Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36e483f2-5bcb-3b8f-ac93-73bc676870be.roa
File:                     36e483f2-5bcb-3b8f-ac93-73bc676870be.roa (raw, json)
Hash identifier:          dd+IWdugncSe4P+9Zki9s6JY89eA34xf4zBbt+IleKo=
Subject key identifier:   D1:01:04:14:A7:E6:11:6D:7A:74:D5:38:43:AD:C5:25:8F:D2:C7:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CC435E32E87C466FAFE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36e483f2-5bcb-3b8f-ac93-73bc676870be.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33659
IP address blocks:        2001:559:87d2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:c4:35:e3:2e:87:c4:66:fa:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=abc17a19-12b6-4662-b43d-7f9fe8a0df60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0d:06:d0:e3:37:44:85:3b:1f:fc:b6:26:b0:
                    e7:bc:56:da:a4:24:3f:8a:42:ad:ee:9e:50:2d:8a:
                    f4:20:4e:f8:fe:5d:27:c3:6e:dc:26:e2:b5:33:45:
                    16:3b:29:70:08:0b:a7:60:46:67:ed:d2:29:ed:73:
                    5a:6b:c4:2e:e2:7f:51:60:aa:04:0f:c4:b6:d6:9c:
                    9a:78:31:b7:40:4e:1b:13:69:c8:97:17:7f:bc:81:
                    c7:ac:90:08:bf:b9:ba:62:0c:00:bf:c9:da:f3:58:
                    40:5f:76:39:75:d9:ad:07:b8:21:94:6d:ce:01:60:
                    e9:d4:f7:67:94:08:33:3d:d3:91:ec:15:db:86:b3:
                    95:db:ec:23:04:03:11:b1:20:01:ef:4e:f9:3d:72:
                    cf:c1:38:42:07:a4:1e:1c:19:a6:5f:c1:b4:60:34:
                    fc:54:2d:cf:f7:d1:0b:ca:f3:2c:28:a0:aa:b5:81:
                    dd:d1:46:ac:b3:dd:73:56:1b:5e:64:6f:f9:4b:9f:
                    9f:e3:46:5c:f5:95:b2:19:82:c2:aa:1d:a1:32:df:
                    de:80:e8:8d:98:7a:a8:78:1b:7b:9c:51:bd:5f:3f:
                    a0:f6:42:a7:21:a0:8d:a4:ea:a4:80:d1:34:4f:ac:
                    05:cb:3d:a4:97:e8:93:ac:8b:56:28:93:f9:43:c1:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:01:04:14:A7:E6:11:6D:7A:74:D5:38:43:AD:C5:25:8F:D2:C7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36e483f2-5bcb-3b8f-ac93-73bc676870be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:87d2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:b0:ef:b1:de:49:6c:58:9f:f6:ae:13:a2:eb:ab:6a:44:a5:
         1c:a6:e6:35:49:ed:0b:b4:2f:f2:b1:a2:a4:23:00:2f:84:b5:
         e9:47:56:b6:74:84:d3:48:3e:04:2a:58:8c:6e:9e:ab:64:57:
         81:c1:05:5d:bd:c9:19:67:ac:b0:fa:e2:be:d2:50:ba:1c:d6:
         e2:02:2d:5c:c6:81:e8:cc:f2:48:0c:bb:3c:b8:0d:1b:8a:df:
         78:eb:67:46:6c:af:b2:18:5b:50:eb:f2:ef:e4:96:c7:98:0c:
         1e:38:04:a6:34:b2:b7:f1:b4:44:aa:bd:78:03:f8:dc:59:d0:
         8e:38:aa:37:24:b4:fa:08:d5:c1:46:d6:8a:24:a0:78:d1:9d:
         7c:b4:31:f4:74:b0:94:cb:3b:cf:d6:15:c4:82:5e:60:03:8e:
         1c:0f:24:c6:20:67:fa:f4:35:fe:ef:d9:d6:1d:b0:03:d4:61:
         60:73:4a:0e:d7:21:5c:33:8c:af:9e:eb:8d:4a:d1:71:8c:13:
         b2:9f:41:d0:b2:f5:d7:70:78:89:e1:cd:ae:30:94:8d:ec:8e:
         a2:3d:5e:bf:a5:aa:56:09:e9:de:ef:5c:47:85:5e:eb:86:4f:
         8a:8d:62:33:1b:ac:4a:ee:75:88:51:5c:d6:54:be:e7:3f:cd:
         63:c5:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:09:56 2025 by rpki-client