Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53aeb3e5-bbe6-34d8-b3f2-9f36d5757b58.roa
File:                     53aeb3e5-bbe6-34d8-b3f2-9f36d5757b58.roa (raw, json)
Hash identifier:          6MUz08/XUwi1IENgCn+kGNkCQ0+uAO66NjvMO7KQKSw=
Subject key identifier:   15:B2:DD:35:16:04:3F:6C:FD:F9:E0:C4:16:45:E7:0E:65:18:5E:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A63F5BD778166F7FEB3615380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53aeb3e5-bbe6-34d8-b3f2-9f36d5757b58.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     36040
IP address blocks:        2001:559:0:ae::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:bd:77:81:66:f7:fe:b3:61:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=5b8dae5e-ca0f-4f2f-ace7-f3e28805da7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:7d:e0:c7:19:ef:63:7b:c2:e5:54:e4:de:
                    fc:73:b8:01:6f:6e:a8:9c:fe:1a:fb:59:60:8a:ca:
                    7e:6d:f7:31:0b:40:2d:0e:39:c0:28:78:93:10:19:
                    2d:27:e1:c8:43:ce:d3:a3:4d:d9:41:b9:7c:2c:89:
                    1f:45:b1:a5:18:c7:9c:3d:12:4c:55:ec:47:13:53:
                    32:42:86:34:04:58:99:21:41:16:9d:21:c7:b2:a4:
                    f6:ca:8b:12:27:de:d7:ec:ed:f0:a5:fe:5a:03:3d:
                    f8:31:77:c8:59:35:a9:46:81:c8:c9:71:6b:7c:69:
                    5c:da:e5:5f:cf:34:92:fa:ee:19:a8:df:d5:d4:e2:
                    09:02:a3:d6:69:95:18:54:e7:46:36:3c:1c:83:e1:
                    ba:17:b3:c9:6d:38:7a:1b:36:22:65:61:c2:39:ec:
                    ae:a2:fa:8d:43:5b:63:a1:3a:68:6b:9d:bd:76:8e:
                    1a:c8:80:80:1d:e0:74:4d:73:7f:a1:56:cc:b2:b4:
                    0d:8c:60:ba:cb:a3:62:a7:2b:fa:9e:6a:ea:11:ba:
                    bc:48:25:98:2b:15:72:af:2d:b0:18:78:7f:8a:f5:
                    f4:cc:b7:05:ca:2b:4f:27:b9:23:2a:2a:13:66:96:
                    ac:5b:32:87:be:cc:7c:97:0e:e5:2f:aa:0e:ab:16:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B2:DD:35:16:04:3F:6C:FD:F9:E0:C4:16:45:E7:0E:65:18:5E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53aeb3e5-bbe6-34d8-b3f2-9f36d5757b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:ae::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:39:a6:98:ac:3e:cd:e1:68:0a:a8:fe:e7:ca:05:ce:e3:a1:
         bd:d8:15:57:b7:b9:86:ae:9e:95:ca:6b:08:e3:49:ea:ee:cb:
         f4:e5:98:54:15:a5:a9:cb:66:70:66:e3:fe:b8:be:32:4b:07:
         da:33:89:72:66:e4:3c:fc:11:bb:eb:f9:0b:25:85:7e:57:a2:
         a6:62:8d:a3:67:a0:fe:7b:38:52:58:50:39:52:a8:58:26:68:
         c4:56:01:52:8a:a9:2a:5c:f6:9c:a8:36:03:cf:cc:46:27:a7:
         83:a0:7d:ab:cc:0b:f3:d8:83:38:76:77:f9:39:78:e1:18:db:
         88:cb:fb:00:71:a4:1e:a3:68:66:be:64:4c:18:60:67:c6:0d:
         b3:94:ee:0c:db:fd:61:e2:76:2e:09:11:ed:fe:6e:47:97:e7:
         da:41:ae:a8:93:9b:00:e9:26:c6:3e:ee:59:b7:28:6f:0d:e2:
         90:3d:fb:a9:0d:98:76:df:12:b5:24:fb:9c:aa:1b:16:bc:b8:
         6b:86:80:69:20:e6:bc:89:96:cc:eb:a8:db:7a:fb:53:1d:04:
         39:27:a2:29:99:02:9d:0a:fe:71:1d:69:6a:d0:8b:b5:a9:08:
         f2:dc:07:cf:2d:c3:c4:15:50:e4:ba:63:3f:44:38:f5:e0:78:
         ed:5c:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:33:22 2025 by rpki-client