Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc5c64da-cb8a-3be9-9d12-8805d28c12b1.roa
File:                     cc5c64da-cb8a-3be9-9d12-8805d28c12b1.roa (raw, json)
Hash identifier:          KUA+bq7HtirDXoCueevOAaNb6tHGnHuRD1BI6gP1g80=
Subject key identifier:   DF:93:0D:8B:15:69:6C:70:6F:84:37:17:22:85:E6:3B:06:7A:EE:51
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA59819469F13CE5FE56880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc5c64da-cb8a-3be9-9d12-8805d28c12b1.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33657
IP address blocks:        2001:559:c526::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:98:19:46:9f:13:ce:5f:e5:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=0747dd4c-4e32-478d-a0c2-47a2b437d41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:8f:c7:a1:5e:4f:2a:02:bf:a5:8e:19:be:
                    c8:9e:0f:21:c4:fc:5e:7c:46:f1:e4:dd:26:40:87:
                    bd:bd:52:0b:36:a8:a9:a1:71:2a:17:9b:2c:bc:84:
                    b0:2d:8a:89:1b:4f:ac:a0:47:79:0c:dd:17:8b:c4:
                    c4:e3:4f:67:4a:f8:f4:1d:d7:0a:eb:d0:b1:10:e7:
                    5f:29:b2:ef:9c:d5:b8:a0:0e:6a:45:0d:9f:9a:19:
                    80:d7:e3:b8:0e:84:05:ca:f9:93:a3:f1:d0:0e:86:
                    5e:fa:dc:ed:cc:83:f3:42:79:3e:26:30:b8:84:fe:
                    fd:1a:f6:a8:55:ce:35:22:e9:0e:3a:9e:f0:63:2f:
                    f9:8a:81:7a:44:8e:43:67:51:cd:d6:51:33:e5:a2:
                    75:a0:22:cc:8d:72:0b:a3:7f:2c:41:14:76:3c:ca:
                    fa:8a:fb:ab:8b:93:13:d2:68:49:af:61:75:51:36:
                    38:de:95:b4:ef:34:4e:d3:87:c5:20:8c:70:a1:1b:
                    53:e7:14:ef:cf:7f:eb:7e:fe:f7:cc:9e:67:e2:00:
                    e5:2f:44:9a:c7:e5:4c:b0:34:33:d5:ee:c4:44:b0:
                    d0:3d:49:31:f4:f7:19:21:56:f1:0c:a4:6c:09:40:
                    42:92:0b:19:e5:84:84:99:4c:d0:a9:d8:9f:3a:19:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:93:0D:8B:15:69:6C:70:6F:84:37:17:22:85:E6:3B:06:7A:EE:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc5c64da-cb8a-3be9-9d12-8805d28c12b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c526::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ed:ba:8a:95:97:e1:35:80:41:a3:91:78:db:b3:e1:3b:ac:
         25:ac:6b:e6:36:75:20:67:e0:e5:fe:f8:e5:06:30:95:96:5d:
         b8:1b:71:3c:bf:db:1f:4d:62:57:19:0e:d6:b6:d5:5b:18:f6:
         64:2e:2a:a0:7b:0b:4f:fc:a2:56:83:2a:5f:90:7a:55:7b:74:
         0e:0f:8b:0a:2d:5c:db:39:c5:f7:1e:ab:48:f2:4d:c6:c7:3b:
         0d:e5:54:84:69:2c:93:6e:14:bf:c7:68:bc:c4:87:45:e6:ec:
         b4:1b:66:62:a9:fb:14:b3:6b:36:87:5e:cb:34:91:b4:47:45:
         62:ec:af:69:4d:bf:94:34:f8:70:d1:47:dc:09:21:85:78:cd:
         a9:32:2f:d4:79:97:0a:88:c7:66:9c:26:a4:28:0d:b5:fb:35:
         19:6e:31:54:fc:04:dd:82:1a:cd:84:1c:b6:9b:a6:ca:93:80:
         b6:28:57:cb:60:e0:a3:91:8c:bd:dc:d7:52:a4:10:57:95:de:
         ac:64:92:e5:42:aa:e8:3e:f6:54:fd:f9:05:d4:d9:24:2b:e1:
         4f:8a:89:f4:9a:09:c3:a0:c6:26:d1:ce:31:eb:a4:e1:ab:fb:
         17:6f:fe:10:0c:a4:c1:9c:e7:ff:64:71:22:1c:21:0d:3a:54:
         c2:e5:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:33:27 2025 by rpki-client