Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e44103fb-b5db-3ed3-a1fc-1b0ef6838cf8.roa
File:                     e44103fb-b5db-3ed3-a1fc-1b0ef6838cf8.roa (raw, json)
Hash identifier:          di0Zo3v6t03VprpZndR6vnPVnQ/dnoBFSWD2gZMVA3A=
Subject key identifier:   19:9D:52:E6:E4:6C:1E:F9:90:6A:34:89:14:A7:FC:47:E2:B1:AB:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8F818567F83F03CB7B080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e44103fb-b5db-3ed3-a1fc-1b0ef6838cf8.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7016
IP address blocks:        2001:559:7c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:f8:18:56:7f:83:f0:3c:b7:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=2e276499-7ed2-4dee-bfee-8a41d00e5a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:20:7a:33:63:d6:89:1d:f0:a7:27:f8:c4:
                    31:e0:bd:e6:54:65:8b:36:36:3f:fe:92:89:d2:b5:
                    73:86:fd:5e:87:2f:39:a3:d2:50:82:9b:be:e5:95:
                    2d:ee:90:9a:bf:bd:15:dc:a0:5e:50:d6:e4:af:56:
                    78:58:c6:56:c5:ee:3b:b1:c8:24:80:40:3d:e5:bc:
                    09:9a:c2:b5:e1:8f:f8:8a:49:79:b0:43:26:c2:73:
                    cb:80:b1:03:38:90:86:a8:93:02:0a:84:a3:b5:0c:
                    be:07:72:ec:17:22:89:b3:ce:b0:ff:89:d8:36:e8:
                    13:b1:ac:18:86:27:a9:2b:e5:7f:c9:5c:2d:d4:68:
                    52:b7:cf:4c:67:61:64:c9:b5:57:33:12:63:b0:fc:
                    44:0f:e6:44:9b:5d:76:ec:2f:d7:3f:9f:6b:d9:ef:
                    7f:9e:09:79:28:de:70:cc:36:2e:e3:0a:20:76:85:
                    bd:33:3e:57:67:78:ef:a0:4d:e9:76:5b:fe:c9:d7:
                    c2:d8:52:d2:49:60:f6:0c:c4:f3:1a:95:2b:57:4a:
                    f1:04:86:7e:3c:71:86:b5:ca:75:69:26:a6:66:61:
                    90:ca:18:1d:72:6a:50:d1:bb:6f:66:c3:d3:5a:f2:
                    17:ca:9a:fd:e7:13:98:e4:20:9a:fc:6f:c9:9f:46:
                    38:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9D:52:E6:E4:6C:1E:F9:90:6A:34:89:14:A7:FC:47:E2:B1:AB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e44103fb-b5db-3ed3-a1fc-1b0ef6838cf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:7c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:96:50:e6:01:b8:01:0d:1b:1f:71:68:43:cd:0f:e3:bd:af:
         ef:72:e5:64:e3:5b:7f:0b:c2:20:2e:95:22:5f:07:2a:a8:41:
         8c:72:a1:4d:fb:c4:92:96:88:2c:b3:6c:69:a8:92:dd:65:39:
         cf:eb:be:5d:56:38:80:ed:4c:f6:df:17:64:62:cd:75:ce:d2:
         69:44:98:03:d9:83:33:9c:6f:5c:a1:19:5d:30:a1:c8:76:bd:
         74:5c:37:76:d4:02:12:55:d1:e7:ec:3e:63:b1:a0:1c:89:7d:
         e7:5b:22:dc:0a:61:00:43:4f:09:96:b8:08:74:99:a4:46:2c:
         85:a4:01:34:de:80:4b:2c:b5:8f:f6:b9:0c:d8:8b:73:5a:2b:
         d9:e4:05:e9:ee:fe:5f:f6:1b:8a:9d:23:db:ef:70:9e:c8:fb:
         bc:c6:29:70:e5:42:69:af:f0:56:5b:dd:2a:de:29:bd:a1:4f:
         2b:f1:af:99:9c:27:1b:6d:ef:4b:58:d6:c0:57:8d:51:53:f1:
         e6:d9:ec:15:0e:16:95:b4:13:4f:c6:82:02:5e:e3:d5:12:32:
         d7:21:d7:eb:ee:fb:fa:19:75:c5:87:81:ae:24:60:26:ca:4a:
         32:8e:dd:6e:57:1d:db:14:50:7b:23:af:9b:0c:83:41:08:f1:
         99:43:ae:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uPgYVn+D8Dy3sIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
MmUyNzY0OTktN2VkMi00ZGVlLWJmZWUtOGE0MWQwMGU1YTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow8gejNj1okd8Kcn+MQx4L3mVGWLNjY//pKJ
0rVzhv1ehy85o9JQgpu+5ZUt7pCav70V3KBeUNbkr1Z4WMZWxe47scgkgEA95bwJ
msK14Y/4ikl5sEMmwnPLgLEDOJCGqJMCCoSjtQy+B3LsFyKJs86w/4nYNugTsawY
hiepK+V/yVwt1GhSt89MZ2FkybVXMxJjsPxED+ZEm1127C/XP59r2e9/ngl5KN5w
zDYu4wogdoW9Mz5XZ3jvoE3pdlv+ydfC2FLSSWD2DMTzGpUrV0rxBIZ+PHGGtcp1
aSamZmGQyhgdcmpQ0btvZsPTWvIXypr95xOY5CCa/G/Jn0Y4zwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBmdUubkbB75kGo0iRSn/Efisau/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTQ0MTAzZmItYjVkYi0z
ZWQzLWExZmMtMWIwZWY2ODM4Y2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQfB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAeWUOYBuAENGx9xaEPND+O9r+9y5WTjW38LwiAulSJfByqoQYxy
oU37xJKWiCyzbGmokt1lOc/rvl1WOIDtTPbfF2RizXXO0mlEmAPZgzOcb1yhGV0w
och2vXRcN3bUAhJV0efsPmOxoByJfedbItwKYQBDTwmWuAh0maRGLIWkATTegEss
tY/2uQzYi3NaK9nkBenu/l/2G4qdI9vvcJ7I+7zGKXDlQmmv8FZb3SreKb2hTyvx
r5mcJxtt70tY1sBXjVFT8ebZ7BUOFpW0E0/GggJe49USMtch1+vu+/oZdcWHga4k
YCbKSjKO3W5XHdsUUHsjr5sMg0EI8ZlDrpc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:07:26 2025 by rpki-client