Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d902cf49-74ab-3494-b375-291b886c245e.roa
File:                     d902cf49-74ab-3494-b375-291b886c245e.roa (raw, json)
Hash identifier:          EM0FGEsrjTWI0S2N0BERzKYeZDH2Mcv0KH71uISnOjc=
Subject key identifier:   85:28:0C:5F:66:A8:65:FA:2F:07:3F:FC:F5:12:FB:FE:2D:DD:15:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB84F5BA5F03E1E4495C40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d902cf49-74ab-3494-b375-291b886c245e.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7016
IP address blocks:        2001:559:84f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:84:f5:ba:5f:03:e1:e4:49:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=e75d7787-e219-4d80-aa82-30682af6d1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:54:73:87:08:54:5c:41:6b:73:74:80:ba:
                    93:39:50:fd:11:65:14:ec:db:ed:4f:0d:fe:0e:cf:
                    3d:b2:85:fe:09:7a:a8:2a:86:ec:b9:82:b9:a1:c6:
                    e7:e6:17:77:ff:12:50:0f:ed:4f:b7:8d:35:07:d7:
                    7e:0d:97:c5:d9:f5:32:e3:4e:ed:44:f4:d2:4b:47:
                    9c:45:3a:5b:10:ae:25:48:51:72:ae:4a:ed:e8:e5:
                    4f:8f:3a:45:70:7f:70:67:04:10:37:fb:59:ba:b7:
                    fa:14:d8:6e:d1:38:8c:b5:35:13:4f:47:b6:7d:eb:
                    d3:52:1f:db:50:e0:12:26:0d:a9:34:cd:1e:f5:5e:
                    64:76:23:88:96:00:ec:53:38:73:99:a2:ba:2a:d2:
                    f1:c2:b5:3a:eb:ad:ef:05:8f:a4:22:14:6f:28:a8:
                    06:35:a2:92:a2:fa:bd:6f:27:8d:81:7f:f7:a7:ab:
                    f9:a8:7e:ca:e6:50:59:b9:7d:51:06:b0:eb:36:64:
                    42:5e:36:1a:41:8f:23:ce:23:85:0d:6d:f2:b0:29:
                    6b:63:bd:15:41:c5:c4:37:75:72:21:7e:4f:f7:1b:
                    67:65:2b:f9:ac:3f:ee:11:70:b7:4f:94:c9:0b:93:
                    1f:b8:6e:2f:17:08:46:93:ce:8d:6e:8f:4f:05:14:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:0C:5F:66:A8:65:FA:2F:07:3F:FC:F5:12:FB:FE:2D:DD:15:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d902cf49-74ab-3494-b375-291b886c245e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:84f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:04:d2:57:45:96:97:4c:89:e2:fe:ea:9a:15:c7:e4:7a:3e:
         53:2b:54:99:38:a8:f2:24:ac:00:50:7f:64:24:f1:52:b9:cb:
         3d:68:19:c9:89:96:0f:33:bc:b8:47:82:8a:6a:ee:da:9f:8d:
         73:7a:b0:0b:8b:89:24:c7:e2:07:36:9a:af:1e:f3:7b:1d:2e:
         7f:d4:a3:59:31:61:29:c8:28:a6:69:9a:a9:1f:22:a0:a4:81:
         8c:8f:98:2a:d7:32:07:ed:f1:14:cb:03:f1:ea:c8:ef:09:61:
         32:15:52:01:6d:91:76:f2:96:da:79:41:b1:d4:7e:3f:d4:e5:
         57:d4:a9:4f:db:71:ee:90:6e:7a:40:52:fb:64:f7:9d:a5:1f:
         c0:08:9a:3e:17:20:69:c7:b3:ab:53:55:af:45:63:24:bb:e7:
         ec:aa:d2:71:37:fe:19:31:ef:9e:ef:11:82:a8:f4:68:c3:ca:
         2c:0f:03:a0:ef:db:43:60:ba:a7:8d:06:1c:66:25:23:3e:72:
         66:91:c6:cd:13:63:59:d0:76:c9:13:e0:a4:00:a9:9c:b2:f5:
         dc:47:1f:be:cb:d9:c1:78:ef:a0:75:2f:9f:9f:d3:9e:64:80:
         3b:a3:8c:ec:0b:7b:5e:61:c2:08:9f:c9:eb:19:1d:bb:11:2e:
         a3:a6:2a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:37:30 2025 by rpki-client