Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/885b5cad-60ca-3516-b3d1-c715c750de7e.roa
File:                     885b5cad-60ca-3516-b3d1-c715c750de7e.roa (raw, json)
Hash identifier:          iVQAYj2cKKqYq2SouCIIgewDEv1pouJfIbfx5mJgJWI=
Subject key identifier:   01:CF:BF:7F:BE:B1:4F:32:3D:8F:CC:04:C9:AF:81:E4:39:DA:DC:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8451F87C5962B121C2868
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/885b5cad-60ca-3516-b3d1-c715c750de7e.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        2001:559:c18a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:45:1f:87:c5:96:2b:12:1c:28:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=2bb06027-1df5-495c-9b2d-bd5f0382400f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:69:76:3d:8a:34:4b:94:08:b0:93:1f:16:
                    2f:84:15:2f:cf:bf:9d:77:5a:3c:b4:a6:56:e3:e8:
                    9b:aa:d5:8f:b8:fd:a0:8c:93:95:ac:8e:d0:8d:47:
                    c3:01:72:69:1f:22:51:73:ca:2f:22:6c:36:8b:6c:
                    63:09:1a:2b:eb:3d:ad:86:36:ee:05:d6:a1:4f:be:
                    d0:36:e2:45:f3:f1:cd:fc:c2:4d:ee:d3:0e:fc:a4:
                    ca:38:0c:3d:a9:62:3d:36:c5:6e:f1:04:e7:96:61:
                    2e:4c:85:69:72:33:04:c0:e0:66:fa:b2:5f:0b:16:
                    90:74:64:85:02:00:14:ca:4a:6d:29:89:5d:eb:6f:
                    b9:bf:d9:95:b6:ad:84:58:1a:90:67:85:b7:a2:1a:
                    22:6a:1f:3a:83:db:9a:f5:b9:c2:05:75:e0:1b:8b:
                    92:62:f9:ec:b2:c9:20:f8:37:7b:15:0a:bd:45:7a:
                    28:1a:fd:9d:b2:94:64:20:2e:43:8a:50:80:40:bb:
                    f5:6b:83:78:24:7e:ed:8a:6b:67:c3:cf:cb:e0:59:
                    4f:2d:3d:bf:9d:95:f3:57:be:84:91:61:74:8e:c7:
                    0b:cf:9a:2e:ff:52:e7:ef:b9:86:5b:48:ce:9e:08:
                    c8:34:a9:4e:ac:31:59:ad:ed:b0:0a:06:ed:69:8a:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CF:BF:7F:BE:B1:4F:32:3D:8F:CC:04:C9:AF:81:E4:39:DA:DC:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/885b5cad-60ca-3516-b3d1-c715c750de7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c18a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a6:fe:af:27:a2:44:ed:86:d5:87:d6:b7:c4:09:32:2d:8a:
         26:8f:1e:1c:99:c9:6a:d2:84:a7:42:e1:e7:cc:2f:30:37:d8:
         0c:08:a1:b9:67:65:14:e7:7e:f2:55:5f:8f:d1:4a:75:4b:c9:
         96:5e:db:e9:10:7e:6a:30:a0:bf:40:04:e7:ac:19:1d:ab:e5:
         fc:8b:60:05:20:aa:a0:3d:4c:9f:87:f9:e8:07:02:47:3d:96:
         49:53:22:c8:96:26:21:d7:6a:6d:3d:11:c3:8a:99:0d:47:53:
         3f:79:98:9e:53:b0:28:0a:e9:be:ca:7f:26:82:64:14:3a:4b:
         84:31:a0:fd:56:c3:1a:d2:8c:0d:8a:9b:19:b7:07:08:e4:d1:
         3b:95:44:54:51:84:62:6a:4a:03:d4:f4:63:ea:8e:45:49:1e:
         39:50:7b:bd:2a:ce:08:a7:3c:be:b1:0f:ce:38:04:42:97:ec:
         a2:57:cf:72:90:d2:47:46:cc:36:a4:7f:4a:a7:10:bf:ae:63:
         76:d5:fa:6e:ef:74:a9:2b:ae:bb:de:10:e8:e2:19:f1:bb:cf:
         c2:d2:d5:ba:69:05:38:14:bb:b5:8a:34:1c:3e:50:f5:fb:c3:
         16:5e:31:5c:0f:ec:30:c6:48:25:53:7c:03:84:6b:63:2f:87:
         74:c4:dd:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uEUfh8WWKxIcKGgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
MmJiMDYwMjctMWRmNS00OTVjLTliMmQtYmQ1ZjAzODI0MDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW1pdj2KNEuUCLCTHxYvhBUvz7+dd1o8tKZW
4+ibqtWPuP2gjJOVrI7QjUfDAXJpHyJRc8ovImw2i2xjCRor6z2thjbuBdahT77Q
NuJF8/HN/MJN7tMO/KTKOAw9qWI9NsVu8QTnlmEuTIVpcjMEwOBm+rJfCxaQdGSF
AgAUykptKYld62+5v9mVtq2EWBqQZ4W3ohoiah86g9ua9bnCBXXgG4uSYvnssskg
+Dd7FQq9RXooGv2dspRkIC5DilCAQLv1a4N4JH7timtnw8/L4FlPLT2/nZXzV76E
kWF0jscLz5ou/1Ln77mGW0jOngjINKlOrDFZre2wCgbtaYoPWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAHPv3++sU8yPY/MBMmvgeQ52txaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg1YjVjYWQtNjBjYS0z
NTE2LWIzZDEtYzcxNWM3NTBkZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcGK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI6m/q8nokTthtWH1rfECTItiiaPHhyZyWrShKdC4efMLzA32AwI
oblnZRTnfvJVX4/RSnVLyZZe2+kQfmowoL9ABOesGR2r5fyLYAUgqqA9TJ+H+egH
Akc9lklTIsiWJiHXam09EcOKmQ1HUz95mJ5TsCgK6b7KfyaCZBQ6S4QxoP1WwxrS
jA2Kmxm3Bwjk0TuVRFRRhGJqSgPU9GPqjkVJHjlQe70qzginPL6xD844BEKX7KJX
z3KQ0kdGzDakf0qnEL+uY3bV+m7vdKkrrrveEOjiGfG7z8LS1bppBTgUu7WKNBw+
UPX7wxZeMVwP7DDGSCVTfAOEa2Mvh3TE3bE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:42:20 2025 by rpki-client