Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f72450a-8e2c-320e-a34d-4ef06b7f0790.roa
File:                     4f72450a-8e2c-320e-a34d-4ef06b7f0790.roa (raw, json)
Hash identifier:          /qH+jY4JjX+smsEmANNKJIYdoeJPtUpiopPlJCibQag=
Subject key identifier:   C8:CA:EA:F4:A1:D5:A7:C1:F9:15:0D:A3:8E:94:DF:0A:D2:1A:04:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB942C690F1852817AF94D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f72450a-8e2c-320e-a34d-4ef06b7f0790.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        2001:559:c084::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:42:c6:90:f1:85:28:17:af:94:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=20794b9a-3930-4506-9c92-979855c54113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:39:95:bb:f4:bc:33:2c:fa:91:e7:45:f8:
                    c3:9b:b0:2c:51:34:52:80:65:64:8b:18:c8:fe:12:
                    2e:49:4a:f6:b5:d7:5c:3c:31:45:72:b5:41:8d:8a:
                    0a:4b:80:1f:49:52:2c:1d:d8:d6:19:f8:a3:df:a2:
                    59:9d:f6:20:29:d0:39:3b:e5:e3:e0:ff:b8:c7:3d:
                    fc:ef:48:78:03:8a:6d:1d:ae:4d:88:17:1f:9f:ac:
                    bb:47:5d:c5:e4:ac:8f:43:87:e4:d9:fe:6c:99:69:
                    f7:aa:1a:1e:63:8f:cc:5d:c9:45:7c:e0:c7:73:d3:
                    6b:72:7a:a5:e7:e9:56:83:51:82:d2:9f:1f:34:3d:
                    ef:df:d3:1e:91:da:71:a6:92:d3:f2:31:4e:3f:fc:
                    8d:bd:14:06:14:c4:a6:1d:58:88:50:09:b2:d4:90:
                    b0:07:ea:27:98:f1:8a:4e:a1:45:59:02:77:ca:1c:
                    a7:da:4c:61:ae:fc:2c:14:2d:2b:f4:ad:26:15:15:
                    06:9e:85:98:db:cb:19:38:08:11:11:a8:bf:e7:c4:
                    22:d0:c4:9e:a4:58:63:b8:a3:ea:63:16:ff:01:2b:
                    c8:bc:45:11:6d:3d:52:ad:f1:8e:e5:84:54:4d:89:
                    5d:af:f6:6c:b1:40:1b:5a:70:69:ea:97:e4:27:9e:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CA:EA:F4:A1:D5:A7:C1:F9:15:0D:A3:8E:94:DF:0A:D2:1A:04:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f72450a-8e2c-320e-a34d-4ef06b7f0790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c084::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6c:6b:a3:05:1b:0b:83:40:2e:b2:a8:89:1d:db:a1:93:eb:
         57:0b:44:90:7a:6f:1a:30:63:9d:15:6e:67:14:5c:c0:75:24:
         37:7b:c9:a0:13:23:c8:3d:84:ce:4c:5b:3c:00:eb:5d:25:0e:
         0f:df:4c:50:50:60:e0:bb:07:1f:7e:9d:cb:e9:94:34:b6:4e:
         c5:07:ba:29:a0:14:61:35:c3:1d:0a:d9:f9:85:e7:58:9e:dc:
         09:2f:2a:6b:98:fc:d1:1f:b0:63:66:c4:8a:ce:7d:94:0c:4b:
         79:d4:ce:4e:a7:4c:b5:c1:f6:88:70:8e:dc:62:ac:bd:81:35:
         7f:0b:38:df:fe:8a:d4:6a:d6:8e:e1:c5:6f:6e:20:6e:28:1c:
         9a:c3:e1:41:7d:6c:37:8c:d6:08:48:50:50:1d:96:f4:14:11:
         09:f7:0e:92:5f:ee:e7:be:87:9f:9d:c9:b8:11:09:99:ac:f8:
         70:2b:84:94:e7:53:ed:05:3c:c8:ab:71:f8:7b:62:61:04:aa:
         c8:0b:66:c5:bf:db:c9:c6:9a:d3:b2:4a:de:e9:40:ac:39:0c:
         eb:ed:3b:b4:22:36:bc:c5:d1:74:d8:dd:1c:65:81:fc:60:e7:
         ff:37:a0:a7:a2:7c:9f:92:ec:b1:c7:b1:af:db:08:db:cd:5d:
         95:f8:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:44:40 2025 by rpki-client