Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d6ebb84-ff4a-3aac-8797-fe0bd8cbd883.roa
File:                     9d6ebb84-ff4a-3aac-8797-fe0bd8cbd883.roa (raw, json)
Hash identifier:          XMp2aGsTc9orlbSO2CKpU1Bc6dWhxX4Ger2Lqze/7bU=
Subject key identifier:   4D:4D:A6:B9:6D:A4:18:65:AF:E3:68:59:B2:B6:3B:A7:BF:BF:7C:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849929489D5CE0CA641614BD8E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d6ebb84-ff4a-3aac-8797-fe0bd8cbd883.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     33651
IP address blocks:        2001:55d:9054::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:89:d5:ce:0c:a6:41:61:4b:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=9fb75834-e924-477a-9b0c-49377e4c84d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:b1:79:da:59:b6:b0:a4:89:e9:d9:0d:09:
                    f1:63:91:4e:f9:d3:28:4e:d6:12:73:c2:19:3a:93:
                    f8:c3:59:77:52:e4:44:ad:52:87:3f:bf:1e:a4:1f:
                    5d:f7:66:7c:d6:09:a4:22:16:1b:56:55:eb:84:2a:
                    d1:66:91:45:7e:b2:2b:b2:cf:cd:48:f5:7e:18:72:
                    58:c1:6b:ea:40:01:45:2e:25:ca:cc:6f:38:e3:87:
                    c1:4c:fc:0b:ba:9d:4c:f8:22:63:27:c2:e1:55:fc:
                    ca:69:de:2c:5f:57:a5:2f:87:7e:f2:0c:34:c7:ca:
                    97:7b:4b:5d:f3:58:42:33:5f:5c:28:7a:27:8c:e8:
                    41:7a:97:ac:74:8d:13:77:dc:58:4f:c9:ba:1a:32:
                    10:b7:3e:ca:6f:be:e0:66:8a:82:62:c0:e3:9a:c0:
                    ec:a2:40:41:99:ca:d2:ce:51:38:34:ed:ba:8c:63:
                    0e:16:4b:d9:ed:c8:fc:20:09:55:1b:4f:a4:6e:a3:
                    2a:9f:81:cb:8a:a7:17:51:54:09:31:93:b4:02:88:
                    96:08:65:0f:cd:d5:08:5b:42:1c:12:78:4c:ec:3f:
                    48:aa:e2:f0:6c:85:8e:9e:4f:6e:b3:21:bf:19:83:
                    8a:0d:72:f5:a4:e5:bc:ad:99:20:98:20:31:b2:81:
                    ae:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4D:A6:B9:6D:A4:18:65:AF:E3:68:59:B2:B6:3B:A7:BF:BF:7C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d6ebb84-ff4a-3aac-8797-fe0bd8cbd883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:55d:9054::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b9:5a:8a:0e:ac:2d:26:ab:f6:35:83:62:b6:5e:9e:4a:33:
         fb:aa:91:f5:a1:95:d1:91:20:92:97:bf:ae:c7:8b:f2:21:88:
         69:18:b7:d0:48:20:0c:b3:67:82:82:6e:05:41:57:81:78:cc:
         b1:89:5d:01:d3:aa:59:fb:01:b0:a8:24:d6:c4:7e:a4:bd:1a:
         bd:54:c0:ca:d8:08:3d:04:59:c8:8a:c2:86:85:94:e1:ba:b2:
         18:64:cf:f2:b1:f8:99:da:bb:51:be:ad:5c:08:a6:b9:fb:3a:
         00:82:74:b2:e4:da:a5:b9:06:58:ae:21:26:a7:29:c8:d7:05:
         2c:da:d7:6e:00:9c:b3:ee:e8:87:d0:0f:78:98:e7:c5:99:aa:
         63:a6:29:ea:87:ff:b3:80:4c:3f:57:fd:ae:71:d6:39:77:e7:
         60:6c:b5:ca:55:39:7c:fd:61:d5:31:bf:97:76:f6:2d:0c:7d:
         fa:03:92:3a:4d:4b:11:2a:6f:e7:0b:70:a9:1f:b4:53:c9:64:
         be:c5:7e:da:62:da:60:91:8f:0e:7f:79:f8:de:c0:8f:5f:08:
         52:3d:55:45:97:19:84:3e:d5:e1:90:09:53:c9:72:11:4b:37:
         31:41:2a:9a:0e:79:de:5e:e5:ed:9f:a7:a2:0e:69:40:e5:69:
         7f:fc:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:17 2025 by rpki-client