99:c4:8a:cf:25:1b:6f:3f:
                    d9:a1:58:7f:7c:7f:ea:86:ba:26:60:0e:23:4a:8c:
                    5f:e1:03:ac:33:2b:0d:10:dd:b8:f9:58:fb:f5:e9:
                    58:db:ab:5f:6f:96:82:24:85:9b:24:e4:3b:a0:a7:
                    b7:53:31:32:f9:34:aa:7b:49:a5:10:1f:ac:e2:35:
                    c5:39:c0:3f:9e:20:99:72:73:01:b3:0f:d7:95:cd:
                    c5:69:97:8d:c8:c3:c9:b1:37:76:b4:1e:36:b1:77:
                    e0:4a:f3:46:c7:33:21:18:99:dc:46:9e:d0:f5:29:
                    45:cd:75:8e:ae:ee:fd:67:87:91:fd:3f:45:d2:2d:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A2:AC:5B:1A:FB:71:E0:7D:8C:4C:66:EE:7A:CC:71:AD:FB:5C:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3436535-bb44-3038-a471-a0a3b9249344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8706::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:7b:88:03:b2:39:bd:1d:71:90:51:5c:e4:ff:61:95:5a:
         4b:a6:6c:d8:39:a7:49:f6:eb:81:e2:f4:39:84:4d:14:1e:31:
         ed:ee:64:92:76:46:24:49:f5:c2:e1:fc:ee:e4:4e:33:fe:7e:
         6f:4d:28:37:b1:a5:1e:1d:f1:bb:96:33:19:0d:7c:c7:0e:e3:
         1b:f4:77:81:21:8a:b5:ea:7e:d8:25:be:2a:24:96:ac:83:77:
         fa:6f:dc:19:3c:a8:87:6e:ae:82:59:cc:16:93:ac:a3:95:5f:
         1e:3c:41:79:61:86:3c:b8:2c:ce:95:02:d2:fe:01:c5:14:a3:
         28:51:6c:69:07:8e:72:cf:8c:d9:8e:06:b1:0b:b3:21:e3:68:
         18:f4:f2:91:d2:a2:54:49:72:63:f2:27:11:af:09:8f:76:55:
         b2:e8:24:ce:b9:fd:ec:12:46:6d:e4:dc:46:e6:11:96:4b:d0:
         32:93:4e:47:fe:50:18:bc:73:b0:d4:b2:de:a3:28:23:57:a9:
         83:b2:cb:33:fe:11:39:db:d8:b8:c6:86:79:93:44:01:7a:38:
         1d:a3:57:86:98:c2:71:06:f7:65:29:5d:8d:dd:39:f5:ef:b8:
         b8:6f:cf:70:15:14:a3:24:d5:3a:0a:3d:78:9e:0d:98:7e:77:
         80:32:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:23:04 2025 by rpki-client