Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61bb0d1e-010d-38c9-8fdb-8f894ff76942.roa
File:                     61bb0d1e-010d-38c9-8fdb-8f894ff76942.roa (raw, json)
Hash identifier:          g6KTN6tfP/e/snmg4uvUD61JKlEqvsPbUzoDYQ33+EQ=
Subject key identifier:   7B:7E:32:65:3E:41:EA:2F:EA:9C:B2:BB:0F:B0:97:35:2F:C5:10:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD8D38E91CBCFB241F09C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61bb0d1e-010d-38c9-8fdb-8f894ff76942.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        2001:559:43f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:8d:38:e9:1c:bc:fb:24:1f:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=a4e61aea-77e0-4a34-a0c5-7a44af8e6557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:33:de:b7:2b:fa:9f:59:55:ce:08:14:5b:
                    d5:63:5c:8c:7a:09:95:a6:e3:ab:4b:f1:a0:77:f4:
                    33:73:83:73:24:d8:5f:69:a7:39:77:48:97:a3:e0:
                    b3:5c:b3:4d:9e:34:a2:63:4f:7c:1b:8d:e7:bf:54:
                    63:01:75:af:4f:a4:d5:19:e7:71:7c:65:34:18:4b:
                    3e:0f:d8:f4:37:53:b0:06:44:c9:94:38:13:17:04:
                    77:5f:94:13:34:94:9a:f7:e3:b4:fb:21:c8:e1:3e:
                    ce:e5:c2:b1:24:82:10:cc:0b:ac:65:21:70:2b:dc:
                    5a:96:29:d6:7d:fc:53:d2:18:70:96:38:2d:96:9a:
                    42:72:60:80:8c:71:1d:a3:c6:5a:1d:b2:dd:71:36:
                    86:17:43:0b:dc:dd:40:a6:c2:b2:0c:0f:80:82:56:
                    ec:bf:5b:70:94:ab:52:02:08:c4:6e:16:b0:0b:63:
                    ac:b6:55:51:e2:dc:85:9b:ab:52:48:ac:60:3c:2f:
                    30:1c:0d:85:03:4a:1c:48:14:4c:f4:cd:73:7e:d4:
                    af:52:fb:2e:9a:5b:de:97:05:02:b4:27:c2:1a:e8:
                    f6:c9:25:7b:8a:9e:af:a9:ec:4a:ab:e5:ed:73:2a:
                    4c:de:84:df:0b:91:72:bc:4e:d9:d9:05:22:48:bc:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7E:32:65:3E:41:EA:2F:EA:9C:B2:BB:0F:B0:97:35:2F:C5:10:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61bb0d1e-010d-38c9-8fdb-8f894ff76942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:43f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:8f:de:69:7d:84:2f:a4:f0:3d:5c:94:e2:c3:96:5c:3e:47:
         82:3d:5f:62:b3:08:11:00:d8:63:15:ee:8f:bf:b1:6d:31:6d:
         65:cd:df:ab:40:ea:7c:f1:76:7c:5f:76:7b:2b:66:fd:da:a8:
         3d:03:6b:a7:ce:3a:97:2a:d3:c7:5f:69:00:be:c3:02:9f:02:
         d4:2c:39:9c:e0:41:a8:51:b9:a7:28:e1:71:ae:70:53:05:4a:
         39:a9:78:74:23:3c:2b:f1:84:c2:87:9f:94:b7:d2:23:85:d5:
         a7:e5:38:59:b3:04:31:98:a6:61:b8:ea:3c:f2:82:68:f3:30:
         ad:10:94:ce:14:64:39:fd:8c:46:c1:af:b3:73:e7:ac:17:45:
         cc:1b:af:0f:8d:21:2f:9a:fb:ab:66:fb:11:29:97:d5:3d:ad:
         fa:b2:fb:8d:35:b0:ad:d4:9c:83:64:1d:3d:ca:85:7c:ab:a0:
         54:0f:e2:a5:03:73:ce:4e:c0:a0:f1:90:1d:45:fb:a1:88:db:
         f1:75:7a:89:91:f3:d1:e2:1f:83:99:83:ce:ef:c6:03:c8:1e:
         07:a9:ca:b4:79:4c:9f:bc:d4:6f:78:8a:fc:cb:c5:2e:00:77:
         27:3b:a1:a1:6b:84:b6:1a:08:8f:69:97:52:1f:dd:5f:d5:6b:
         86:78:c9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:16:36 2025 by rpki-client