Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d6110d5-4f81-375f-bfc9-6249fe2727d9.roa
File:                     0d6110d5-4f81-375f-bfc9-6249fe2727d9.roa (raw, json)
Hash identifier:          YqcYQmC8fFR0Rt5MQ3VZRL6ZcjVgM8FVyiIOrKToafM=
Subject key identifier:   C3:32:D1:48:26:94:C8:1E:CD:4C:4B:F7:99:EC:08:20:E8:F4:74:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6E18947E42FCD0D26E8840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d6110d5-4f81-375f-bfc9-6249fe2727d9.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33657
IP address blocks:        2001:559:3ba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6e:18:94:7e:42:fc:d0:d2:6e:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=04a3846f-54c2-4805-91de-248b4af61604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b0:4a:06:cd:83:f3:a0:17:f7:44:8f:63:5a:
                    76:87:49:80:82:b3:c9:07:eb:c8:2e:e5:96:ce:8e:
                    da:38:cf:54:4f:e7:a2:ee:97:18:62:2d:a4:89:89:
                    16:e5:e5:b1:c5:3e:cc:1f:33:3e:58:f7:3f:06:8c:
                    0d:50:87:a9:bd:57:10:0a:02:1a:17:9c:9f:74:59:
                    eb:c8:4b:71:23:34:5b:e5:f9:e8:38:f5:4a:e1:60:
                    56:54:fb:3f:55:61:53:92:84:f6:46:b1:2d:5e:f2:
                    9c:f6:20:cb:fb:08:cc:17:e9:3a:ec:61:42:c1:35:
                    d5:b4:cf:3f:82:0f:20:cd:5e:9f:2a:6b:9a:e1:0a:
                    75:1c:7e:78:a2:48:17:a3:f9:46:d0:77:ce:6a:2e:
                    e9:c4:6e:2f:60:e4:f6:0c:77:1d:dd:63:c8:26:6b:
                    24:5e:67:23:c0:bb:ea:28:ab:ff:9f:ea:d9:fe:1a:
                    7b:b9:45:14:bd:bd:5a:24:03:75:b7:f3:e6:78:64:
                    25:3c:5e:38:52:62:13:86:aa:55:fd:fc:05:26:be:
                    1c:d7:57:66:ae:45:66:aa:32:a8:ed:51:7e:77:a5:
                    5d:f1:96:5f:35:02:7a:f4:89:b0:9a:ff:21:a0:8a:
                    c5:2a:0c:d0:b9:4b:c2:08:15:22:fe:cb:a2:a3:34:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:32:D1:48:26:94:C8:1E:CD:4C:4B:F7:99:EC:08:20:E8:F4:74:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d6110d5-4f81-375f-bfc9-6249fe2727d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3ba::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a0:e8:17:bd:aa:d7:19:b2:fa:d6:15:4a:47:54:85:19:5f:
         58:15:44:92:28:df:cb:60:58:c0:7b:b9:da:b0:5f:e6:d0:ae:
         e9:ef:99:88:8a:20:a3:62:c0:35:49:eb:91:6c:66:e3:66:13:
         b2:fa:69:c8:ee:88:e1:1d:bf:0c:fb:48:9a:aa:83:3c:d8:43:
         8c:8a:8f:9e:15:69:4f:e0:65:b2:d1:44:62:50:fb:4c:42:db:
         6e:e3:b7:d0:1b:68:b1:a1:c9:1d:1b:6b:13:97:98:3a:52:23:
         0d:96:49:1d:94:f4:41:22:af:3e:59:72:ea:11:2d:d1:c5:2c:
         28:95:ee:d8:67:6e:11:5a:90:2d:3e:b0:7f:70:64:fb:91:cc:
         47:84:3f:f8:aa:c9:ea:6f:48:70:8d:72:3f:f9:7b:f1:a3:7d:
         c1:f5:f1:44:c6:58:52:26:f9:b7:16:9b:88:7a:e4:a8:6e:7d:
         93:6f:e2:c8:46:5c:76:95:49:14:0a:4e:d6:6b:82:7d:06:4b:
         78:48:c0:29:42:83:03:27:a3:df:3a:91:dc:34:67:09:a9:90:
         20:40:bb:ac:dd:3f:d5:d5:65:b9:0b:e9:3d:fd:ab:f6:83:88:
         49:60:73:ad:70:34:a7:a1:e6:ba:00:7c:fd:1d:e8:da:ee:af:
         31:47:7d:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebhiUfkL80NJuiEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MDRhMzg0NmYtNTRjMi00ODA1LTkxZGUtMjQ4YjRhZjYxNjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLBKBs2D86AX90SPY1p2h0mAgrPJB+vILuWW
zo7aOM9UT+ei7pcYYi2kiYkW5eWxxT7MHzM+WPc/BowNUIepvVcQCgIaF5yfdFnr
yEtxIzRb5fnoOPVK4WBWVPs/VWFTkoT2RrEtXvKc9iDL+wjMF+k67GFCwTXVtM8/
gg8gzV6fKmua4Qp1HH54okgXo/lG0HfOai7pxG4vYOT2DHcd3WPIJmskXmcjwLvq
KKv/n+rZ/hp7uUUUvb1aJAN1t/PmeGQlPF44UmIThqpV/fwFJr4c11dmrkVmqjKo
7VF+d6Vd8ZZfNQJ69Imwmv8hoIrFKgzQuUvCCBUi/suiozSrOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMMy0UgmlMgezUxL95nsCCDo9HT+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGQ2MTEwZDUtNGY4MS0z
NzVmLWJmYzktNjI0OWZlMjcyN2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQO6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJug6Be9qtcZsvrWFUpHVIUZX1gVRJIo38tgWMB7udqwX+bQrunv
mYiKIKNiwDVJ65FsZuNmE7L6acjuiOEdvwz7SJqqgzzYQ4yKj54VaU/gZbLRRGJQ
+0xC227jt9AbaLGhyR0baxOXmDpSIw2WSR2U9EEirz5ZcuoRLdHFLCiV7thnbhFa
kC0+sH9wZPuRzEeEP/iqyepvSHCNcj/5e/GjfcH18UTGWFIm+bcWm4h65KhufZNv
4shGXHaVSRQKTtZrgn0GS3hIwClCgwMno986kdw0ZwmpkCBAu6zdP9XVZbkL6T39
q/aDiElgc61wNKeh5roAfP0d6NrurzFHfX4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:14 2025 by rpki-client