Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e35d0700-9c9f-382f-9316-b46a5dcea50f.roa
File:                     e35d0700-9c9f-382f-9316-b46a5dcea50f.roa (raw, json)
Hash identifier:          4rHPBuwRCuyKSXDulNxdGX8d892VEvaXzEidgs1YaWQ=
Subject key identifier:   39:AE:43:20:53:9E:0F:41:8C:F0:9E:D6:5F:2E:4D:D9:BD:D3:2D:F6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7EB792C78950580924480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e35d0700-9c9f-382f-9316-b46a5dcea50f.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7015
IP address blocks:        2001:559:c432::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:eb:79:2c:78:95:05:80:92:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=5fa5bc71-3256-4a02-88a1-f8913dce8998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cd:cf:40:bd:c3:3c:e4:a6:f5:b9:53:b1:32:
                    2f:c7:67:f0:0f:4f:48:a4:f3:7f:2f:1a:6f:dc:60:
                    2c:2b:46:20:6d:d7:ca:87:72:d3:aa:25:63:03:74:
                    70:cd:1e:48:c8:4a:04:f7:b2:68:41:6f:f5:77:67:
                    ae:63:34:48:7a:c1:37:da:b9:e4:66:98:39:95:01:
                    e2:40:d7:42:85:05:46:1b:3d:7e:4e:26:20:8a:e9:
                    85:25:12:78:cd:e3:13:80:64:33:2a:e2:26:75:8e:
                    ac:06:59:89:1a:a0:3b:3f:41:9d:3e:13:69:2e:cb:
                    9d:8d:71:47:58:a7:a5:4b:a5:f9:f3:9b:19:c8:4d:
                    72:b3:81:20:a7:48:19:57:50:88:35:62:b8:bf:d9:
                    6b:97:d9:62:67:d6:6b:e6:77:c5:06:5a:6c:93:07:
                    eb:77:7f:01:e9:cd:4f:bc:32:68:2d:8d:b0:aa:d7:
                    60:e0:97:65:ba:1d:3f:92:75:8f:a7:c9:49:ff:b6:
                    bb:d2:ee:91:b2:bb:b2:37:b4:2c:b1:3c:c4:29:17:
                    a3:03:9d:06:30:b9:38:c2:78:af:73:82:ae:c3:6c:
                    74:5d:1d:b4:82:ba:0c:fc:3c:a4:50:f1:20:d9:fb:
                    f3:e7:0d:1f:c5:ec:da:c0:79:a7:34:b0:c3:7e:c5:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AE:43:20:53:9E:0F:41:8C:F0:9E:D6:5F:2E:4D:D9:BD:D3:2D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e35d0700-9c9f-382f-9316-b46a5dcea50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c432::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b3:3a:74:0c:de:42:fa:3f:c8:a3:23:d1:df:9a:23:60:62:
         3f:92:6d:23:d7:26:af:18:25:86:42:fc:61:a6:46:7f:61:0e:
         97:d3:45:bc:25:70:f0:21:f0:a3:ee:5c:71:24:cc:84:fc:6b:
         33:2c:db:fc:eb:96:3b:1d:82:6b:b4:dd:6e:87:9c:16:61:ea:
         33:d0:82:49:71:33:79:60:49:cc:a5:3c:2c:26:4b:42:ec:1e:
         92:e6:ec:fb:68:fb:4d:19:47:74:42:a1:6b:c1:9d:ef:fb:aa:
         0a:d1:b7:10:2b:69:14:67:ea:63:0b:71:4f:fb:0e:0d:04:63:
         e9:c4:73:8b:0e:34:12:7d:f9:44:d2:f7:ab:44:96:17:7b:c9:
         45:06:aa:3f:ee:bc:44:d6:31:05:4d:05:a1:1d:ad:7b:7f:fc:
         0a:9d:e5:61:b4:2c:b7:6b:d9:19:d2:02:4b:a1:51:ae:95:e5:
         b7:94:a3:f2:6c:7c:04:1d:68:f5:d4:9c:bd:d4:63:4c:07:70:
         ea:3c:a8:9d:c7:a3:fc:0b:1c:e8:0d:7d:ae:e7:57:99:21:b9:
         10:41:66:56:2d:9a:7d:0c:1d:d7:d0:82:e9:d3:30:98:35:77:
         a2:08:b8:e5:7f:aa:88:04:e0:d5:82:0d:14:ce:15:16:a2:6e:
         31:8f:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:31 2025 by rpki-client