Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/930505eb-dbd5-35f0-a633-fc28b72c0790.roa
File:                     930505eb-dbd5-35f0-a633-fc28b72c0790.roa (raw, json)
Hash identifier:          MsqI2Do48tIUKjEBi8HWUqpx2pQubuE9nTweWiVw3wo=
Subject key identifier:   B2:5F:87:71:67:67:ED:4E:09:39:9E:84:26:D4:82:FF:B9:5D:AC:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA69789D2525D9A03A45EF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/930505eb-dbd5-35f0-a633-fc28b72c0790.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        2001:559:c11e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:97:89:d2:52:5d:9a:03:a4:5e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=cbb0159c-8a52-4d21-9981-ac7b9bb0a1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:03:11:80:f8:4d:be:c9:b6:85:bf:7a:60:
                    ac:d3:d4:10:b2:86:b0:09:62:75:90:e8:5c:5a:c7:
                    70:4b:21:47:87:44:6e:ac:88:1d:eb:04:ab:b7:61:
                    d3:af:8a:35:e5:6b:f6:26:ee:ca:54:dc:45:36:6e:
                    74:03:0c:a2:41:85:d4:10:ff:1c:3c:cf:00:3c:f1:
                    45:a5:55:5c:96:b4:d1:3f:40:17:5e:e0:03:8b:97:
                    71:35:29:3a:f1:95:d7:04:cd:28:e7:34:0f:df:3a:
                    43:b8:92:97:49:d7:1f:c6:50:bb:cc:4d:9d:44:6f:
                    cb:78:2e:af:1d:b6:1a:47:6c:08:96:f9:29:93:fe:
                    bf:29:ce:77:7f:da:bb:3d:96:ee:cf:e5:d6:52:ea:
                    a4:e7:0c:f1:04:d8:2e:73:b5:62:d8:b4:29:01:1d:
                    0c:3d:22:7c:91:15:07:7e:e4:3b:8d:b7:84:7c:76:
                    29:26:e1:64:76:83:2f:75:93:25:9a:3c:44:b1:49:
                    8c:50:e8:02:ed:ba:88:fd:ea:2c:be:ff:4e:2e:5a:
                    92:35:ef:d4:4a:94:8b:64:f8:00:a8:06:19:c0:22:
                    18:ec:45:81:6f:f6:30:da:2b:4d:60:8c:bf:05:5f:
                    be:74:be:bb:9d:17:11:14:5e:d3:0b:9a:f5:45:61:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5F:87:71:67:67:ED:4E:09:39:9E:84:26:D4:82:FF:B9:5D:AC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/930505eb-dbd5-35f0-a633-fc28b72c0790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c11e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:db:83:00:36:1c:1d:33:18:05:53:d7:75:b1:70:0e:2b:37:
         21:14:a5:e9:1c:fa:cc:60:37:6d:b2:da:dc:7e:52:1b:be:57:
         95:bd:88:7a:71:81:f1:b8:c1:97:a5:13:ba:5a:0d:13:0c:de:
         0a:ad:68:dc:8a:80:91:d5:ca:0d:0d:3f:1b:62:b4:86:e9:86:
         6b:8c:60:a3:ed:dc:b1:f5:dd:4a:f5:54:79:be:65:0e:4a:04:
         2a:99:f7:b9:16:0c:53:9a:8e:c8:ad:38:90:1e:01:c9:61:e0:
         78:96:62:f9:d4:ad:5e:5f:70:d6:81:16:12:a8:ae:08:2b:69:
         80:67:d0:2f:06:be:f9:76:94:ce:2d:7b:25:22:b0:c9:6a:d4:
         da:14:7c:02:cf:9f:e5:10:45:ad:00:6f:97:fc:c0:c5:67:87:
         a1:b4:f4:13:ff:32:02:51:91:4f:59:27:45:36:65:47:78:62:
         5d:34:9b:b2:ac:0f:63:a6:0d:cb:6e:a1:23:ba:ea:a2:0c:19:
         05:4c:41:ab:09:5c:ba:19:71:a1:e0:64:1f:e4:02:eb:a1:69:
         3a:db:a7:57:64:be:12:2f:fc:eb:0e:95:65:5f:44:6c:9a:bc:
         48:38:ef:56:a7:d1:6d:33:eb:d3:b0:34:a3:24:a6:5b:82:f5:
         96:20:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:46:45 2025 by rpki-client