Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/970ca593-5f3e-3de6-bd46-39762cb602b9.roa
File:                     970ca593-5f3e-3de6-bd46-39762cb602b9.roa (raw, json)
Hash identifier:          Ssz2R4yrrKP1sPstls+UuL8Ez9yM7GpIffB3HnkFUj8=
Subject key identifier:   5B:30:19:A7:63:A3:0F:B7:62:EC:D7:5D:9C:6A:F5:6A:27:20:F0:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD9517E6B95428531149C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/970ca593-5f3e-3de6-bd46-39762cb602b9.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        2001:559:c308::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:95:17:e6:b9:54:28:53:11:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=a0b2b084-db47-4d33-ad17-bfee2ab0fe57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:19:ac:e2:0d:1a:a5:f9:90:97:88:d2:08:
                    a0:ad:5e:00:ed:72:26:bf:06:3d:be:8a:11:c1:aa:
                    ca:d6:37:a8:5a:69:99:a3:0a:60:f2:ae:60:c0:50:
                    50:b7:35:51:b2:9e:c5:8e:c3:d5:f5:5f:a1:c0:03:
                    7f:fd:49:04:d3:31:06:52:09:3a:f8:30:f8:34:3f:
                    25:d9:0b:bd:97:65:79:9d:95:42:bc:f7:8b:18:60:
                    d9:b7:4d:fd:f1:59:96:96:db:7d:87:67:c7:a1:8d:
                    97:17:c6:dd:64:9f:81:8f:82:96:43:b3:c2:43:7a:
                    20:e7:71:31:82:49:90:8b:ba:57:d1:3b:88:d1:43:
                    63:b1:e2:d6:09:b7:ee:33:b2:ff:e4:3b:e5:92:3b:
                    e8:06:b9:b9:f1:27:7d:8c:11:d9:f8:25:63:34:82:
                    38:e9:ac:22:aa:42:a1:bb:ca:34:ba:06:d6:b9:65:
                    fc:1f:73:d0:b2:c6:d5:c7:9e:c7:0d:9c:3f:42:ee:
                    8f:c1:a1:60:cc:4a:30:df:73:68:c3:27:87:17:a0:
                    7e:5e:a6:35:ea:98:27:01:45:cc:dd:74:f8:33:0e:
                    ea:40:13:8d:de:93:a6:92:af:f8:99:14:60:ed:b1:
                    91:55:73:91:14:27:3d:ab:d2:6b:00:41:01:db:f0:
                    1b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:30:19:A7:63:A3:0F:B7:62:EC:D7:5D:9C:6A:F5:6A:27:20:F0:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/970ca593-5f3e-3de6-bd46-39762cb602b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c308::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4b:a7:56:2e:13:66:13:a8:f4:90:b9:3b:43:15:52:39:a4:
         30:6c:24:88:bd:bf:a9:f1:97:cb:e8:83:46:92:4e:f3:10:5b:
         c0:c6:c7:81:4f:60:c2:61:4d:bd:fa:bd:92:c0:53:d9:11:c0:
         3d:6a:e8:c5:23:50:3a:0a:fd:1a:f5:f2:88:09:e8:93:5b:9c:
         78:5f:67:3e:3f:e6:78:fe:e3:bc:4e:21:c9:4a:9a:3d:f8:d8:
         78:74:e0:ed:6b:60:87:dd:e4:82:cf:33:6f:4d:e3:a8:17:9b:
         58:3c:06:e2:1e:cc:8b:0c:2b:8b:ce:88:8f:c6:83:f2:5b:6c:
         5a:0e:3c:b5:1b:78:8e:f9:c5:e6:42:37:d4:f8:97:34:41:88:
         6c:41:45:4b:75:95:70:e0:85:ac:20:87:e7:a2:fd:1a:8e:85:
         0c:91:d2:bb:6d:db:d1:e2:4e:97:37:aa:73:4f:dd:4e:bb:a1:
         bf:ea:e4:38:e7:24:b0:36:61:bb:57:56:c2:75:15:46:60:28:
         23:d5:50:df:ae:83:9f:5d:4a:e3:ee:d9:90:74:7e:fb:42:da:
         62:59:91:99:e9:d7:70:9d:d9:42:ea:8d:59:35:9b:9f:2f:f3:
         41:79:31:52:1a:0c:8b:45:f6:2b:ca:49:2b:bb:99:e0:64:8f:
         09:c2:84:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/ZUX5rlUKFMRScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
YTBiMmIwODQtZGI0Ny00ZDMzLWFkMTctYmZlZTJhYjBmZTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotMZrOINGqX5kJeI0gigrV4A7XImvwY9vooR
warK1jeoWmmZowpg8q5gwFBQtzVRsp7FjsPV9V+hwAN//UkE0zEGUgk6+DD4ND8l
2Qu9l2V5nZVCvPeLGGDZt0398VmWltt9h2fHoY2XF8bdZJ+Bj4KWQ7PCQ3og53Ex
gkmQi7pX0TuI0UNjseLWCbfuM7L/5DvlkjvoBrm58Sd9jBHZ+CVjNII46awiqkKh
u8o0ugbWuWX8H3PQssbVx57HDZw/Qu6PwaFgzEow33NowyeHF6B+XqY16pgnAUXM
3XT4Mw7qQBON3pOmkq/4mRRg7bGRVXORFCc9q9JrAEEB2/AbsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFswGadjow+3YuzXXZxq9WonIPBvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTcwY2E1OTMtNWYzZS0z
ZGU2LWJkNDYtMzk3NjJjYjYwMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcMI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGJLp1YuE2YTqPSQuTtDFVI5pDBsJIi9v6nxl8vog0aSTvMQW8DG
x4FPYMJhTb36vZLAU9kRwD1q6MUjUDoK/Rr18ogJ6JNbnHhfZz4/5nj+47xOIclK
mj342Hh04O1rYIfd5ILPM29N46gXm1g8BuIezIsMK4vOiI/Gg/JbbFoOPLUbeI75
xeZCN9T4lzRBiGxBRUt1lXDghawgh+ei/RqOhQyR0rtt29HiTpc3qnNP3U67ob/q
5DjnJLA2YbtXVsJ1FUZgKCPVUN+ug59dSuPu2ZB0fvtC2mJZkZnp13Cd2ULqjVk1
m58v80F5MVIaDItF9ivKSSu7meBkjwnChMM=
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:06:28 2025 by rpki-client