Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/974568a1-ba58-32dc-9afd-19e71c852967.roa
File:                     974568a1-ba58-32dc-9afd-19e71c852967.roa (raw, json)
Hash identifier:          aighV7EVh+Mphcyk31XoOH1JAV6VzBO/jx77b+wPP2s=
Subject key identifier:   1F:8D:DC:C4:43:79:70:8E:BC:EE:BE:CF:B1:A1:36:C1:C8:1F:20:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA63CC98D35CBF068B27C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/974568a1-ba58-32dc-9afd-19e71c852967.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33651
IP address blocks:        2001:559:c48c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:3c:c9:8d:35:cb:f0:68:b2:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=4ccb4b38-da75-4cc1-b900-3bb20655fb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6d:57:0f:6d:5d:50:22:f0:75:ea:81:84:d6:
                    e7:2f:aa:4b:23:cb:75:a2:b9:ac:fd:cb:57:b2:5f:
                    ba:d4:23:11:84:52:61:93:46:7a:15:59:46:43:6a:
                    d5:de:b0:5b:72:21:45:bc:d0:e2:6b:09:af:52:04:
                    47:e6:8e:9a:9f:1c:ae:32:f7:b3:e8:a7:85:86:99:
                    0b:f3:b4:12:45:5d:93:1e:fe:56:5f:34:6d:87:10:
                    a8:ff:b0:35:c3:28:36:ab:7e:74:72:9b:e4:30:3c:
                    c9:e4:a9:49:3e:50:bc:46:e5:d0:21:60:48:fd:cf:
                    9c:20:82:32:58:c4:95:5e:d3:5a:06:c1:5f:c3:8b:
                    6e:47:de:f4:78:3b:e1:3f:9f:72:30:ef:c0:17:b4:
                    6e:df:5b:12:1a:3c:f3:79:ce:99:36:d1:98:6a:e5:
                    dd:7c:f9:fa:69:02:b4:a8:6e:73:de:86:a5:9d:3a:
                    7b:09:ca:c3:b6:b9:41:65:e0:01:b4:cd:e3:bb:bb:
                    bb:0b:30:4f:77:e5:64:a0:9b:73:c4:07:36:18:c0:
                    53:5b:83:9f:7e:99:a0:61:1b:9e:57:85:3e:3b:e5:
                    ee:f4:14:2b:28:9c:6c:0a:91:c9:d9:b4:97:ad:42:
                    82:90:3e:5c:ed:34:37:1f:6b:83:cb:02:8c:d4:f2:
                    3f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8D:DC:C4:43:79:70:8E:BC:EE:BE:CF:B1:A1:36:C1:C8:1F:20:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/974568a1-ba58-32dc-9afd-19e71c852967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c48c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:5e:46:2c:8b:f4:02:b6:56:07:bc:a6:f2:e1:54:9e:38:b7:
         40:0e:7a:55:97:dc:95:9b:24:ed:7e:99:e1:39:1a:1f:23:af:
         99:1f:a6:bf:9c:6b:9c:13:50:88:df:43:c6:58:7a:1f:ab:4f:
         83:ad:7e:69:11:79:f2:07:cc:b7:e2:a4:90:66:e0:6e:2e:54:
         df:22:b2:da:bd:52:ee:72:e7:ab:3e:2e:2c:88:2c:15:6e:bf:
         80:bd:f1:3e:50:a2:cc:54:32:73:63:58:b9:7d:b9:5e:9d:a9:
         b8:e4:e8:95:2e:88:f7:fb:6d:ff:2d:40:bd:9d:07:4f:0e:70:
         df:d9:d8:96:26:52:cc:b5:d8:ab:a4:06:35:07:4b:f7:66:75:
         6d:f0:34:41:ff:72:fd:4b:0d:59:d7:70:76:4d:3b:33:70:ad:
         1d:14:a7:b3:7a:65:22:28:7b:d5:73:b9:bd:2c:aa:70:6c:a9:
         a2:2d:60:ef:bc:58:88:8d:4b:3e:4b:b3:62:8e:15:39:e7:ed:
         c0:f3:1b:fc:51:f0:0f:4b:4b:89:6b:44:9c:2c:6b:13:f9:e0:
         b3:22:ff:a9:25:89:9e:f9:fa:ce:68:18:2f:ee:57:66:79:8d:
         21:b1:67:0e:e7:f6:12:2f:d1:77:2d:3a:ff:d3:b4:2d:44:ae:
         26:ea:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:35:29 2025 by rpki-client