Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6db26ee0-3ac5-384c-916c-e8b1b52c8b41.roa
File:                     6db26ee0-3ac5-384c-916c-e8b1b52c8b41.roa (raw, json)
Hash identifier:          3LuQdy9uBbyEGL5I/FE0GsPFLYRyLSzaKBWvugLk+Lw=
Subject key identifier:   E5:B0:AF:E7:E8:B7:6C:3F:45:84:04:BF:C5:68:80:DC:B3:7B:64:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7DFF059F7BA38A8C07C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6db26ee0-3ac5-384c-916c-e8b1b52c8b41.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7015
IP address blocks:        2001:559:8434::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:df:f0:59:f7:ba:38:a8:c0:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=ea7c21ca-f693-4a32-a38d-9b833d0fa404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:4d:35:c2:8c:bf:c3:6b:7a:ff:04:d7:3a:
                    a6:f7:db:d4:bb:e0:8b:be:7d:ff:e2:66:2f:fd:db:
                    16:03:00:14:6d:1c:d1:71:2b:9d:5a:0b:a3:b5:d6:
                    8f:12:08:38:e5:ec:bd:bf:d8:45:a4:9e:40:02:a5:
                    8c:2e:b9:78:0f:4e:14:a2:c4:6f:bf:6b:41:17:69:
                    ba:a1:99:35:da:a0:f5:d2:70:ff:ce:7b:8a:74:c4:
                    31:e4:9b:7e:dc:97:4f:8c:ba:4f:39:56:37:c3:76:
                    1f:9c:24:70:1c:c1:7c:7a:e6:e3:96:32:22:a0:dd:
                    cb:c9:31:b5:7d:13:a1:4c:0e:cd:a1:4c:e3:74:33:
                    19:e7:30:3f:9a:48:8e:70:0b:f5:41:85:96:03:01:
                    6e:82:87:42:54:2c:4b:16:de:21:21:d3:88:29:b2:
                    d1:34:7e:6a:b0:ae:3c:4b:db:44:9c:94:20:b1:13:
                    e9:07:fe:76:ec:8d:c9:7c:18:f6:70:9d:02:d2:1d:
                    cc:a4:7e:2e:09:97:af:20:62:8e:4a:a4:44:e7:e1:
                    05:c2:c7:da:4f:a9:3f:e9:b2:f0:76:b0:ce:29:66:
                    40:30:98:2d:44:79:5b:73:c9:42:1b:ca:20:a8:22:
                    7c:d4:32:cd:96:f4:d2:a3:2c:10:ba:f0:0a:3a:28:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B0:AF:E7:E8:B7:6C:3F:45:84:04:BF:C5:68:80:DC:B3:7B:64:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6db26ee0-3ac5-384c-916c-e8b1b52c8b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8434::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:30:e1:96:16:0e:3f:d7:78:ea:94:83:09:45:83:ed:96:
         1c:75:4a:55:e6:67:6e:0a:6f:fb:e2:26:46:b2:ed:e1:c9:63:
         e0:66:f3:da:7d:2a:14:80:fd:50:54:26:0c:9e:01:c9:71:ed:
         15:bf:da:61:6b:ff:34:86:b9:c3:4f:a5:ff:23:e1:86:44:74:
         26:d5:b6:f8:ef:7e:4e:43:34:f0:84:f2:5b:26:91:52:bd:1f:
         ec:6f:d2:2d:81:ac:36:89:e2:3e:da:e8:65:40:09:a4:2a:2e:
         c7:58:ed:bd:2e:5d:19:c2:62:06:b6:de:59:e4:13:c4:10:f4:
         5c:09:4d:b7:19:59:3a:42:cd:6f:f9:ab:9d:ae:d6:de:ad:fb:
         fe:fe:e9:95:bb:5c:23:1c:a3:9b:21:e4:c1:83:70:2e:9e:48:
         ae:de:3e:ff:65:27:95:93:c2:fa:bd:c3:9a:f6:cd:65:8c:54:
         dd:52:ce:ed:78:80:28:cc:4b:68:44:42:18:9e:c2:a7:1d:fd:
         90:2b:b4:64:18:08:92:7c:66:4f:f0:cd:b2:3e:6b:16:3f:3c:
         26:fc:bd:b6:50:35:73:91:2e:50:bf:fe:21:43:c6:17:22:0d:
         fd:01:a3:56:2f:17:58:55:b7:90:7e:8f:a5:d5:4c:2c:e9:66:
         e4:fe:63:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:32:35 2025 by rpki-client