Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ba0a39-67f2-3e24-80dd-2783977e05eb.roa
File:                     f0ba0a39-67f2-3e24-80dd-2783977e05eb.roa (raw, json)
Hash identifier:          IasbCpuEg4IKaYvRiEhpJ5fZDYTq0yqAo3HB4U3uHpw=
Subject key identifier:   64:53:13:6A:74:A2:FC:93:DA:7D:54:90:E6:94:70:24:85:12:57:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB93DD7817EEBA0FA206D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ba0a39-67f2-3e24-80dd-2783977e05eb.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        2001:559:8264::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:3d:d7:81:7e:eb:a0:fa:20:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=7376cc09-c9bb-4a1d-87ee-82a4f5cdcc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:1d:61:a6:a0:37:79:5c:9b:7f:08:9f:32:
                    e3:f2:5d:21:87:4a:4e:aa:02:a6:a7:9a:21:54:8f:
                    54:30:21:61:63:0a:a2:c0:c3:66:ca:64:b0:a8:b1:
                    8e:cf:53:4a:3c:3d:fc:b9:fb:18:6c:e9:f8:10:de:
                    bc:d1:e2:c0:f2:48:2b:90:e9:2e:12:d9:fc:4d:31:
                    3d:cb:1b:aa:e1:14:b3:42:09:0d:d1:d1:7e:81:bb:
                    9d:a1:26:d0:15:e0:3c:fa:11:57:cd:e5:a1:f0:f7:
                    18:f6:a7:43:4b:ad:52:f6:a0:e5:23:11:20:89:0b:
                    7f:a8:2d:c1:86:aa:48:44:7c:c0:42:47:f1:fc:d8:
                    53:6a:f5:37:5a:79:34:28:ab:2d:34:0c:38:05:2f:
                    a9:15:62:05:c3:51:61:5f:61:9e:3b:63:80:0f:2e:
                    d3:56:09:fe:1c:ba:48:7a:3f:e7:82:a4:eb:b0:ee:
                    28:6f:fa:d7:c2:b5:21:7b:0d:5e:57:c9:0e:25:79:
                    3a:d2:20:31:12:74:06:6b:89:16:d6:5b:41:d5:4b:
                    be:1d:7e:cd:85:c6:ac:05:48:31:ce:c3:e1:50:ce:
                    74:1f:a7:95:70:25:84:ed:e4:7e:61:7e:72:7d:4f:
                    19:ad:f7:83:86:cd:2b:d4:b3:3b:c7:9a:37:eb:6e:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:53:13:6A:74:A2:FC:93:DA:7D:54:90:E6:94:70:24:85:12:57:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0ba0a39-67f2-3e24-80dd-2783977e05eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8264::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:07:89:90:4c:26:86:a6:39:93:bf:18:17:b9:fa:4e:3f:f7:
         7c:75:c0:7a:c8:10:47:29:06:2c:f5:a9:67:26:5a:16:12:60:
         a3:5d:cc:75:cb:f7:b5:4d:77:06:c1:3f:46:82:8d:73:79:5a:
         4d:3e:7f:25:c7:cf:2c:a6:ab:02:cf:8d:92:7e:4b:89:ab:0b:
         a1:9f:28:45:33:96:d7:b9:50:24:5c:b5:f7:e5:8b:87:d0:da:
         23:4b:69:26:d8:7e:66:fa:e2:97:52:4d:0f:af:33:c4:2a:ff:
         04:4e:e5:ba:72:41:43:7b:d0:f8:6e:d5:55:32:59:c9:d7:12:
         d9:0e:52:0d:18:f8:cf:ef:5f:0d:06:dc:79:77:c5:5d:09:27:
         17:40:be:e8:16:6c:c7:da:f4:05:a0:38:49:65:9d:3c:68:78:
         3f:30:d7:c0:16:c1:80:ef:e1:5d:87:aa:a3:d9:f7:90:bd:a1:
         fc:8a:57:63:2d:05:51:05:31:c5:9e:53:d5:ac:12:4d:d4:3c:
         03:04:f6:15:ad:44:88:77:dc:9e:d6:62:07:da:bf:ff:b8:fa:
         d9:a5:1a:ce:5d:20:1b:18:d6:2b:f2:e4:be:a5:8e:70:2c:9c:
         aa:d9:aa:f6:5f:c8:23:c1:e0:76:bb:bd:2d:2e:a5:49:71:6c:
         58:31:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:37:16 2025 by rpki-client