Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62fe9da4-ef47-32a5-b8c5-a22a1d5b9887.roa
File:                     62fe9da4-ef47-32a5-b8c5-a22a1d5b9887.roa (raw, json)
Hash identifier:          Rk73oUnLvXB0vunXqPDb82qbZJQm5c6LIutGNoY0oVw=
Subject key identifier:   2D:D8:9C:06:5D:FE:F7:94:28:CB:9A:B1:24:33:FA:DA:9D:07:5A:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBEFC17E046D86CFF554B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62fe9da4-ef47-32a5-b8c5-a22a1d5b9887.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7015
IP address blocks:        2001:559:871c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:ef:c1:7e:04:6d:86:cf:f5:54:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=cd804f04-c80d-4956-8192-18c087ae81a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:77:54:7c:58:c3:bd:ee:0f:ea:b5:a1:5f:
                    fc:84:30:fe:f1:b6:04:75:b2:d0:71:f0:eb:9f:ea:
                    d3:06:4d:ab:fa:a0:9e:d5:84:91:ea:0e:81:d6:91:
                    71:93:17:1b:f5:2e:d3:42:04:f6:dc:5d:c8:e4:62:
                    0b:ef:26:3a:0a:d9:4f:11:c5:9d:49:0f:9d:eb:c2:
                    43:fd:15:66:d3:ac:17:cc:68:19:2b:86:4c:05:03:
                    f6:1f:5e:2a:c2:b9:ba:a8:c8:c0:31:12:87:45:18:
                    fd:9d:90:8a:49:3d:9a:f6:bc:40:9b:89:af:3f:3c:
                    5d:32:e8:ff:a1:1d:58:49:2d:5c:5f:f7:a3:6e:7b:
                    29:84:8a:6b:36:8a:e2:01:22:c6:ef:c6:87:86:03:
                    98:d7:0e:e1:eb:32:30:41:ff:fb:7d:92:9c:8f:78:
                    27:5b:e9:29:30:3d:a9:5b:f4:d0:24:0c:cd:9b:b4:
                    df:21:2e:b1:d8:47:46:46:db:33:d6:e7:93:b7:5a:
                    3e:d5:8f:08:e1:d1:e9:d0:67:59:e0:b3:ad:af:3a:
                    9f:bc:79:0b:5a:7b:cd:8c:25:62:54:8f:ac:14:4a:
                    36:16:f9:fe:6d:5f:07:d5:18:52:d7:72:0c:a3:04:
                    73:5e:69:5c:7f:f5:25:61:b8:f0:7a:ec:7f:b8:16:
                    77:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D8:9C:06:5D:FE:F7:94:28:CB:9A:B1:24:33:FA:DA:9D:07:5A:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62fe9da4-ef47-32a5-b8c5-a22a1d5b9887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:871c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:30:1f:a9:6c:d4:38:7f:e4:17:c0:9b:f7:96:22:c5:45:
         cb:2e:c2:51:f4:d7:96:2e:b9:73:58:3b:12:e4:c9:15:4c:60:
         09:70:75:0f:b6:ef:7c:f3:23:30:8a:bf:27:ed:f0:70:24:0d:
         30:cc:1a:7c:93:f1:80:0d:c8:52:64:51:52:2f:43:9d:19:01:
         dc:69:81:cf:2a:a4:9a:9e:87:ee:a6:8b:b3:3a:ec:3b:15:8e:
         29:56:55:d5:dc:e2:4f:a9:f9:66:a0:7a:cf:67:65:43:d4:1b:
         2b:82:92:67:b9:a3:c7:cd:02:f7:5d:5e:52:60:c5:db:7c:16:
         ca:d7:be:51:8d:11:93:61:6c:29:cf:86:0b:43:8a:e0:74:57:
         96:88:e3:ca:68:57:a8:f8:44:59:3b:7b:a8:85:c2:a3:bc:47:
         45:f9:2e:0b:37:3c:5c:e5:99:09:92:60:d2:b1:bc:f2:19:98:
         b6:bf:a3:5d:83:e4:03:33:e8:a1:a1:37:a0:ce:6d:d9:00:c7:
         e6:51:ef:35:61:ee:b3:a1:e8:f9:7e:ec:84:64:17:40:3c:94:
         c1:98:01:d0:79:01:5e:54:66:97:27:79:db:d3:d2:b8:24:a1:
         52:a2:e4:7a:6e:ff:17:83:26:17:d9:a6:6a:de:fe:17:96:ea:
         b9:12:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:16:12 2025 by rpki-client