Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b45541f4-b55b-3d4e-9fd9-92e565be6e0b.roa
File:                     b45541f4-b55b-3d4e-9fd9-92e565be6e0b.roa (raw, json)
Hash identifier:          8kKxBaVYXKdhV3tVi/ekxcqvfky9A4RK5DjrWFp/0KY=
Subject key identifier:   89:C0:32:F5:E7:6A:C7:C0:54:6D:E3:EF:CB:6A:E4:8C:F0:D4:23:5E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD53E5B5718A8BF5F0EF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b45541f4-b55b-3d4e-9fd9-92e565be6e0b.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7015
IP address blocks:        2001:559:85dc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:53:e5:b5:71:8a:8b:f5:f0:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=3992f91a-6eb2-409a-bb18-4ed0c7ea9c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:a4:a4:75:7a:cc:0e:02:32:df:c6:fa:fb:
                    84:0a:86:19:75:b8:52:29:97:fa:25:89:22:0f:05:
                    ca:60:51:82:c4:fc:96:2e:d2:8d:8f:c4:d6:df:50:
                    22:9f:94:f5:a5:1a:9b:9e:26:85:b2:30:90:cd:7f:
                    90:1d:83:ce:4e:6e:c1:fe:61:95:34:bc:a2:b1:15:
                    f2:f7:ea:9f:ad:e3:70:81:a0:5d:6d:1c:3a:ee:c2:
                    7e:9b:cb:e2:cb:4a:f9:5e:a7:aa:8e:f3:62:52:99:
                    1c:39:30:75:42:ec:cc:e5:23:d1:18:6f:ea:5c:ef:
                    e3:38:15:8f:67:a2:e2:36:41:71:7c:48:93:53:78:
                    25:b4:57:5c:4f:2f:72:99:a7:79:45:37:60:29:06:
                    ed:1d:ea:d9:3e:74:fd:1f:28:37:e1:53:e9:c7:c7:
                    64:e0:62:ab:9b:17:cf:7f:eb:35:be:99:d0:86:21:
                    fc:47:7e:72:a1:6e:5b:28:31:f6:33:58:ce:52:98:
                    eb:dd:f8:b5:8c:d1:e9:6f:1e:41:af:43:27:73:17:
                    c0:82:7f:07:c4:80:6f:a0:ff:78:55:d4:95:23:74:
                    8c:c9:2d:49:20:da:64:fc:ba:8f:98:27:00:1c:53:
                    74:37:1e:15:67:b4:18:07:ff:78:62:4d:2f:c9:30:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C0:32:F5:E7:6A:C7:C0:54:6D:E3:EF:CB:6A:E4:8C:F0:D4:23:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b45541f4-b55b-3d4e-9fd9-92e565be6e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85dc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ec:74:e2:2f:ea:b2:d7:88:d4:9c:db:d4:6b:b2:0b:ff:21:
         fa:5e:fc:81:4b:50:42:a4:a5:8a:8d:43:a7:29:8b:fb:e6:68:
         c4:34:5a:ad:a8:2a:40:81:ba:d9:71:30:9a:af:02:0a:0c:76:
         81:d5:e3:e7:01:09:2a:e9:63:e8:4f:ab:38:40:28:42:60:58:
         cc:34:bb:ad:f2:2d:b3:77:1a:d6:e1:92:b0:b0:9a:76:03:4f:
         64:9e:ea:fe:db:37:22:a5:1d:6f:cd:d6:c3:ec:58:bd:4b:d8:
         67:49:76:b9:38:3e:b4:01:67:04:17:18:a1:5f:43:f0:48:80:
         92:ff:12:32:16:61:a1:08:10:e3:9c:b5:ea:7f:2b:25:20:d6:
         f3:3c:74:96:f0:45:fb:11:6a:91:a1:cf:cb:d3:a1:c9:8b:98:
         61:c9:d4:02:08:ff:86:67:a8:ed:d4:5a:ef:b7:f9:dd:d6:90:
         a5:3c:00:f8:3e:ab:2c:ac:b9:bd:db:74:01:14:75:42:03:8d:
         80:52:54:7e:9f:42:75:6e:f6:b4:e9:80:9a:f5:6c:da:d5:d7:
         3e:39:ac:29:a6:30:c3:a6:51:d0:80:5c:07:7a:33:69:40:6e:
         4c:0d:cd:71:ff:1d:95:fe:3f:0a:4c:ee:05:ba:29:80:ae:3a:
         21:2c:c7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:17:13 2025 by rpki-client