Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96455c86-ae7a-382f-8d4f-90c70f6099e4.roa
File:                     96455c86-ae7a-382f-8d4f-90c70f6099e4.roa (raw, json)
Hash identifier:          R/4kCjQWLS5b6UWGK51+lCOfzsHjfOQWAAGu7Ex0FFk=
Subject key identifier:   80:A6:90:6E:A3:79:D2:13:18:F9:5C:25:92:1A:C2:3D:43:98:AE:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CC0883A947A34FCF89070
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96455c86-ae7a-382f-8d4f-90c70f6099e4.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33659
IP address blocks:        2001:559:8180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:c0:88:3a:94:7a:34:fc:f8:90:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=6101336a-ef18-4c00-a4fc-98f7033180ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:18:ae:2a:bc:7e:01:6c:e3:35:db:9b:56:
                    a7:e3:50:6c:fd:3e:8e:98:ea:15:6c:4d:89:43:da:
                    3c:f5:42:0d:3a:82:69:e3:bd:1c:e9:c8:ba:86:b2:
                    36:38:ea:24:1c:43:71:aa:92:eb:95:81:74:87:61:
                    3b:c3:22:91:97:f1:85:eb:9a:99:50:32:49:2a:0a:
                    a8:e6:c9:af:67:e2:19:d2:88:6d:d3:1b:8f:7e:ef:
                    cf:50:02:70:2f:ee:8a:2f:a4:0a:c3:74:40:99:5c:
                    15:3c:c9:86:82:c1:ef:31:4f:3a:cd:e4:68:78:d6:
                    aa:c4:cc:5f:4e:62:92:20:1b:ec:df:61:a0:e4:e3:
                    10:54:cd:67:1e:0c:3b:c3:7a:69:c5:6a:31:33:f3:
                    52:f3:3e:bd:9c:c7:14:3f:3a:a7:bb:79:82:e1:e6:
                    64:cf:fc:de:5c:46:3f:ca:60:6a:0d:7c:19:4d:a6:
                    9a:2b:79:ad:fc:08:60:b9:56:56:8d:d4:a5:92:48:
                    64:92:1a:b0:18:fc:5a:48:3e:69:c8:4c:e2:2f:4b:
                    46:8f:e1:e6:02:b3:d3:04:bb:7c:37:e8:f1:f8:62:
                    49:d8:b5:2e:44:ef:d4:b9:a8:8a:40:39:7a:e0:66:
                    ea:86:bd:a6:c8:ee:9f:07:92:06:84:4a:0b:08:df:
                    35:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A6:90:6E:A3:79:D2:13:18:F9:5C:25:92:1A:C2:3D:43:98:AE:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96455c86-ae7a-382f-8d4f-90c70f6099e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8180::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ea:b5:4f:92:9f:70:dd:08:d3:7c:55:d7:de:00:48:66:57:
         ab:ee:d2:89:b4:fe:8a:bb:23:38:8a:58:04:f2:1c:95:99:56:
         0b:aa:c3:62:6a:12:da:91:cd:5b:c9:58:76:0c:29:58:55:13:
         72:38:10:8f:c9:0f:f3:ff:da:38:3f:23:bb:5a:85:de:d7:a1:
         c8:d5:4a:67:16:c2:cd:cb:50:01:29:38:46:38:f4:08:33:0e:
         8c:4c:5e:1d:5b:3a:8e:4c:d9:f9:f9:0f:7d:59:50:a1:0d:61:
         2d:6f:a8:ae:e0:9f:22:1e:4c:09:a9:e7:f3:40:1f:e4:39:e3:
         c3:34:9d:ad:94:13:65:45:81:57:41:22:6f:93:5b:c0:78:5d:
         8e:13:1c:ce:80:ac:42:c2:d6:6f:5e:76:c0:9a:ec:f2:ec:b0:
         52:a2:0a:f3:37:ca:16:38:ed:06:94:0b:56:38:ca:a9:6a:8d:
         ae:5e:31:16:43:ba:70:0f:0a:bd:3d:96:85:1d:fa:ef:ce:93:
         2a:95:59:d2:1e:34:16:27:26:fe:92:6f:bf:17:1a:0b:67:09:
         ba:3a:3e:56:9c:c2:ad:46:42:07:e4:ba:b5:b5:5f:9a:13:87:
         e1:3e:c8:51:4c:c3:45:70:97:af:49:19:44:4e:c8:17:84:ef:
         57:e9:3a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:18:54 2025 by rpki-client