Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93b48554-f049-363f-b169-9ffd7fe1b127.roa
File:                     93b48554-f049-363f-b169-9ffd7fe1b127.roa (raw, json)
Hash identifier:          mD/mmCp/SRFjGYRMZp87usEhODdb15/vy77c4BIPWTE=
Subject key identifier:   A7:12:B3:6A:1A:CD:B9:C3:A5:8D:93:B7:EF:81:B2:B9:5E:29:DC:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9F10E0F4AD6FE28B06880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93b48554-f049-363f-b169-9ffd7fe1b127.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33657
IP address blocks:        2001:559:5ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:f1:0e:0f:4a:d6:fe:28:b0:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=a9c9cb50-5e56-4685-92f7-559520c838da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:fe:24:ba:61:5b:42:1a:4d:5a:85:0a:4c:
                    b3:1c:83:7f:ae:64:28:fe:75:f1:79:39:9a:c7:34:
                    35:76:5e:95:98:f0:d5:2d:49:75:be:c7:e9:1f:3e:
                    3b:73:16:73:6a:f5:e4:5f:34:cf:dc:f1:fb:bd:ec:
                    83:c8:b3:fe:af:65:16:98:82:3b:f6:42:cb:7a:5d:
                    77:6f:b9:61:d8:be:97:89:08:ce:1b:2f:4c:df:8e:
                    c1:b1:4c:47:bb:80:a8:b6:6e:21:52:0b:46:c7:54:
                    0c:3f:37:01:e7:a5:5b:b0:9b:84:f9:e8:97:65:23:
                    49:5d:fd:0a:02:e0:cb:20:68:4d:8c:8e:74:71:6e:
                    24:93:66:3b:f3:82:c1:cb:85:ab:3c:4b:ef:3e:fc:
                    2d:24:1c:c4:fe:24:59:c2:4a:2c:31:40:95:a6:ac:
                    c5:9a:e5:86:cc:44:7e:ae:80:1b:95:8c:82:a6:84:
                    06:80:da:0d:4a:a7:e2:e4:82:80:ad:96:02:17:31:
                    00:d2:fb:7e:e1:99:f1:3a:37:d0:59:9d:98:e6:18:
                    20:6a:a5:86:f4:83:42:4a:5c:3a:ff:0b:3a:ca:96:
                    26:fd:c3:a9:e3:3a:a3:fe:30:74:28:c1:00:b9:43:
                    b1:4d:b5:10:10:16:8c:84:4c:0d:fb:0e:74:50:d9:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:12:B3:6A:1A:CD:B9:C3:A5:8D:93:B7:EF:81:B2:B9:5E:29:DC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93b48554-f049-363f-b169-9ffd7fe1b127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:5c:cb:27:4a:16:56:35:ce:ad:67:e2:8f:62:d5:0c:94:33:
         7a:e3:bc:23:c8:1c:eb:bf:55:c0:01:31:96:e4:0b:5e:db:89:
         63:78:b1:6d:6b:b1:8f:0b:7c:7f:02:f3:b0:5b:92:f2:71:85:
         99:e9:67:38:94:f4:ae:7c:02:e7:bc:77:b2:95:f6:c6:54:4d:
         ef:68:83:47:d6:67:cb:50:95:f3:8e:a4:38:4d:8a:84:37:58:
         b0:bf:b9:9a:a2:c3:9c:3e:d1:74:5d:fd:d7:c5:9c:c5:06:1b:
         59:8d:35:50:dd:0e:fe:df:8e:1b:31:cd:06:7b:5a:4e:77:d2:
         df:6d:90:36:9f:29:66:39:4e:17:12:48:6a:6f:b5:c5:a8:3e:
         2f:84:63:4e:6b:cd:5b:a2:de:dc:79:d5:93:23:30:72:53:53:
         a7:a0:d9:fb:aa:fd:16:72:39:ae:6e:c2:d8:1a:07:46:e9:8c:
         2e:8a:cc:c7:8d:8b:57:03:d8:88:3d:ab:ac:7a:58:11:dd:a5:
         f6:40:b9:6f:ad:c1:ae:e4:e8:eb:f0:d0:74:b1:64:b6:c8:79:
         55:4f:39:e4:e5:50:92:8f:88:c5:fa:b5:68:8d:72:03:b4:0a:
         04:03:f9:f9:4f:08:fd:7c:2a:c8:4c:51:65:9e:f7:03:fa:a5:
         54:69:8d:1e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ufEOD0rW/iiwaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
YTljOWNiNTAtNWU1Ni00Njg1LTkyZjctNTU5NTIwYzgzOGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8z+JLphW0IaTVqFCkyzHIN/rmQo/nXxeTma
xzQ1dl6VmPDVLUl1vsfpHz47cxZzavXkXzTP3PH7veyDyLP+r2UWmII79kLLel13
b7lh2L6XiQjOGy9M347BsUxHu4Cotm4hUgtGx1QMPzcB56VbsJuE+eiXZSNJXf0K
AuDLIGhNjI50cW4kk2Y784LBy4WrPEvvPvwtJBzE/iRZwkosMUCVpqzFmuWGzER+
roAblYyCpoQGgNoNSqfi5IKArZYCFzEA0vt+4ZnxOjfQWZ2Y5hggaqWG9INCSlw6
/ws6ypYm/cOp4zqj/jB0KMEAuUOxTbUQEBaMhEwN+w50UNkskwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKcSs2oazbnDpY2Tt++BsrleKdycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTNiNDg1NTQtZjA0OS0z
NjNmLWIxNjktOWZmZDdmZTFiMTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQXv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJhcyydKFlY1zq1n4o9i1QyUM3rjvCPIHOu/VcABMZbkC17biWN4
sW1rsY8LfH8C87BbkvJxhZnpZziU9K58Aue8d7KV9sZUTe9og0fWZ8tQlfOOpDhN
ioQ3WLC/uZqiw5w+0XRd/dfFnMUGG1mNNVDdDv7fjhsxzQZ7Wk530t9tkDafKWY5
ThcSSGpvtcWoPi+EY05rzVui3tx51ZMjMHJTU6eg2fuq/RZyOa5uwtgaB0bpjC6K
zMeNi1cD2Ig9q6x6WBHdpfZAuW+twa7k6Ovw0HSxZLbIeVVPOeTlUJKPiMX6tWiN
cgO0CgQD+flPCP18KshMUWWe9wP6pVRpjR4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:57 2025 by rpki-client