Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03f231c6-f62a-34ab-8c8c-b84f25ea48f5.roa
File:                     03f231c6-f62a-34ab-8c8c-b84f25ea48f5.roa (raw, json)
Hash identifier:          JAFyO/tkH8ZR7zMK0/mfSs1HopShhU9oaWk/OsAY5H4=
Subject key identifier:   BF:8D:B1:26:6C:DA:61:8C:BB:48:D2:BD:7A:2F:96:CC:08:39:5C:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA513EB4D3B499E1BF3BBF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03f231c6-f62a-34ab-8c8c-b84f25ea48f5.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2001:559:3aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:13:eb:4d:3b:49:9e:1b:f3:bb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=4ebcd89d-1380-49e8-99ca-4dc7529de9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c5:db:43:ef:ec:e0:aa:0b:c4:9a:57:3b:38:
                    61:99:ba:3b:96:67:f3:73:45:6c:c9:af:40:28:d3:
                    25:dc:7e:be:e8:89:10:50:e1:b9:e5:fb:cc:9e:d7:
                    5f:6a:f5:e9:5a:76:ea:4b:32:8f:70:16:95:10:1c:
                    82:d1:82:cd:14:b3:e8:13:28:71:31:b4:cc:10:71:
                    13:bd:7a:4f:3b:57:77:6d:c6:94:a6:ac:b6:9f:81:
                    3d:bb:10:a9:f7:6b:72:1a:d3:15:e6:83:b4:26:f4:
                    41:e0:c4:cf:c6:a6:84:f8:b6:a8:1c:d9:e5:b5:d1:
                    5a:33:ad:be:cc:bb:fd:15:f9:cb:9b:d8:1c:7c:07:
                    63:2c:13:4c:a4:42:10:d9:e3:64:22:d3:18:44:f7:
                    18:5b:ed:4d:06:c7:f6:9f:ad:db:7f:4f:de:c9:77:
                    8d:a7:80:bb:0f:dc:77:35:0f:0e:fc:14:05:90:5b:
                    03:00:ed:6f:07:66:a1:11:ec:7b:ed:96:d4:2e:4b:
                    d3:ec:c0:e6:18:43:7d:6e:cc:a2:05:af:62:25:2d:
                    a7:26:80:77:8f:f9:8d:bd:3c:e2:60:86:09:7d:d0:
                    04:2c:09:d7:c6:e1:a5:06:76:e3:e3:d2:09:b0:f7:
                    b2:c2:76:97:d1:55:d7:74:e5:af:59:53:b2:a0:84:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8D:B1:26:6C:DA:61:8C:BB:48:D2:BD:7A:2F:96:CC:08:39:5C:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03f231c6-f62a-34ab-8c8c-b84f25ea48f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:e1:ec:8d:cf:cf:c6:d4:b1:56:b5:d8:f0:d7:04:8a:44:
         93:81:bc:6a:e9:53:e5:27:d8:ec:ce:1e:ac:c9:0b:88:73:92:
         d2:0a:e3:9b:bf:bb:20:3b:18:1a:e8:dc:1d:ca:b8:77:36:04:
         49:e6:e1:bf:d0:08:32:a0:21:19:0e:73:2e:a7:6c:b8:4e:a5:
         40:48:ed:a8:89:2f:93:2e:dd:c0:a7:73:57:1b:4e:e9:51:bc:
         0e:83:10:58:05:48:ea:7a:31:92:29:53:a8:d3:b7:1d:2c:c9:
         21:d2:dc:5c:88:d0:a5:0b:31:4e:80:df:1a:97:69:5d:79:e5:
         d9:af:4f:1a:fa:5f:f1:b9:14:4b:84:65:93:50:c5:d2:ba:9d:
         e6:2e:a0:ec:eb:f7:84:0a:6a:09:54:d1:2a:03:7e:38:dd:0f:
         21:8a:3b:9e:eb:83:61:a1:dc:af:ac:6e:ee:50:f8:f0:3f:3a:
         ce:b4:f9:0b:fe:47:e6:92:04:bc:45:0d:51:ed:32:82:be:01:
         ff:cf:07:e0:74:80:ff:f7:16:69:83:c1:7b:5e:dd:02:01:d9:
         25:f7:27:de:52:f8:6a:0c:6f:5b:39:c4:c4:58:d1:1b:c0:1b:
         52:35:f3:b2:98:0a:41:a9:c2:b3:60:76:e4:25:2b:36:a1:da:
         0e:3d:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:18:28 2025 by rpki-client