Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f574d8a-eaad-3228-b73d-47946fd554ba.roa
File:                     3f574d8a-eaad-3228-b73d-47946fd554ba.roa (raw, json)
Hash identifier:          /J+0SS9kzlgREwUgYr1KlK9x+ZCfavm6iYQWxgJPpUU=
Subject key identifier:   79:11:15:D4:F5:91:16:E0:F8:D6:FC:8A:1D:00:FA:A4:5D:34:49:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCD5CF5F332045D6946B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f574d8a-eaad-3228-b73d-47946fd554ba.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     19047
IP address blocks:        2001:559:0:88::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:d5:cf:5f:33:20:45:d6:94:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=567f77cf-c628-40a3-824f-5bf6eac35c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:90:a8:7a:74:20:ff:a4:94:76:b7:53:95:
                    19:1f:cb:0c:65:7b:f2:d1:49:ad:a8:e3:e2:f0:24:
                    08:d6:d9:8f:5f:38:bd:ee:ae:92:44:b7:91:aa:07:
                    dc:38:10:36:5c:ce:88:fd:12:34:2e:84:d8:33:05:
                    66:97:0b:f7:28:ae:ce:27:e7:1d:1f:86:98:06:b4:
                    9d:6e:08:e7:20:df:ae:3e:ef:85:bf:c7:42:02:06:
                    79:9e:5c:ee:bc:b3:48:13:6e:eb:e4:da:a5:2f:c8:
                    06:8d:d7:be:22:64:17:db:b6:58:e2:9a:c9:5a:9f:
                    de:8d:0b:58:dd:8d:3f:be:7d:70:59:c3:e6:d9:b3:
                    3d:d0:d5:46:0c:c2:dd:c3:06:1f:10:f5:26:f6:dc:
                    98:f2:20:e1:2e:00:59:4e:a5:da:19:9e:c4:ef:c7:
                    30:d6:21:ce:fb:90:0a:af:3e:4a:31:cb:98:4a:ac:
                    e9:e5:25:d8:a1:0e:6d:cb:33:ea:05:e4:18:d9:e7:
                    54:98:cd:50:fc:c7:0e:ef:a9:d0:66:b9:5c:a6:b3:
                    94:e4:25:e1:1d:2d:33:23:41:7d:df:a9:03:31:20:
                    eb:5e:45:4a:c6:41:28:9a:61:81:60:f3:dd:89:71:
                    a6:e8:3f:29:9d:84:aa:34:03:f7:ed:8b:e9:e1:d3:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:15:D4:F5:91:16:E0:F8:D6:FC:8A:1D:00:FA:A4:5D:34:49:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f574d8a-eaad-3228-b73d-47946fd554ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:88::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:05:37:3d:0c:dc:f5:0a:7d:48:39:3f:00:12:a9:82:93:f1:
         52:be:c6:8a:6f:9e:cc:23:fa:7b:d7:64:53:51:93:c8:1a:13:
         a9:8d:28:d6:64:d7:45:cb:3b:63:95:fb:15:c2:b4:15:87:c7:
         bf:83:d4:f6:ce:91:f7:ab:b3:d2:cb:20:2e:96:20:26:45:c8:
         f5:5e:26:18:be:6f:c7:24:00:07:f4:b2:95:30:3a:64:06:7b:
         7c:1f:ab:7c:02:13:5c:96:57:1b:82:31:a4:59:ad:51:a1:3b:
         60:4e:77:d9:42:30:04:df:82:fc:f3:a4:b2:be:05:34:d5:73:
         0b:2f:39:26:5b:a3:5d:98:ad:26:98:d2:3d:f5:66:ce:64:46:
         f2:90:27:a5:33:3c:f8:0d:10:b7:6c:30:28:65:89:b6:76:6b:
         9a:ca:79:f8:7a:97:23:16:8e:e6:1b:ca:86:cd:c9:e0:d4:db:
         b8:d5:6e:ea:05:5d:5b:e2:3a:8a:49:81:8b:9d:e4:d3:85:de:
         7e:90:3a:00:99:13:70:a1:5c:1d:4a:8b:1f:99:72:2b:82:c9:
         0d:b0:79:f3:8d:22:74:8b:ca:15:95:86:2a:cd:fc:46:a8:3f:
         f6:32:f7:89:88:5f:fd:de:c8:36:9d:b3:4e:68:0a:8f:36:a2:
         5d:d8:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:39:25 2025 by rpki-client