Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6288c712-086a-33cb-8755-dda7665238c8.roa
File:                     6288c712-086a-33cb-8755-dda7665238c8.roa (raw, json)
Hash identifier:          cJrJ5mTYwY4n/wVhSUdUWKHsekF5EAHBNyQOiaEDUwc=
Subject key identifier:   A7:0D:B6:44:8A:60:67:C5:7B:1C:00:74:B0:97:D5:76:8D:D3:65:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC7D7D68C1F8085DA2A540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6288c712-086a-33cb-8755-dda7665238c8.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        2001:559:86e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:7d:7d:68:c1:f8:08:5d:a2:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=7ddb901c-6f54-4fbb-b561-712af4792423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:fe:5e:26:63:9a:22:10:e0:2a:1a:76:d0:
                    f3:77:ae:83:b1:66:d6:02:5d:88:72:b3:a0:b9:f0:
                    68:e1:46:23:7f:2c:7e:ff:1d:8b:47:d8:0f:9f:fb:
                    c8:cb:fa:ce:bb:16:62:b8:f6:67:9b:75:88:62:89:
                    ab:4c:6d:00:4e:26:e8:1b:75:2a:37:fa:01:c6:45:
                    19:59:09:29:d2:a4:41:64:17:82:c0:bc:1c:77:4d:
                    a3:29:9b:99:e6:99:67:51:01:0a:94:62:e5:12:b8:
                    2e:97:99:5f:d2:97:31:a2:fa:af:21:28:13:62:ae:
                    e0:f1:7c:21:41:bc:0e:77:20:a0:7d:c4:24:58:4d:
                    60:6f:67:75:06:23:87:ab:80:d5:77:c1:f0:c1:9e:
                    35:53:8a:e9:16:ce:d1:e1:cf:b0:ea:0c:b9:5d:e4:
                    46:06:7a:18:91:4b:b0:a4:66:be:dd:3a:14:07:c7:
                    8c:59:e0:a2:0a:0d:78:70:04:26:0a:12:72:6e:98:
                    85:86:c7:b9:2d:65:27:db:21:a6:77:c9:b8:4c:94:
                    2a:1b:c9:36:ff:e0:b7:ac:fa:5d:7b:2c:54:80:12:
                    f1:37:56:55:c8:43:6b:a0:ff:97:0b:b5:9b:81:d2:
                    27:9b:8d:b5:72:ba:be:43:4e:63:2f:9f:44:ae:9e:
                    47:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0D:B6:44:8A:60:67:C5:7B:1C:00:74:B0:97:D5:76:8D:D3:65:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6288c712-086a-33cb-8755-dda7665238c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:86e0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:12:df:e4:ee:be:a5:cd:eb:9f:32:e3:26:5c:06:74:2e:32:
         98:26:4f:6a:38:b2:b4:5f:b5:18:d1:9a:7c:ed:10:6b:d3:46:
         3d:16:9c:26:c5:32:5d:f9:ef:22:96:6c:46:a6:e9:55:a4:23:
         80:ee:75:82:0a:7f:73:69:f5:04:1b:cf:a2:ce:e9:03:75:e5:
         d5:50:a9:44:de:ae:30:94:4d:ce:c4:f6:6f:4f:de:0a:db:7f:
         16:1a:39:cb:1c:4a:c4:91:68:83:b2:38:55:c8:4a:48:fb:1e:
         9c:bc:58:24:03:1e:56:14:6d:60:d3:8a:cf:54:ab:29:1b:70:
         d2:29:a1:27:dc:12:ea:63:86:d6:25:ca:5c:eb:e0:4a:0a:6e:
         96:01:fb:79:d5:5c:d3:86:43:be:d3:cc:3f:35:ee:b0:06:23:
         fe:82:74:5e:2d:65:5c:be:f7:54:aa:b9:4e:5e:0e:de:3b:25:
         7d:9f:f0:76:30:db:63:37:0f:2d:44:3c:ae:30:fc:72:40:fe:
         4a:2c:a5:96:0f:45:cd:a3:cc:da:e5:54:fa:7f:ab:5b:fc:bb:
         03:39:1d:6d:ab:6b:7a:bd:d1:a8:d5:13:f4:31:fc:ce:4f:4c:
         9e:75:dc:bc:6b:ca:a0:4d:43:15:d1:be:2d:70:1c:d3:d3:1c:
         4a:92:c4:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/H19aMH4CF2ipUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
N2RkYjkwMWMtNmY1NC00ZmJiLWI1NjEtNzEyYWY0NzkyNDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxif+XiZjmiIQ4CoadtDzd66DsWbWAl2IcrOg
ufBo4UYjfyx+/x2LR9gPn/vIy/rOuxZiuPZnm3WIYomrTG0ATiboG3UqN/oBxkUZ
WQkp0qRBZBeCwLwcd02jKZuZ5plnUQEKlGLlErgul5lf0pcxovqvISgTYq7g8Xwh
QbwOdyCgfcQkWE1gb2d1BiOHq4DVd8HwwZ41U4rpFs7R4c+w6gy5XeRGBnoYkUuw
pGa+3ToUB8eMWeCiCg14cAQmChJybpiFhse5LWUn2yGmd8m4TJQqG8k2/+C3rPpd
eyxUgBLxN1ZVyENroP+XC7WbgdInm421crq+Q05jL59Erp5HowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKcNtkSKYGfFexwAdLCX1XaN02VOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjI4OGM3MTItMDg2YS0z
M2NiLTg3NTUtZGRhNzY2NTIzOGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYbg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALoS3+TuvqXN658y4yZcBnQuMpgmT2o4srRftRjRmnztEGvTRj0W
nCbFMl357yKWbEam6VWkI4DudYIKf3Np9QQbz6LO6QN15dVQqUTerjCUTc7E9m9P
3grbfxYaOcscSsSRaIOyOFXISkj7Hpy8WCQDHlYUbWDTis9UqykbcNIpoSfcEupj
htYlylzr4EoKbpYB+3nVXNOGQ77TzD817rAGI/6CdF4tZVy+91SquU5eDt47JX2f
8HYw22M3Dy1EPK4w/HJA/kospZYPRc2jzNrlVPp/q1v8uwM5HW2ra3q90ajVE/Qx
/M5PTJ513LxryqBNQxXRvi1wHNPTHEqSxM8=
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:04:28 2025 by rpki-client