Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcd01f25-758a-3bda-9734-853d6c7da97e.roa
File:                     fcd01f25-758a-3bda-9734-853d6c7da97e.roa (raw, json)
Hash identifier:          V1MEWtVl/21U/juOm28Aeks9peiVc5peu2WFC5J3XBU=
Subject key identifier:   D5:C2:0F:37:8D:40:F1:A8:13:74:44:89:FF:D3:A7:04:94:79:D7:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBCEE6404A7F1BF06DB380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcd01f25-758a-3bda-9734-853d6c7da97e.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33662
IP address blocks:        2001:559:80e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:ce:e6:40:4a:7f:1b:f0:6d:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f4ff094b-848a-44b9-93a4-5f09df61daa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:af:2d:4a:3f:0a:d1:53:4f:ba:9d:7e:d1:46:
                    ac:05:23:e9:61:3b:c5:73:a1:00:2c:fc:d4:21:8b:
                    e1:9d:86:13:86:b4:8e:8c:1d:f2:ff:99:89:05:28:
                    90:a5:8d:65:ec:ec:c4:39:af:45:85:a6:fe:0a:9c:
                    65:25:37:11:18:a1:89:5c:81:c8:94:3f:90:53:d1:
                    a0:c1:ab:08:68:a1:0f:3b:b3:71:0a:95:d6:e9:b2:
                    76:04:3b:f1:5e:d1:e5:3c:88:58:62:96:d9:d7:d4:
                    31:c6:e3:5b:63:a0:b8:8c:26:c2:a4:85:19:fe:cf:
                    a9:54:08:c6:28:7b:ed:80:68:0b:4e:af:98:f0:8b:
                    71:65:aa:dd:7b:79:25:9d:9c:58:b1:c5:df:f6:e6:
                    c5:5c:3e:d3:b3:94:9b:bd:a8:9a:aa:9f:0a:bd:d3:
                    f7:01:7f:f9:87:8b:96:75:37:2d:b5:6e:20:6f:d5:
                    36:45:05:19:2e:09:8b:d6:78:36:7e:0f:4c:38:77:
                    79:10:44:d5:8c:a2:73:94:e2:5e:79:57:b8:ee:2f:
                    5e:79:d6:48:52:50:2d:e1:ae:35:d2:1e:ed:cd:bf:
                    cd:fd:b1:c9:c5:32:f3:13:62:29:b3:db:c3:b3:03:
                    b2:51:91:0c:04:65:11:e0:a2:3e:1f:bf:54:51:bb:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C2:0F:37:8D:40:F1:A8:13:74:44:89:FF:D3:A7:04:94:79:D7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcd01f25-758a-3bda-9734-853d6c7da97e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:b5:a3:72:ab:d1:05:45:f2:b0:16:c6:51:ed:db:3a:84:63:
         45:b3:71:71:df:ac:81:dd:61:e1:3e:c3:2d:de:be:73:ab:38:
         45:89:82:3b:7e:ee:45:78:fb:17:e8:ed:12:63:3c:96:04:ae:
         35:d0:36:48:f7:3b:13:93:27:14:02:97:ce:da:80:06:a1:42:
         77:d1:4c:aa:85:f1:43:11:2f:bf:2d:b7:cc:e7:46:52:c8:13:
         39:57:e7:fd:1a:a8:d4:0e:1d:b7:86:a9:db:9c:78:d1:93:c7:
         bd:62:35:26:4e:6f:97:e3:4a:4e:70:52:0b:7a:1f:7a:f6:f4:
         f2:2b:66:6e:18:0f:aa:9b:0f:c2:96:6f:87:e0:79:e3:ee:a3:
         d6:a7:d1:79:70:54:e1:82:06:cf:9d:b7:05:81:5b:bd:8f:18:
         db:91:0c:12:9a:cc:5f:9b:69:3a:0e:e4:3c:24:47:49:2e:25:
         d4:bd:a1:c9:07:5a:ee:64:3d:37:b3:f2:1f:29:73:47:c2:38:
         60:9f:00:f9:c8:90:8f:d6:da:b6:e9:2b:da:5a:74:79:dd:62:
         df:52:24:d3:99:a9:10:7e:5a:39:f2:f7:dd:d5:b5:1b:72:78:
         14:ce:d0:97:0b:57:df:ce:9a:ff:88:85:ad:5c:83:4c:d5:b0:
         6e:76:b0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:58:43 2025 by rpki-client