Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33ded705-1b0a-36ab-9b64-0eb4167ed25a.roa
File:                     33ded705-1b0a-36ab-9b64-0eb4167ed25a.roa (raw, json)
Hash identifier:          cs4RxlGv19zgry0iYrcEEsEuHmmdf4SdTynRPDVPhNc=
Subject key identifier:   D6:73:1D:B7:F6:27:74:DC:45:D2:9E:44:B2:93:7B:71:CC:2F:A9:1B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFDD0BB156CF8D681FDA780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33ded705-1b0a-36ab-9b64-0eb4167ed25a.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33659
IP address blocks:        2001:559:752::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:d0:bb:15:6c:f8:d6:81:fd:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=2f2855df-6ffa-4e41-a55c-454f0a4e4219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:61:e5:0d:a6:7c:a6:f7:e5:1a:72:0e:f5:
                    20:df:88:4d:b0:00:72:3f:dc:e2:d6:df:3f:e6:78:
                    59:d4:07:0d:6c:91:d1:cd:8e:0c:bb:40:e4:61:ed:
                    76:33:b8:05:1d:93:85:12:c2:67:b2:89:08:dc:3a:
                    de:4b:83:1b:24:dd:97:da:cb:33:17:78:77:04:de:
                    49:ed:5d:a0:d8:7b:95:05:53:50:12:9e:d3:e4:50:
                    c1:f9:b0:1d:39:09:14:4f:2a:aa:14:e5:a1:e1:e4:
                    51:d3:4a:86:9a:97:eb:51:42:99:64:a4:02:dc:91:
                    b0:36:52:d3:60:8f:7e:46:ea:64:5a:39:4e:a1:26:
                    d7:b7:74:4e:fa:43:2b:dd:41:0e:97:62:dd:c5:5f:
                    96:85:26:a7:3a:e5:10:7d:d7:a0:72:88:2f:7b:0b:
                    e2:7a:37:bb:d6:86:30:0f:70:4a:f9:be:55:aa:4c:
                    27:68:69:39:49:9d:b9:ef:02:a1:b2:9a:cc:2d:3a:
                    1c:af:76:30:5e:e4:fe:2e:31:78:cc:09:ca:4d:c9:
                    df:86:82:ca:e6:3c:36:ca:62:b4:c6:d7:65:3c:ac:
                    38:f0:d0:e7:50:9e:5b:25:99:ba:0f:41:35:39:d9:
                    69:9b:68:ee:0c:93:73:d9:c0:4b:dc:5f:a8:b5:db:
                    5b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:73:1D:B7:F6:27:74:DC:45:D2:9E:44:B2:93:7B:71:CC:2F:A9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33ded705-1b0a-36ab-9b64-0eb4167ed25a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:752::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:d5:6b:a4:d7:1c:ca:51:c6:99:bd:26:07:a3:2d:e4:d2:
         0b:92:23:05:49:d2:fb:16:03:63:aa:c2:e3:09:5c:23:9a:55:
         02:25:63:24:f9:ed:80:3f:ac:14:73:29:19:bb:08:56:84:6c:
         d6:10:61:11:41:e3:b1:b4:dd:c1:6c:d7:a2:d9:9c:57:fb:21:
         a7:aa:8e:e2:cd:e6:cd:23:c5:92:64:01:65:89:b9:0e:3c:b5:
         d7:96:b7:a3:e1:bd:f1:78:cd:10:92:9c:5a:dd:5f:99:09:39:
         ad:20:af:89:68:eb:b1:d5:3b:d4:b8:ba:fd:03:9a:80:77:55:
         2b:a9:e8:76:80:ef:1f:2c:3a:bb:50:2c:0e:bc:bb:e9:2f:b1:
         66:9c:83:64:47:1f:98:8c:35:36:55:27:c1:6a:70:92:84:b1:
         a4:2d:c4:2e:0d:27:92:a9:62:88:5e:b0:73:2d:7d:23:19:a3:
         70:4e:79:e5:12:2e:ca:7e:50:ec:13:59:2d:03:82:07:be:91:
         f0:c2:31:54:48:06:32:dd:f8:b1:64:7e:f0:ff:53:f7:be:38:
         9c:52:ce:c3:78:fb:54:ba:b4:0e:8a:dc:ba:7f:0f:03:39:63:
         e8:19:20:d2:fd:31:5d:b4:81:2b:74:94:5a:2e:91:f0:fd:6a:
         c4:ca:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:36:22 2025 by rpki-client