Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/169b81ab-6f22-3658-92bc-a1ef28d4a3c2.roa
File:                     169b81ab-6f22-3658-92bc-a1ef28d4a3c2.roa (raw, json)
Hash identifier:          m9IMuJLTKMrYuH+0vV3nbIf2z2kz2H5hLpbMjNzD5D4=
Subject key identifier:   7D:07:40:66:4A:3F:61:1B:8D:8D:40:96:77:CB:B6:45:0D:A2:9D:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6CDF661B96CEDFC33C240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/169b81ab-6f22-3658-92bc-a1ef28d4a3c2.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33659
IP address blocks:        2001:559:8765::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:cd:f6:61:b9:6c:ed:fc:33:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=057f5e09-dd97-4003-9e06-d8cf14dc6d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:18:4e:b2:79:55:30:e9:bd:48:6d:d2:b7:
                    44:fe:66:d7:0c:53:ba:ca:6f:fd:8e:73:40:1b:38:
                    40:f4:e1:75:b0:ec:bb:b5:0f:bb:e9:e8:3e:22:3e:
                    6a:a1:9c:5b:b6:69:5d:b1:05:d3:42:62:1a:6d:3a:
                    0c:23:c6:44:e5:da:a8:ef:ec:59:8e:f1:37:4f:ff:
                    d6:2a:9c:7e:80:4a:4b:72:33:00:81:22:d5:3c:41:
                    e4:a8:a3:53:5d:a9:33:02:10:77:f9:32:97:b2:a0:
                    17:71:24:3c:86:07:70:dc:43:5c:b6:ed:bd:f9:bd:
                    91:5d:04:32:d5:06:8e:10:f9:8a:d9:d1:7c:98:25:
                    b5:49:1b:ba:8d:9a:8a:9d:e3:09:52:2b:87:e0:33:
                    c9:08:ec:e2:63:e1:70:82:aa:77:b0:c4:68:6b:2d:
                    23:a6:40:2d:b8:6b:48:c9:64:ca:75:a5:cd:c0:cb:
                    9a:8e:5e:60:99:a3:d8:0b:16:de:fb:dd:cb:72:f0:
                    b8:36:e9:83:17:13:98:08:7e:78:56:16:3c:8c:f6:
                    07:da:3e:2a:5b:84:56:27:7a:12:b3:55:6c:f6:e6:
                    b0:71:09:5b:26:62:d6:06:6a:9b:9c:02:13:2c:f5:
                    dd:76:c4:8d:ff:25:32:6a:94:96:1c:48:5d:e9:3f:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:07:40:66:4A:3F:61:1B:8D:8D:40:96:77:CB:B6:45:0D:A2:9D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/169b81ab-6f22-3658-92bc-a1ef28d4a3c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8765::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:69:69:69:c9:23:9e:4e:52:b4:ef:40:f4:c2:38:c3:f7:c3:
         68:f5:2c:a7:ad:17:bc:fc:01:47:97:df:14:df:cc:6a:9b:13:
         f1:12:3c:d4:59:3c:fe:fa:51:7f:67:2e:d6:97:31:74:50:09:
         38:61:d6:f8:55:af:56:93:51:b6:64:fa:d7:de:2d:6f:7d:f4:
         45:32:62:61:93:ac:44:a4:26:7d:58:1e:17:5a:08:c8:98:ef:
         71:f1:f7:44:a6:f9:e4:c4:4c:f3:83:df:1a:bf:85:ee:08:4b:
         fd:63:e8:b9:94:27:f4:44:d0:f0:c1:3e:f3:3b:f6:c3:de:54:
         c7:52:6e:09:9e:ed:fb:41:73:be:36:74:76:42:ca:bd:35:51:
         14:b5:94:bd:70:8f:20:be:d7:6a:2a:af:2a:b1:90:27:2c:0c:
         44:79:db:f9:10:93:ac:cb:58:ed:ef:82:45:92:38:30:bb:06:
         40:a3:98:45:7f:f8:c8:ce:4c:3c:e6:db:e4:a0:5d:1f:07:e1:
         6e:89:e2:2c:a9:45:df:ab:59:2c:cd:b6:82:6d:06:8d:91:89:
         9c:f4:44:0f:1f:fc:d5:a3:9b:98:97:90:2f:2a:53:46:8d:49:
         46:6c:fd:31:6d:dc:1f:26:80:de:4f:13:56:c5:bd:47:c4:79:
         77:ae:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:17:14 2025 by rpki-client