Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec374cb-6511-3738-8a08-70fec187bddf.roa
File:                     bec374cb-6511-3738-8a08-70fec187bddf.roa (raw, json)
Hash identifier:          0Q2OCGhBNQL6WPUVtxOo7Wu+B2M+zXiKCgzP9HUSuH0=
Subject key identifier:   9C:B5:6E:DB:FE:8C:D2:01:B3:6B:11:7D:25:D2:C7:4B:2A:5A:9A:3F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B9E5B9A266FF21AD68D812618
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec374cb-6511-3738-8a08-70fec187bddf.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33668
IP address blocks:        2001:559:44::/48 maxlen: 48
                          2001:559:330::/48 maxlen: 48
                          2001:559:361::/48 maxlen: 48
                          2001:559:8480::/48 maxlen: 48
                          2001:559:8730::/48 maxlen: 48
                          2001:559:c1c0::/48 maxlen: 48
                          2001:559:c1cd::/48 maxlen: 48
                          2001:559:c1ce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:5b:9a:26:6f:f2:1a:d6:8d:81:26:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=3151d556-2ca9-4155-800c-9cd44ac1d4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2d:94:e0:7a:a0:1f:82:96:85:1d:4e:0a:ca:
                    bc:b2:c5:f2:20:0a:a6:0e:43:ca:79:34:b8:e2:a0:
                    76:8e:f9:9e:b4:ad:57:ad:e7:c3:f9:9b:37:84:61:
                    fa:37:fb:19:81:7f:48:8a:27:11:dc:7e:98:77:10:
                    11:b1:6c:a5:bb:a0:5e:0e:c0:2e:1c:6b:09:5b:9e:
                    30:14:37:55:59:1e:45:a7:aa:84:66:17:d0:68:2f:
                    b7:96:14:a9:ff:a8:c7:65:2a:be:40:eb:d2:7d:ab:
                    21:7b:ef:d0:8a:53:63:aa:f5:ae:4f:65:71:90:0d:
                    39:d9:71:84:7e:56:da:94:f1:c5:8b:6c:16:7f:f6:
                    2b:6b:6d:dc:fc:9a:af:0c:99:ff:c4:02:29:1b:89:
                    4e:1b:2f:7a:a1:a0:66:e1:27:f7:9c:5b:90:d3:e5:
                    08:80:5c:e3:a0:26:cd:30:1b:44:ce:99:66:8f:a9:
                    08:1e:5e:f0:5f:ad:5e:e7:5d:a9:b0:05:9b:5f:34:
                    2d:73:3b:52:ef:0a:cc:79:3d:ac:b4:79:98:a7:68:
                    3a:a0:20:fd:0b:ee:a8:90:c1:67:5c:d1:27:20:5b:
                    20:0a:b5:51:c8:5c:26:65:09:51:29:88:63:26:0f:
                    f5:af:3b:85:46:8a:a8:d6:22:be:b4:0a:d8:e9:0e:
                    bf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B5:6E:DB:FE:8C:D2:01:B3:6B:11:7D:25:D2:C7:4B:2A:5A:9A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bec374cb-6511-3738-8a08-70fec187bddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:44::/48
                  2001:559:330::/48
                  2001:559:361::/48
                  2001:559:8480::/48
                  2001:559:8730::/48
                  2001:559:c1c0::/48
                  2001:559:c1cd::-2001:559:c1ce:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:5e:77:80:87:69:cb:1e:6c:b9:81:93:ce:30:66:7c:be:8e:
         38:8a:54:3f:0d:5a:37:9b:29:fb:42:da:16:b1:58:eb:7f:31:
         17:64:b1:77:05:3b:02:4f:52:3f:54:19:98:9f:3a:a0:d2:18:
         e4:ba:5d:56:72:7b:11:82:e1:ed:3e:73:bf:7f:f2:3a:59:fc:
         56:b8:fd:6d:cd:1e:8a:21:9c:1b:eb:7f:c6:23:1e:53:c2:8c:
         4b:37:97:c2:03:5f:35:67:23:a2:8d:21:3b:8e:86:06:f5:a1:
         a6:a4:35:d8:e4:b5:75:f9:40:e9:8b:6e:1f:36:f3:82:c9:00:
         37:fd:95:ee:f8:3a:8b:4e:30:86:c0:f5:cd:29:76:da:3e:97:
         fe:0f:f8:98:2e:67:a9:cb:95:28:3e:d0:a5:c8:5c:ca:eb:ab:
         e7:3d:a5:be:db:fe:39:b8:ce:6d:75:97:2e:3f:d9:2a:4f:55:
         cd:99:f1:ef:19:2a:1c:b6:44:fe:97:4f:46:48:f2:71:f0:96:
         65:b1:eb:e1:e7:11:fd:b0:f7:df:96:3a:05:82:6b:3d:89:57:
         b4:9d:41:28:18:78:6b:8d:31:fe:31:09:3b:24:f4:16:3b:8b:
         3f:98:f1:7a:76:e6:d7:a2:1f:8f:73:3d:5f:0a:aa:8b:8e:0f:
         83:8a:b8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:06:29 2025 by rpki-client