Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a445f23-7741-370f-96a1-280ecae80c75.roa
File:                     8a445f23-7741-370f-96a1-280ecae80c75.roa (raw, json)
Hash identifier:          zTuhbPTroLDmLyrDtH7oVyXJqo+spLJiMCzYvE/Et3A=
Subject key identifier:   3F:A8:9C:8E:FF:D0:CC:69:75:1F:56:8B:C4:67:B6:25:F5:C4:2F:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBBE9A3E80236B7A55F980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a445f23-7741-370f-96a1-280ecae80c75.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        2001:559:c242::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:be:9a:3e:80:23:6b:7a:55:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=75032662-ef3e-4e10-a49a-1507e2226988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:1b:2d:30:8d:30:4d:77:7f:a9:34:4a:9a:
                    a6:6f:ba:8e:c6:36:8d:f8:ab:3c:8a:7b:9b:ce:92:
                    d7:71:80:3d:a8:57:06:e0:c3:a7:9e:94:61:11:5b:
                    c5:91:9c:c6:ce:0c:05:9c:7a:7d:ef:8a:40:5b:95:
                    b6:c9:13:af:7e:47:9b:29:26:33:bc:20:0b:2a:b0:
                    c6:79:ae:c0:49:06:db:2f:cd:ce:3e:fe:26:d3:cd:
                    ae:75:85:e1:56:1b:51:9e:59:ed:2c:bd:6e:9f:80:
                    cf:c1:4a:c0:e8:be:15:aa:cd:3c:50:66:83:a7:41:
                    6b:e2:6c:50:87:c8:8e:d9:28:15:06:00:a7:f1:32:
                    52:dc:25:d7:d4:d0:8f:d8:2f:ef:2d:79:1b:73:d9:
                    b4:22:e7:35:67:93:b6:61:26:bd:1c:bc:52:82:8a:
                    7e:b9:0f:88:ef:29:c1:e6:c5:60:03:f6:22:94:f5:
                    ea:31:dc:62:5c:f0:bf:41:c4:ce:cb:30:c7:a9:7b:
                    2f:3d:7e:da:20:14:e3:6d:2f:39:64:37:ea:87:f0:
                    12:ef:f6:c7:d2:32:a7:ef:af:c0:8e:41:ae:7f:4c:
                    59:d2:6f:ce:e6:56:69:3e:df:bd:3d:60:25:4c:22:
                    7b:ca:fc:72:a5:39:62:b2:5e:ef:ca:0e:d3:e1:20:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A8:9C:8E:FF:D0:CC:69:75:1F:56:8B:C4:67:B6:25:F5:C4:2F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a445f23-7741-370f-96a1-280ecae80c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c242::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c6:ef:d5:a8:df:cc:c2:33:60:e1:69:49:a1:81:0b:04:26:
         24:62:7d:06:48:e6:40:d6:43:95:98:23:90:46:11:9f:85:f2:
         06:a0:5d:b3:7c:6f:70:ad:53:7d:80:b8:e9:66:11:cd:c8:46:
         b2:ea:f5:dc:6f:07:7f:06:0e:e7:6a:88:d6:51:92:75:ab:5f:
         84:05:b6:bb:13:1f:3d:c9:29:51:c6:ab:24:78:d5:9a:3a:d8:
         c5:a6:17:3d:ed:3f:b8:8c:28:1c:3a:26:63:98:cc:56:b3:81:
         18:6e:9d:e5:d0:03:16:52:56:45:7d:b2:f0:b3:67:a3:b1:18:
         22:26:c7:b0:08:35:8d:64:9c:2d:bb:7e:d2:51:c3:03:01:13:
         f1:8f:ca:43:fc:4d:69:99:4e:c2:0a:85:66:74:45:09:b2:a7:
         a0:2d:67:9f:74:e6:97:d4:65:1a:d7:0c:18:52:66:5f:0c:d4:
         7f:3c:e5:f2:14:16:09:6a:78:c5:5c:c3:5f:72:46:7e:2b:93:
         c7:37:08:b6:94:e1:b6:91:5e:7c:09:d1:de:13:d9:08:5e:03:
         4f:68:f9:77:4f:6b:c2:2b:f1:81:0f:01:33:5f:2c:b8:d9:d0:
         55:03:e9:bb:90:28:ae:29:d4:79:ca:76:2e:6a:45:82:5d:da:
         43:1f:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:01:56 2025 by rpki-client