Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/101a8cbc-12e3-3a2a-ad65-7749786c6c4b.roa
File:                     101a8cbc-12e3-3a2a-ad65-7749786c6c4b.roa (raw, json)
Hash identifier:          eVEtZ3oM/+MSZRgmvmk/B0aShY54JDR8FsCyAPBwqeo=
Subject key identifier:   F6:97:CA:E9:B2:84:6D:F7:5F:A2:57:19:7E:AA:59:66:64:D7:5B:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CC4F5386CE3E52B2F06D8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/101a8cbc-12e3-3a2a-ad65-7749786c6c4b.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33659
IP address blocks:        2001:559:c126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:c4:f5:38:6c:e3:e5:2b:2f:06:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=2266d0f5-8684-433b-8749-86544b4b916c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2d:0d:3c:05:46:06:b2:b5:49:96:31:8c:69:
                    04:1c:eb:d3:50:72:c8:ff:6b:33:71:07:fe:cb:c0:
                    bb:ae:7a:45:2e:b8:94:30:3d:65:d9:56:85:2e:57:
                    6e:55:4c:b8:7d:65:0c:92:d1:26:e0:84:a2:27:6c:
                    d3:0d:65:f4:e9:90:3b:57:13:37:4a:ba:43:ca:61:
                    45:d3:26:70:cb:df:06:c8:46:f7:b2:a2:ef:64:8e:
                    53:37:51:20:38:8c:3c:29:b4:56:da:71:e6:35:03:
                    21:50:10:83:50:99:9f:a3:31:b9:c7:c1:5b:06:3d:
                    c8:ef:d4:32:92:f4:6f:0f:2d:e5:43:2f:d2:9e:ca:
                    8a:f1:74:07:2e:5c:5b:89:02:fb:30:7b:50:8b:77:
                    34:df:74:b2:e2:0a:f0:74:2b:d8:82:0f:73:c2:e5:
                    db:56:ef:87:84:11:e6:4d:be:29:2d:71:ea:43:bf:
                    a1:ad:aa:e7:c7:71:2d:34:e7:9e:4c:fb:34:7b:97:
                    3d:d7:57:44:5a:af:7a:1d:87:8d:af:3d:0d:9d:c6:
                    e0:9a:ce:cf:d5:c9:81:14:4d:9e:69:91:f8:f0:2e:
                    ac:7e:c6:0d:00:54:90:e7:de:39:8b:5a:b4:34:3f:
                    77:52:0c:70:62:5a:77:d5:44:41:2c:67:0e:c3:11:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:97:CA:E9:B2:84:6D:F7:5F:A2:57:19:7E:AA:59:66:64:D7:5B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/101a8cbc-12e3-3a2a-ad65-7749786c6c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:85:90:9d:c0:3c:35:c2:bd:68:6f:58:e8:62:68:b0:c3:35:
         60:7f:5a:71:ec:ab:88:28:f9:2b:10:2e:b8:0e:9f:43:1a:3b:
         a2:49:02:88:10:a6:23:9b:5e:20:6f:e9:20:34:57:3f:b3:b5:
         5a:db:64:8d:41:1a:68:6a:f6:ab:da:36:0c:91:0b:83:f9:67:
         24:f1:34:b8:f4:2b:e8:6c:43:02:fd:aa:05:03:86:54:4b:67:
         ea:fe:9f:63:9f:b7:1d:9a:f8:a5:08:a9:9c:a0:45:b0:96:15:
         98:19:94:b3:84:9c:75:4a:47:25:b2:bf:78:4f:7f:20:d9:a1:
         69:43:bc:d7:e7:57:bd:82:da:d4:91:8e:7d:da:36:1f:1d:f8:
         38:8f:02:ad:f0:52:df:60:5d:af:5c:50:fe:dc:3f:8d:ac:b2:
         48:3f:4f:43:6f:a2:26:d3:de:40:10:01:0a:29:43:6b:ed:31:
         f0:0a:6a:6b:ba:fa:39:3d:62:d3:b5:db:7e:39:01:37:b7:24:
         ab:bd:89:9e:04:5b:82:9f:1f:7e:05:24:0c:d4:78:1d:30:65:
         99:1b:dc:cc:12:25:5d:a4:3d:ae:5a:26:df:e9:50:fb:b6:7e:
         b7:10:23:a3:63:fe:9a:6e:87:53:00:66:98:9c:fd:bc:6c:13:
         66:a4:08:3f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebMT1OGzj5SsvBtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MjI2NmQwZjUtODY4NC00MzNiLTg3NDktODY1NDRiNGI5MTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7S0NPAVGBrK1SZYxjGkEHOvTUHLI/2szcQf+
y8C7rnpFLriUMD1l2VaFLlduVUy4fWUMktEm4ISiJ2zTDWX06ZA7VxM3SrpDymFF
0yZwy98GyEb3sqLvZI5TN1EgOIw8KbRW2nHmNQMhUBCDUJmfozG5x8FbBj3I79Qy
kvRvDy3lQy/SnsqK8XQHLlxbiQL7MHtQi3c033Sy4grwdCvYgg9zwuXbVu+HhBHm
Tb4pLXHqQ7+hrarnx3EtNOeeTPs0e5c911dEWq96HYeNrz0Nncbgms7P1cmBFE2e
aZH48C6sfsYNAFSQ5945i1q0ND93UgxwYlp31URBLGcOwxGSZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPaXyumyhG33X6JXGX6qWWZk11t7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTAxYThjYmMtMTJlMy0z
YTJhLWFkNjUtNzc0OTc4NmM2YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcEm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABaFkJ3APDXCvWhvWOhiaLDDNWB/WnHsq4go+SsQLrgOn0MaO6JJ
AogQpiObXiBv6SA0Vz+ztVrbZI1BGmhq9qvaNgyRC4P5ZyTxNLj0K+hsQwL9qgUD
hlRLZ+r+n2Oftx2a+KUIqZygRbCWFZgZlLOEnHVKRyWyv3hPfyDZoWlDvNfnV72C
2tSRjn3aNh8d+DiPAq3wUt9gXa9cUP7cP42sskg/T0NvoibT3kAQAQopQ2vtMfAK
amu6+jk9YtO12345ATe3JKu9iZ4EW4KfH34FJAzUeB0wZZkb3MwSJV2kPa5aJt/p
UPu2frcQI6Nj/ppuh1MAZpic/bxsE2akCD8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:13:12 2025 by rpki-client