Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c79a6d5-8541-3b9d-9d61-b7837b4f466d.roa
File:                     4c79a6d5-8541-3b9d-9d61-b7837b4f466d.roa (raw, json)
Hash identifier:          MFzZJWQrr432xofJSpIOYDWO2k7LSyIgsyt1LPXj2dw=
Subject key identifier:   E2:E9:12:E0:D2:AE:0A:7D:1F:B3:C5:D3:5A:04:31:3C:5F:83:A2:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCD553CA59949B64201700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c79a6d5-8541-3b9d-9d61-b7837b4f466d.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     19047
IP address blocks:        2001:559:0:17::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:d5:53:ca:59:94:9b:64:20:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=4d77f8ba-ce28-47bb-9bd5-70ea9f3960b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:4a:ea:75:29:0b:74:45:d3:99:b9:6f:e9:
                    33:42:49:59:50:aa:ac:70:00:d4:11:9c:6a:7b:35:
                    88:14:13:64:43:ec:1b:e5:04:d8:d2:bb:90:ec:c3:
                    f9:4a:d1:6d:d5:95:15:eb:32:2c:99:e3:51:47:1d:
                    39:b9:e5:e0:67:6a:a4:a2:3f:59:05:b5:01:78:cc:
                    7b:34:a6:89:75:f9:cd:81:64:bd:55:e7:6c:33:1a:
                    e0:1e:10:e5:8a:6e:35:25:3a:19:78:b2:30:68:21:
                    ab:9b:f5:7f:ad:64:36:11:1c:78:76:9f:b8:71:e3:
                    c9:53:32:e1:db:a3:e4:04:17:0c:ff:13:11:90:34:
                    ae:44:e7:df:ed:b9:fe:85:15:e4:d0:8f:44:f7:6a:
                    c8:1b:c4:2e:14:d5:9e:fe:7e:a7:e0:8d:5e:1b:54:
                    b8:c0:32:b5:7c:f5:35:f9:5c:d6:55:d5:28:ee:b7:
                    21:fb:d1:04:4d:e0:4f:e0:ef:60:aa:29:83:1e:a2:
                    c3:8d:99:b8:43:e5:7d:79:7a:94:9b:db:2d:87:09:
                    60:d2:0f:56:46:bf:af:0d:29:fc:8d:fd:b0:da:bd:
                    d2:e8:83:7b:88:68:40:d2:43:3c:8a:53:0a:ae:38:
                    5b:b0:40:21:00:7a:21:6b:ca:5b:97:e1:db:6d:60:
                    a7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E9:12:E0:D2:AE:0A:7D:1F:B3:C5:D3:5A:04:31:3C:5F:83:A2:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c79a6d5-8541-3b9d-9d61-b7837b4f466d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:17::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:48:51:e5:d7:8b:57:00:70:10:a3:85:ab:ee:dc:9a:43:
         56:d1:77:65:48:ef:66:bc:e3:1d:3d:a9:c2:5b:75:03:43:99:
         3f:8a:65:01:f9:ff:60:01:7b:6d:07:30:27:b3:51:c5:9e:f3:
         ee:e3:5a:4a:6d:7f:16:8c:24:35:01:78:4c:e0:5b:74:35:db:
         8d:d6:cc:4a:f8:84:15:68:b7:b4:87:b6:bd:95:73:ba:63:2a:
         b8:b6:3d:c0:0d:71:22:5c:ed:e5:f1:fe:f6:16:f7:0a:5a:2b:
         74:da:a1:53:72:d4:d4:f9:5c:ea:76:76:15:60:8b:b4:39:7a:
         b1:89:0a:c3:8d:c0:5f:1f:dc:9e:eb:92:f0:f8:e5:05:47:57:
         6e:6e:ba:6e:b7:61:b0:fc:66:90:eb:a0:2c:d6:02:73:56:64:
         d4:5e:d0:4b:4c:29:ba:97:76:12:33:bd:ad:68:2a:ff:ec:c7:
         18:b2:75:0c:d1:16:e9:cd:4b:81:74:6f:6a:0e:b4:1e:47:f3:
         41:e1:5c:df:5d:76:db:54:53:ea:a9:bd:28:3c:52:40:72:39:
         b0:c1:8f:9e:06:f2:9a:bb:6c:b1:80:69:98:fb:a0:26:c7:bc:
         44:50:b4:9d:39:d5:f3:a9:09:8e:84:46:28:11:20:85:44:bb:
         3e:f0:a0:b3
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEpc/NVTylmUm2QgFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
NGQ3N2Y4YmEtY2UyOC00N2JiLTliZDUtNzBlYTlmMzk2MGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyZK6nUpC3RF05m5b+kzQklZUKqscADUEZxq
ezWIFBNkQ+wb5QTY0ruQ7MP5StFt1ZUV6zIsmeNRRx05ueXgZ2qkoj9ZBbUBeMx7
NKaJdfnNgWS9VedsMxrgHhDlim41JToZeLIwaCGrm/V/rWQ2ERx4dp+4cePJUzLh
26PkBBcM/xMRkDSuROff7bn+hRXk0I9E92rIG8QuFNWe/n6n4I1eG1S4wDK1fPU1
+VzWVdUo7rch+9EETeBP4O9gqimDHqLDjZm4Q+V9eXqUm9sthwlg0g9WRr+vDSn8
jf2w2r3S6IN7iGhA0kM8ilMKrjhbsEAhAHoha8pbl+HbbWCn6QIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFOLpEuDSrgp9H7PF01oEMTxfg6LCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGM3OWE2ZDUtODU0MS0z
YjlkLTlkNjEtYjc4MzdiNGY0NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA
ABcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAUMJIUeXXi1cAcBCjhavu3JpDVtF3ZUjvZrzjHT2pwlt1A0OZ
P4plAfn/YAF7bQcwJ7NRxZ7z7uNaSm1/FowkNQF4TOBbdDXbjdbMSviEFWi3tIe2
vZVzumMquLY9wA1xIlzt5fH+9hb3ClordNqhU3LU1Plc6nZ2FWCLtDl6sYkKw43A
Xx/cnuuS8PjlBUdXbm66brdhsPxmkOugLNYCc1Zk1F7QS0wpupd2EjO9rWgq/+zH
GLJ1DNEW6c1LgXRvag60HkfzQeFc311221RT6qm9KDxSQHI5sMGPngbymrtssYBp
mPugJse8RFC0nTnV86kJjoRGKBEghUS7PvCgsw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:31:46 2025 by rpki-client