Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5f2eb84-6489-31c1-9206-78634982cf17.roa
File:                     e5f2eb84-6489-31c1-9206-78634982cf17.roa (raw, json)
Hash identifier:          2IYeLsPviQj8+utwzGRr20mLVm0kms7bSkmwf1FiRro=
Subject key identifier:   7D:08:7F:A5:92:A9:BB:F4:A8:D2:C4:05:8A:1C:83:DF:0A:8E:6F:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCD03E2A1E442D577FAF94
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5f2eb84-6489-31c1-9206-78634982cf17.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        2001:559:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:d0:3e:2a:1e:44:2d:57:7f:af:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=64c67ed5-f45b-4f35-8186-78a1ac5a34dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:c2:0b:73:57:f6:f1:3c:17:93:7a:c0:3d:
                    17:36:9e:fe:df:d2:8b:e1:8b:4f:22:3e:75:fc:bc:
                    22:e2:70:20:df:f9:07:6e:0b:08:4c:00:f8:fb:9a:
                    e6:7d:e9:5e:13:23:58:b9:71:ed:7f:8c:e5:64:e0:
                    b1:dc:18:38:8a:88:13:dc:bc:be:0e:3e:8e:a0:f4:
                    b2:27:8d:4c:3f:89:9b:89:c6:b4:f2:8b:2b:c2:c9:
                    6c:0b:81:76:db:b4:cc:53:cb:89:ca:f0:45:64:98:
                    44:0f:de:fe:7d:81:b6:4a:c6:3d:99:3c:54:11:e1:
                    dc:a0:df:a8:63:c8:74:07:e7:e9:f5:26:7c:d2:f1:
                    d6:a8:c0:f3:1b:69:06:5d:96:32:9a:d4:68:0d:28:
                    af:1c:2c:54:a3:00:63:2f:73:06:78:7b:a7:ac:85:
                    1d:26:e3:41:88:ef:df:da:60:97:77:b8:61:2f:51:
                    c7:47:7a:20:8d:b9:cd:0f:73:34:17:bd:5d:18:20:
                    66:9d:97:fb:55:e5:b0:4d:28:24:87:30:62:55:94:
                    da:16:cf:76:1b:75:4e:5d:9a:20:21:58:de:f7:5a:
                    00:2d:97:53:c0:83:1c:d2:0f:f8:85:a9:bd:e1:da:
                    4b:de:ac:6a:d9:77:78:26:a6:18:03:51:18:bc:2f:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:08:7F:A5:92:A9:BB:F4:A8:D2:C4:05:8A:1C:83:DF:0A:8E:6F:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5f2eb84-6489-31c1-9206-78634982cf17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:9e:97:ea:4d:89:9e:db:03:e1:70:b4:8c:07:76:72:ba:9f:
         d7:fd:3f:dc:38:fd:41:16:54:57:5b:c2:2d:93:24:c4:ea:7a:
         b7:a0:fb:1d:9c:98:d2:c9:6e:ae:e9:bd:2b:9c:81:4d:6f:54:
         b3:d3:ac:68:a3:10:62:0c:07:7e:09:23:9b:9d:b4:b6:0e:d9:
         19:f1:06:78:f5:2b:39:b5:1b:1c:72:9f:89:cc:36:31:f9:41:
         7a:cc:eb:5d:95:1d:24:ae:a1:14:16:5b:06:24:ed:99:d0:1e:
         96:d1:91:4b:d1:70:a3:e8:94:0a:63:81:f3:2b:84:5b:52:ea:
         a2:dc:6e:68:99:a0:74:b3:95:b3:b3:0e:e9:0e:7b:f6:b5:53:
         bf:d5:bc:eb:37:28:40:1d:d9:44:6f:0b:a4:33:b1:47:22:d7:
         7b:ac:d9:fd:4e:b3:2f:2f:6a:6d:57:a3:7a:f5:6b:6d:a0:45:
         e8:50:14:c7:bd:6a:ae:80:c7:1b:c4:d6:ac:79:2d:1c:7e:f0:
         8a:b7:f2:fe:ed:b3:19:20:4e:d4:10:5a:c3:ec:ff:bd:73:ca:
         38:ec:04:dc:64:bc:02:9c:7a:af:2f:f9:af:60:53:09:5e:dc:
         ca:68:87:2e:74:83:03:64:09:66:89:0b:1a:64:de:da:25:d1:
         17:27:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:58:41 2025 by rpki-client