Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/548c2bdd-589f-3911-b07e-edf80a33426e.roa
File:                     548c2bdd-589f-3911-b07e-edf80a33426e.roa (raw, json)
Hash identifier:          zmrUcURMM5+tSCV8H4UHg+nu/gUQX5wElTd0wGdKEao=
Subject key identifier:   03:0B:48:AB:62:1C:1D:7B:8D:76:67:26:5B:96:51:CD:A7:5D:FE:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AA9C0CE54D0AFCC3D40E73480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/548c2bdd-589f-3911-b07e-edf80a33426e.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     33668
IP address blocks:        2001:559:5a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:ce:54:d0:af:cc:3d:40:e7:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=0366b24c-2bf8-4d85-85e9-b40980205a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5f:0c:41:fa:50:aa:54:4a:c3:5e:a5:5d:4c:
                    2c:77:50:05:b3:85:09:ea:6e:b4:03:99:19:7a:28:
                    d5:b3:75:4a:17:e2:fd:6e:2f:3f:21:51:cb:72:fc:
                    52:b8:fd:b3:cd:b2:51:42:2f:5f:61:6e:55:07:df:
                    a3:32:bd:e4:48:5f:5c:de:f0:ed:48:6d:0d:11:80:
                    9a:eb:5b:47:93:e4:9c:3d:fe:ff:62:4a:61:48:25:
                    fc:cb:5d:33:a9:af:4b:39:e8:00:14:68:5c:62:4b:
                    3c:91:72:0f:7d:c1:ba:e0:ab:d3:a1:b0:92:e2:db:
                    d4:ac:36:25:12:b8:c7:b7:cc:f0:0f:80:cf:4b:2f:
                    86:8a:ac:ca:bf:9f:18:37:5c:0e:d8:e9:0e:aa:aa:
                    7f:ee:94:5a:b5:04:ec:e0:50:77:cb:24:69:0b:e6:
                    c7:c5:c2:15:63:22:f8:63:4d:1f:91:0d:91:89:e6:
                    37:ac:98:12:8c:3b:7c:c8:65:f0:ed:bd:67:be:c8:
                    0e:96:5c:25:50:c0:97:19:de:cb:f3:5b:11:cf:e9:
                    c5:e2:96:83:38:69:27:01:34:8b:78:80:4e:f9:4a:
                    b2:4c:c5:77:ef:11:1c:b4:ba:18:84:2f:58:c0:1b:
                    6f:76:b6:11:9c:48:67:1d:99:ca:c9:fc:3b:ed:38:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0B:48:AB:62:1C:1D:7B:8D:76:67:26:5B:96:51:CD:A7:5D:FE:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/548c2bdd-589f-3911-b07e-edf80a33426e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:69:ab:d4:25:a6:ef:2b:60:38:87:ec:ab:2d:10:0d:f0:3e:
         e8:d0:93:a2:f4:ba:d8:1f:35:98:a4:b1:c8:2a:65:8b:96:00:
         d4:d1:79:81:43:56:9a:b9:89:b1:62:5d:32:8d:f0:0e:88:19:
         c6:21:e9:68:07:69:3b:19:9f:2e:0b:b7:63:c8:4a:d3:bf:3f:
         09:ee:2c:cf:c8:f0:c3:f3:d5:72:dc:e8:35:e0:9e:51:c0:0e:
         07:52:f9:54:d5:34:9a:b8:2c:85:10:c6:5a:ea:54:94:84:c0:
         cd:fa:03:45:52:c7:3b:a0:d4:07:6b:82:0e:4d:ba:da:9b:7d:
         8c:99:52:86:81:20:e5:7b:0f:8a:35:43:a4:12:02:d1:6e:76:
         94:cc:64:c7:ff:15:29:2d:27:0b:52:95:7b:4e:7f:b6:46:33:
         e1:5e:9a:18:a9:ce:df:a3:0a:67:53:53:1e:ec:e8:a0:a0:88:
         7b:54:91:97:ef:9b:69:df:74:6f:5e:49:8c:ac:67:00:9d:78:
         3d:55:c1:47:89:5e:fd:4a:3d:84:61:ef:65:e6:c2:be:03:21:
         f3:c1:be:f0:99:d1:ef:19:16:01:c7:30:69:fd:b2:b0:15:10:
         0d:25:f7:53:18:1b:45:02:d9:d0:f4:eb:55:8c:fe:7c:05:3c:
         dd:7d:72:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:01:51 2025 by rpki-client