Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14f5434-6b5c-3ebf-9674-6e05b644f8d2.roa
File:                     d14f5434-6b5c-3ebf-9674-6e05b644f8d2.roa (raw, json)
Hash identifier:          SL0fhQZCabhMbHDrz7m5FmW08zwTQwav+BBPfiyeqFA=
Subject key identifier:   B4:C1:45:8C:82:FA:3D:F5:A0:9E:7C:AA:47:15:61:15:7C:A0:F3:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC6400272B4D813CDF1340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14f5434-6b5c-3ebf-9674-6e05b644f8d2.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33657
IP address blocks:        2001:558:340::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:64:00:27:2b:4d:81:3c:df:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f7a3a60b-9d8e-46b3-8293-a5c65667843b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cd:50:a6:d7:1e:27:df:bb:0e:ff:31:59:12:
                    e4:fa:c2:92:15:d6:af:fe:45:99:71:c5:e8:77:8d:
                    06:b7:ca:f8:dd:7b:e1:d1:99:29:f4:b1:c7:52:c2:
                    4a:39:ae:ea:ea:a2:f7:e8:de:8a:47:e8:1e:05:ba:
                    2a:38:c6:4a:d9:f9:4d:7a:69:df:a2:ad:b7:2e:29:
                    88:38:9d:7b:00:0c:e8:5e:9a:82:28:c5:be:04:39:
                    5b:4a:42:a7:1a:d0:fe:ff:8e:ad:2c:c9:af:f3:39:
                    b1:49:6c:3d:8b:a4:b3:de:64:24:0b:6f:d5:17:1f:
                    3d:df:4e:49:8f:4a:f3:51:0d:5b:02:93:fd:7f:dc:
                    7b:ab:3d:c4:81:45:03:8d:80:31:e4:33:9c:3c:00:
                    27:14:22:ee:63:56:d8:f4:db:e4:08:58:d9:d6:8c:
                    bb:2e:ae:26:d1:d2:c3:30:60:b7:2f:21:3a:3e:74:
                    da:00:73:c1:3a:cc:b3:60:0f:37:6c:06:51:e6:25:
                    6c:f4:2c:2e:99:db:5c:cd:6d:aa:dc:3e:01:71:cd:
                    88:b7:3d:33:aa:41:dd:b8:d3:b8:79:b2:cf:99:6d:
                    cc:7b:e6:0f:47:22:2d:80:59:b6:1b:e3:86:72:00:
                    78:b5:98:f9:49:79:84:7b:fb:f3:f8:92:be:d3:db:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C1:45:8C:82:FA:3D:F5:A0:9E:7C:AA:47:15:61:15:7C:A0:F3:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14f5434-6b5c-3ebf-9674-6e05b644f8d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:340::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7c:a9:b4:61:08:f5:de:95:91:37:63:ae:d1:3c:f2:66:ec:
         18:d4:6f:9e:6c:c1:3a:a6:86:69:9a:03:2d:7e:da:d9:e0:74:
         d5:a6:c5:1a:1c:51:0f:b6:c0:f4:31:28:bb:a6:d3:8a:67:b0:
         91:a5:68:d5:ff:8c:e3:2a:af:ad:4f:a3:64:b9:fb:5c:4a:ef:
         43:e4:98:e4:28:85:fa:a7:54:c2:19:90:3f:80:36:b2:4c:ea:
         ed:25:12:5e:6a:29:12:3d:c1:16:12:99:7b:f9:72:36:64:f4:
         07:18:30:0a:0e:58:a4:1c:00:f6:5a:83:f8:d0:a2:19:25:f6:
         61:dc:f3:cf:46:c2:09:18:5a:29:48:ee:fa:49:14:3d:68:b2:
         da:b4:59:f1:f9:c8:5b:ce:0e:b4:d8:e5:85:05:7e:6f:40:3a:
         2f:b2:6f:9f:7c:b1:f2:3c:55:65:07:45:7e:97:6a:f7:40:2c:
         b4:35:b8:e3:9d:85:13:3f:50:86:0a:9a:77:dd:63:15:41:43:
         58:d8:6e:5f:8a:c3:f5:2d:4b:a1:1e:06:aa:3a:73:b0:1f:bc:
         eb:b9:cd:5a:29:65:e2:09:b0:45:9c:58:32:fb:2d:1a:54:dd:
         8a:74:f0:4f:5f:64:d7:cb:0d:bc:51:82:cc:08:34:25:eb:a9:
         0b:d5:b7:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/GQAJytNgTzfE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
ZjdhM2E2MGItOWQ4ZS00NmIzLTgyOTMtYTVjNjU2Njc4NDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic1QptceJ9+7Dv8xWRLk+sKSFdav/kWZccXo
d40Gt8r43Xvh0Zkp9LHHUsJKOa7q6qL36N6KR+geBboqOMZK2flNemnfoq23LimI
OJ17AAzoXpqCKMW+BDlbSkKnGtD+/46tLMmv8zmxSWw9i6Sz3mQkC2/VFx89305J
j0rzUQ1bApP9f9x7qz3EgUUDjYAx5DOcPAAnFCLuY1bY9NvkCFjZ1oy7Lq4m0dLD
MGC3LyE6PnTaAHPBOsyzYA83bAZR5iVs9CwumdtczW2q3D4Bcc2Itz0zqkHduNO4
ebLPmW3Me+YPRyItgFm2G+OGcgB4tZj5SXmEe/vz+JK+09v4qwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLTBRYyC+j31oJ58qkcVYRV8oPPoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE0ZjU0MzQtNmI1Yy0z
ZWJmLTk2NzQtNmUwNWI2NDRmOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFWANA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHh8qbRhCPXelZE3Y67RPPJm7BjUb55swTqmhmmaAy1+2tngdNWm
xRocUQ+2wPQxKLum04pnsJGlaNX/jOMqr61Po2S5+1xK70PkmOQohfqnVMIZkD+A
NrJM6u0lEl5qKRI9wRYSmXv5cjZk9AcYMAoOWKQcAPZag/jQohkl9mHc889GwgkY
WilI7vpJFD1ostq0WfH5yFvODrTY5YUFfm9AOi+yb598sfI8VWUHRX6XavdALLQ1
uOOdhRM/UIYKmnfdYxVBQ1jYbl+Kw/UtS6EeBqo6c7AfvOu5zVopZeIJsEWcWDL7
LRpU3Yp08E9fZNfLDbxRgswINCXrqQvVt+0=
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:32:26 2025 by rpki-client