Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78c36d22-68a3-3b27-81dd-2606f8f5cdf3.roa
File:                     78c36d22-68a3-3b27-81dd-2606f8f5cdf3.roa (raw, json)
Hash identifier:          G7wlXvanXjzWp1nN/eRawUaEa2Y+UKOY0PvPcy6yLHo=
Subject key identifier:   14:EF:CA:8A:98:C2:5B:62:D0:E5:1E:A6:C0:EB:30:8D:C0:DF:FE:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D6CA97D773CB6205D4E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78c36d22-68a3-3b27-81dd-2606f8f5cdf3.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33651
IP address blocks:        2001:559:807a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:6c:a9:7d:77:3c:b6:20:5d:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=eeba7b60-d8fd-4e4b-94ae-e9b9a97364dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:e3:d7:43:49:6a:fd:98:dc:99:cc:80:76:
                    03:3d:65:06:0b:92:a8:04:d1:e1:05:a9:85:96:41:
                    90:c1:28:83:44:b8:c2:bd:43:da:26:2c:92:34:2d:
                    6e:df:f5:af:01:60:ec:d3:64:ca:85:ee:47:91:4e:
                    3a:b6:ee:3f:3f:8f:26:22:54:ba:20:66:44:41:ce:
                    76:2a:6a:a1:ea:c4:cf:3c:d4:ee:b3:20:ab:ef:3c:
                    97:56:cb:7c:81:e8:ab:90:25:89:98:32:29:25:cd:
                    a8:46:0b:d0:65:28:42:b1:96:0f:27:41:62:fd:3b:
                    67:70:da:bc:69:40:07:15:de:03:3a:8f:12:48:c0:
                    b6:2f:23:6c:b3:c4:99:e2:00:43:ce:17:cf:b6:dc:
                    99:aa:8c:4e:58:c5:21:15:10:73:56:0d:c9:8e:1a:
                    ba:d6:91:da:1e:d6:54:c1:44:53:73:d3:74:59:64:
                    06:2c:07:48:2e:07:5e:f3:92:d4:5c:f2:4e:e0:72:
                    74:53:c3:ef:69:35:bf:b7:44:8d:24:02:5a:cc:70:
                    6e:c4:0b:58:e6:e8:8d:94:29:c1:83:90:43:08:18:
                    d5:05:0d:7e:04:45:1c:fc:73:58:97:97:b6:e4:05:
                    24:d4:eb:4e:47:c8:89:43:07:bd:f8:c8:e5:c8:36:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:CA:8A:98:C2:5B:62:D0:E5:1E:A6:C0:EB:30:8D:C0:DF:FE:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78c36d22-68a3-3b27-81dd-2606f8f5cdf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:807a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d7:1e:6e:a3:24:bf:e4:54:cf:98:04:1f:5d:f4:2f:0a:2e:
         89:1d:9a:b7:1d:06:9a:8d:a2:f5:13:f3:4e:20:a2:b8:60:5e:
         1d:c3:6b:ca:64:3a:3b:a7:bb:9e:a9:c7:4e:85:50:04:42:39:
         16:5f:fd:31:ac:1a:01:89:8c:52:ee:40:6d:f3:ad:b6:f9:f6:
         b0:f7:b0:88:d2:0a:58:92:61:d1:33:a1:77:a7:ab:b1:62:2b:
         9d:52:15:d4:23:1f:96:25:4d:c5:12:6e:81:40:d6:a0:a2:a5:
         5a:b7:e1:b4:b6:15:da:dd:7e:51:65:4f:9b:87:fe:cd:b0:87:
         ac:d5:40:f8:da:24:29:3e:ac:15:45:d3:61:24:3a:3b:5a:f6:
         e7:61:a9:03:0d:ad:4a:27:a0:b8:5b:63:15:0c:46:ff:ff:62:
         ed:18:b5:24:ce:c5:58:3d:2d:f6:7a:78:b1:5c:b1:ab:b8:c5:
         fe:54:ff:c1:24:5f:df:9b:1f:59:72:62:34:7c:b6:9e:fa:40:
         61:17:32:39:c3:be:2f:11:4a:b2:8c:58:cf:68:a7:9b:e0:6d:
         bd:98:bb:fa:0e:06:77:0e:33:30:53:d9:17:2e:6a:bc:3f:a3:
         55:05:04:56:3d:86:54:dc:fd:41:9a:81:0b:11:fe:f3:58:c7:
         bd:1c:5c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:06:02 2025 by rpki-client