Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d41a1d3b-bec2-3dc3-a9dc-b37b804259d6.roa
File:                     d41a1d3b-bec2-3dc3-a9dc-b37b804259d6.roa (raw, json)
Hash identifier:          6oEQJ4CvW3v6MTyovqr1IAD8Bxij1xwK0YmZReQ1P5E=
Subject key identifier:   7A:D6:01:EE:B5:AF:A1:AB:D9:63:27:49:2B:BF:51:9D:EC:FC:AE:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCCFF507B5B3FDB73A3100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d41a1d3b-bec2-3dc3-a9dc-b37b804259d6.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        2001:559:3b8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:cf:f5:07:b5:b3:fd:b7:3a:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f5da1c64-dca9-4567-a44c-6d2e0b2a1ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:3a:13:b6:67:c4:8c:e7:a8:e7:f9:ca:8d:
                    d6:87:a5:1e:55:c2:e8:95:e1:7a:f9:e0:8f:19:6b:
                    62:9e:40:d3:7c:03:4c:af:32:0e:20:f2:56:2a:3e:
                    e6:bc:bd:ed:29:96:97:60:fd:9e:86:e0:2b:5e:32:
                    99:77:58:db:4c:e7:f3:12:aa:e0:17:e7:76:49:2e:
                    b2:9f:e1:a7:8c:76:f0:33:0e:5a:2f:c5:4a:38:6c:
                    75:8d:ed:cb:a6:a0:06:2d:f4:b9:25:57:97:32:a8:
                    1f:ea:ca:03:89:ef:61:ac:06:69:e9:d4:4e:1a:ef:
                    1f:88:26:7d:8f:fc:73:41:c3:2e:2e:f0:ff:fd:28:
                    63:61:2d:96:40:68:71:54:53:30:ac:3d:e9:b0:90:
                    82:96:38:36:95:55:ba:90:9f:f9:dd:c9:5f:66:48:
                    70:68:31:a4:9c:df:60:42:12:4f:31:88:5d:a4:83:
                    07:5d:4d:3e:d9:4a:5d:40:16:84:04:a0:23:6f:d0:
                    ce:e4:10:a7:0d:04:fd:d6:a6:1d:76:3c:b6:bc:c5:
                    15:17:7a:d9:d7:db:2f:40:7c:e5:50:93:c7:11:69:
                    08:db:e7:ec:50:51:fd:11:93:27:6d:9f:55:ce:1f:
                    d2:85:bf:f7:24:04:f1:f8:b4:2e:69:97:9d:08:97:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D6:01:EE:B5:AF:A1:AB:D9:63:27:49:2B:BF:51:9D:EC:FC:AE:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d41a1d3b-bec2-3dc3-a9dc-b37b804259d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3b8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:74:9f:d0:05:db:cc:db:c4:bf:d6:d8:3c:dd:80:c7:84:
         71:27:e2:9f:fc:a4:da:9a:64:9f:9a:34:0b:0d:bf:cc:d7:83:
         ee:6f:8a:a0:ae:e5:3b:21:63:5d:49:71:5c:3d:ff:8a:49:ab:
         29:51:0a:17:3c:4a:b4:3e:95:98:68:ce:ed:c4:7a:eb:85:a4:
         b9:e1:e0:da:e0:21:b9:fa:0e:30:b6:f0:a3:eb:f8:db:24:e6:
         69:32:4f:a7:00:0d:bf:d0:43:32:f8:62:91:06:54:45:a1:98:
         33:6b:a5:75:41:c9:75:4e:3c:60:5b:a8:eb:12:22:7c:98:63:
         31:fc:6f:d5:f9:5b:34:30:4c:63:be:9f:d5:b5:77:03:80:75:
         5f:f5:ad:b7:55:d6:e1:4d:75:87:99:3d:48:6d:16:13:10:5f:
         15:b8:71:b6:54:88:d2:82:9c:34:4f:b6:d7:17:39:de:3b:26:
         08:9a:64:f8:2d:66:76:c8:6d:98:55:62:05:a5:2d:f0:8b:80:
         59:ab:77:63:d5:81:60:be:89:44:2b:67:cc:70:89:92:6b:80:
         5c:8d:e7:4b:c9:40:64:fc:8d:cd:57:96:4e:96:09:18:78:48:
         79:0b:2b:4f:dc:37:44:5e:1a:65:e0:6e:21:f5:e9:fc:22:d0:
         8d:02:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:16:53 2025 by rpki-client