Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe432ad-99cb-3d40-adc3-e1ce8b8126f0.roa
File:                     efe432ad-99cb-3d40-adc3-e1ce8b8126f0.roa (raw, json)
Hash identifier:          MiVGYJIJBizxlycucjWk0BZQ0ntsJzglV3y4MXylzO8=
Subject key identifier:   D1:85:D1:11:D4:DC:B3:D6:76:27:2B:2C:63:BC:24:31:4A:13:1E:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7DB28CDFD63B548DBEF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe432ad-99cb-3d40-adc3-e1ce8b8126f0.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7015
IP address blocks:        2001:559:80bc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:db:28:cd:fd:63:b5:48:db:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6a11d9e7-3d8e-4d13-b051-828eb8e709f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:fd:ff:bb:a3:6a:65:65:23:7a:77:63:f1:
                    9e:2d:39:39:da:e3:f2:db:3b:20:e3:a8:cc:02:8e:
                    90:32:9a:96:04:ab:b2:9d:98:21:ff:f2:43:84:4a:
                    ea:42:9e:3c:63:8f:d6:86:5a:be:65:55:4c:01:de:
                    69:1f:37:2e:6d:22:e5:38:51:3b:37:f5:42:c1:00:
                    db:de:cc:e7:4d:dd:f1:12:b6:c9:e6:31:27:40:7f:
                    78:37:8a:51:92:90:46:7c:b3:ce:5b:32:5b:1e:8f:
                    e1:3c:d7:9b:7f:17:a4:c8:80:ee:ad:1f:5d:65:00:
                    2a:20:c4:3d:ce:ad:57:25:7e:c4:25:ce:4e:b0:e7:
                    9e:7f:ae:52:59:2e:f6:2a:ce:c4:ef:a0:a9:a3:ce:
                    57:e9:f7:26:43:08:d9:66:70:ba:8a:ba:71:c5:fd:
                    49:a6:05:e0:c9:51:e8:55:fb:f3:7e:67:5f:86:ef:
                    0d:fb:cf:5f:cd:cd:9b:07:27:58:9b:13:18:48:d6:
                    8b:82:db:7d:f3:58:0a:0f:a5:99:7b:87:4f:88:44:
                    48:f3:18:c7:c5:fa:82:b3:05:c1:77:6a:a5:b3:06:
                    8f:42:ff:0c:98:4b:a8:83:4a:8f:a6:98:d2:c6:1d:
                    95:35:c2:52:46:4e:40:47:73:a9:52:71:07:d6:33:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:85:D1:11:D4:DC:B3:D6:76:27:2B:2C:63:BC:24:31:4A:13:1E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe432ad-99cb-3d40-adc3-e1ce8b8126f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:63:66:5d:a4:ba:14:2e:8a:0a:76:86:f9:95:ea:83:c4:c7:
         72:21:7e:5f:ef:4a:38:23:e6:23:03:08:3e:98:10:d4:24:df:
         a5:b1:56:d8:70:4a:50:df:52:c1:5f:a9:0a:1c:91:b6:9b:cf:
         0c:b3:e8:27:3f:3f:42:c6:65:ad:a5:be:04:e1:91:fb:46:93:
         87:96:a8:33:3b:17:9c:07:fb:70:ff:d6:4c:10:f6:f7:f8:c0:
         57:98:e9:65:12:24:95:0a:c8:3c:6f:c6:c0:a0:e6:34:ca:4f:
         99:f0:65:25:5f:eb:eb:1e:13:e1:70:07:1d:87:a1:f6:88:21:
         bf:74:c7:c4:8b:ac:f9:f8:2f:d9:cf:6e:8c:ba:04:d8:83:fc:
         8f:fd:27:b6:c5:9a:e4:cb:ae:62:92:1d:b8:28:d0:0f:bb:76:
         cc:20:c2:93:e9:30:3e:04:a7:00:34:b6:ae:ef:68:f9:ce:1e:
         46:85:d8:67:a8:fe:f2:9d:5f:2f:c1:5f:50:3f:71:94:a5:92:
         a2:e0:00:30:9c:0d:b2:d8:df:e7:9e:97:78:ad:07:6b:9d:2c:
         c0:65:e1:bd:f2:52:c4:c5:e9:4c:f4:84:7e:fe:73:c2:81:d7:
         d4:aa:50:0d:9c:b4:d9:7f:4f:72:c2:b1:1c:d3:55:90:2c:b3:
         07:7b:3b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:04 2025 by rpki-client