Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6ae26e1-2d7a-321d-a5e0-884bd1f2cfe6.roa
File:                     e6ae26e1-2d7a-321d-a5e0-884bd1f2cfe6.roa (raw, json)
Hash identifier:          Eee5/OOn2sLarCVrObZmH+TvU4SssDgBJ7V4XC+o5GM=
Subject key identifier:   32:1F:68:37:16:BF:8E:C4:A1:DD:EA:EC:A2:CD:AA:34:1C:FF:3A:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB757EED4651AD77E2AF500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6ae26e1-2d7a-321d-a5e0-884bd1f2cfe6.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7016
IP address blocks:        2001:559:20f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:57:ee:d4:65:1a:d7:7e:2a:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=8c3ff711-d951-4e09-a834-1ce77568bcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:5c:29:40:3e:d5:f4:12:61:41:f7:2b:c9:
                    13:66:53:62:18:2d:df:8d:a0:39:72:89:33:ac:78:
                    27:37:35:12:9f:cc:d6:e1:59:d8:d1:b2:6c:0c:08:
                    79:81:7f:a9:e4:39:fc:8f:ab:24:4e:39:1e:34:dd:
                    5f:30:03:1c:da:07:b8:ac:a9:2d:25:e1:17:0a:f8:
                    ae:c7:b4:b4:5c:7c:cd:88:81:73:a4:4b:77:05:70:
                    92:ec:ea:d3:9c:88:c8:a7:f4:30:25:cd:36:e1:35:
                    7b:19:93:13:6e:1b:71:24:cd:40:3e:80:4f:a4:19:
                    b5:75:54:37:30:6c:76:53:5b:57:02:42:e4:af:89:
                    c7:2f:0e:61:a8:ee:94:3d:45:d7:a2:a4:6d:82:be:
                    04:eb:bf:71:75:e8:10:e2:df:61:b1:e7:cb:72:39:
                    80:64:18:4b:b4:73:35:59:65:aa:ba:98:5f:3c:8f:
                    a4:d7:32:ca:f5:6b:1d:19:c4:b8:ee:ac:27:8b:1c:
                    30:36:26:c8:57:16:49:43:1d:e2:f6:8d:87:c3:9c:
                    c0:81:9e:7b:b6:d4:43:ff:e0:ec:62:0d:a5:e5:16:
                    fe:f1:41:08:df:e0:9c:34:85:32:a7:a1:4b:66:a8:
                    74:c3:72:1f:e8:0e:70:bb:17:39:66:c5:b9:12:37:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1F:68:37:16:BF:8E:C4:A1:DD:EA:EC:A2:CD:AA:34:1C:FF:3A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6ae26e1-2d7a-321d-a5e0-884bd1f2cfe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:20f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:61:be:57:e5:62:bf:dd:8c:a8:8e:ff:f5:1c:71:39:45:21:
         4b:af:fe:0a:7d:74:1b:db:94:94:bb:a8:7d:10:57:42:d1:fb:
         60:51:a5:f1:dd:cd:ea:31:a7:26:3a:d3:ea:89:52:31:8b:a2:
         8f:91:a6:60:c3:62:21:c6:41:2b:4d:6f:39:a7:6c:b9:d3:0c:
         53:86:7b:c0:b7:e6:01:e8:5a:c3:6d:fd:b1:d2:74:cd:0b:78:
         4e:9e:61:eb:25:4c:cb:3c:bc:fd:f9:6b:fa:28:3a:e4:24:11:
         39:67:7e:9b:d6:81:6a:3f:63:57:20:b7:a3:09:ae:6c:26:d8:
         33:b7:32:6c:d0:fd:fc:40:8b:ca:c0:96:bd:f5:42:a0:30:c5:
         8c:23:9a:7b:66:ae:94:70:1b:88:67:5e:8b:63:b3:10:a7:a2:
         6c:50:b2:52:25:c4:97:92:2a:a8:bc:51:f8:df:7e:bb:a1:7f:
         5e:e3:7a:4e:b1:5c:91:33:75:09:67:10:f4:5f:b5:c8:6c:84:
         f1:8c:23:00:78:1d:f3:2b:6a:5d:50:28:2b:34:da:e9:a3:31:
         51:fb:07:8c:e2:b6:31:24:5c:70:df:2e:0d:09:96:32:45:c7:
         d0:3e:38:4f:5f:fb:45:20:c8:48:fd:b8:63:cd:b7:8d:19:30:
         5b:76:c2:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t1fu1GUa134q9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
OGMzZmY3MTEtZDk1MS00ZTA5LWE4MzQtMWNlNzc1NjhiY2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOpcKUA+1fQSYUH3K8kTZlNiGC3fjaA5cokz
rHgnNzUSn8zW4VnY0bJsDAh5gX+p5Dn8j6skTjkeNN1fMAMc2ge4rKktJeEXCviu
x7S0XHzNiIFzpEt3BXCS7OrTnIjIp/QwJc024TV7GZMTbhtxJM1APoBPpBm1dVQ3
MGx2U1tXAkLkr4nHLw5hqO6UPUXXoqRtgr4E679xdegQ4t9hsefLcjmAZBhLtHM1
WWWquphfPI+k1zLK9WsdGcS47qwnixwwNibIVxZJQx3i9o2Hw5zAgZ57ttRD/+Ds
Yg2l5Rb+8UEI3+CcNIUyp6FLZqh0w3If6A5wuxc5ZsW5Ejff4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDIfaDcWv47Eod3q7KLNqjQc/zosMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTZhZTI2ZTEtMmQ3YS0z
MjFkLWE1ZTAtODg0YmQxZjJjZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQIP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJRhvlflYr/djKiO//UccTlFIUuv/gp9dBvblJS7qH0QV0LR+2BR
pfHdzeoxpyY60+qJUjGLoo+RpmDDYiHGQStNbzmnbLnTDFOGe8C35gHoWsNt/bHS
dM0LeE6eYeslTMs8vP35a/ooOuQkETlnfpvWgWo/Y1cgt6MJrmwm2DO3MmzQ/fxA
i8rAlr31QqAwxYwjmntmrpRwG4hnXotjsxCnomxQslIlxJeSKqi8Ufjffruhf17j
ek6xXJEzdQlnEPRftchshPGMIwB4HfMral1QKCs02umjMVH7B4zitjEkXHDfLg0J
ljJFx9A+OE9f+0UgyEj9uGPNt40ZMFt2wlo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:38 2025 by rpki-client