Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94fce04c-0e1f-34bf-b9bb-b46178ca65f2.roa
File:                     94fce04c-0e1f-34bf-b9bb-b46178ca65f2.roa (raw, json)
Hash identifier:          Y7fF+AqHvV+caiAsCXtSS0pSXFqzxDIpzHhpHEJ1RDA=
Subject key identifier:   4E:2F:DB:BC:B7:6D:F2:48:52:9C:72:D5:B3:AC:8F:81:FC:D6:8C:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6562C498B33BF5FD1ED00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94fce04c-0e1f-34bf-b9bb-b46178ca65f2.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        2001:559:82d7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:56:2c:49:8b:33:bf:5f:d1:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=2f8d9810-bdc4-4d14-9e03-f5bc6a0613f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:30:53:21:64:c4:d0:6e:63:b6:8f:8b:7c:
                    a0:3d:ac:2f:92:ab:ba:06:ed:48:c7:ae:4f:c5:16:
                    f5:8c:23:bc:e7:05:5b:bb:2a:01:70:c8:fc:52:d4:
                    70:c0:6a:0d:be:76:02:a6:2c:8a:fe:4f:63:ad:14:
                    f8:d8:bf:6b:77:6f:70:06:b8:6e:28:1a:76:5c:2f:
                    c3:e6:15:e5:f8:97:3b:bd:9c:cd:c3:68:d7:d9:4e:
                    50:87:72:b4:43:74:f8:6d:34:92:71:3c:5f:aa:15:
                    6f:02:d8:72:25:d2:25:a6:6b:0f:95:bd:35:4c:cb:
                    6e:b2:c4:0c:92:13:98:07:82:38:f5:51:33:c4:2a:
                    59:94:99:1e:37:4a:fa:a0:80:cb:d2:9c:17:01:4c:
                    d3:c3:50:e1:c3:cc:cb:cb:8c:2b:ce:29:12:f9:f4:
                    79:1d:31:08:e3:13:38:41:5f:cc:74:6c:18:2a:3c:
                    b5:5e:ac:73:7e:57:68:ed:53:68:60:6c:07:8c:fb:
                    be:80:6c:62:c3:25:9b:e0:25:f6:0c:9b:72:ab:2e:
                    09:8d:17:dc:98:b2:7b:a2:3a:f1:ef:aa:d9:61:5a:
                    ea:07:b2:04:14:de:95:9c:d2:32:2f:87:ea:76:29:
                    8d:50:a7:aa:59:49:be:58:c0:8e:b6:69:ba:61:6e:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2F:DB:BC:B7:6D:F2:48:52:9C:72:D5:B3:AC:8F:81:FC:D6:8C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94fce04c-0e1f-34bf-b9bb-b46178ca65f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:82d7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c4:0e:01:10:2c:4a:89:ef:5e:f9:97:3e:ed:31:dc:f4:e7:
         d8:28:ce:1f:4f:4a:60:e8:d0:b4:29:f8:16:bb:0d:96:a7:e8:
         a0:4a:0a:24:df:ca:27:33:1b:42:8a:de:67:d9:59:4a:5e:2e:
         3b:48:e5:ac:e5:ca:e9:c4:a3:e6:d7:86:f8:80:4b:8a:42:19:
         06:16:c3:87:e5:b8:f7:b8:ba:b0:3a:db:f1:8b:22:53:f5:b4:
         81:05:42:37:b9:ce:05:82:55:11:d3:d1:6c:36:fc:44:0e:0b:
         ba:a0:f2:08:3c:ae:6d:b3:8f:ef:9d:c7:51:47:ea:ba:b4:a3:
         ca:5c:3f:c4:45:c3:e2:9e:9f:bb:9f:db:08:81:58:e1:fc:eb:
         45:c3:02:da:f1:26:58:b0:50:f7:33:8e:76:e7:68:d6:80:16:
         ed:3d:c1:59:f5:dd:7e:c4:b4:8f:d4:5c:55:8f:de:c1:f0:0c:
         81:3f:3b:d1:4b:7c:e4:4a:b9:7a:c7:f2:08:ec:7f:54:55:d9:
         54:89:d8:e3:33:96:61:e1:94:e8:78:c8:6a:8b:a4:52:f0:8b:
         7f:d8:8c:3f:35:8c:ac:2a:40:0e:bf:92:34:12:c8:6a:22:39:
         40:9e:ff:6e:ee:4e:70:5a:dc:8f:38:e6:fa:ae:c7:a8:17:f7:
         61:08:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:28 2025 by rpki-client