Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab7cf775-7f99-34ab-aa5c-0427d44b8972.roa
File:                     ab7cf775-7f99-34ab-aa5c-0427d44b8972.roa (raw, json)
Hash identifier:          J1hzGNUqlMF2EFJFZn2/4fQCw4orqdCmJfLOqdT2iY8=
Subject key identifier:   8F:6C:4B:7B:17:83:74:56:37:36:B1:6D:9E:E3:2D:B7:EB:42:DD:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA59733F2C944A5CA2C2080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab7cf775-7f99-34ab-aa5c-0427d44b8972.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33657
IP address blocks:        2001:559:c445::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:97:33:f2:c9:44:a5:ca:2c:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=be55a72b-779d-4b77-8126-8ab7676b82c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:21:c7:78:26:d8:68:4c:a7:95:fb:5a:3c:
                    93:58:c7:1a:b6:1e:2d:73:75:9d:bd:be:34:e6:09:
                    c2:a7:30:e0:70:6c:44:91:89:8e:5f:42:4a:02:36:
                    de:f0:a4:f6:77:ff:fd:8d:be:36:8d:d9:25:5d:76:
                    da:d1:84:71:40:99:64:06:de:de:7b:37:37:4a:54:
                    26:44:9e:9d:3e:4d:58:8a:5c:bf:36:1a:47:f7:ec:
                    55:6b:47:eb:ec:fa:91:a1:5c:8b:b1:ee:c8:bb:71:
                    92:f0:f2:cd:ad:ea:cd:73:71:8c:c9:14:17:58:df:
                    9d:70:f6:5e:69:4d:46:10:7b:45:33:31:72:09:4a:
                    67:4f:83:b8:4a:61:05:64:f5:84:01:40:6a:c2:27:
                    43:9a:77:8d:06:c4:13:0a:f5:b5:8f:40:d7:01:a1:
                    3e:7d:2d:5f:37:cc:df:11:20:43:80:fc:16:61:cf:
                    b1:c4:e7:9f:5a:05:46:ce:ba:9d:3f:14:cb:a5:7d:
                    52:55:9f:1b:f2:46:fe:06:ae:f3:ad:8c:b3:f3:a5:
                    0b:27:11:b2:30:c7:d9:a5:42:ed:53:c7:cf:eb:13:
                    6d:90:9a:02:b3:b4:78:05:30:1a:e5:60:a5:55:ba:
                    a8:ee:4b:88:d5:d1:13:48:1a:c5:fa:0b:99:43:ed:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6C:4B:7B:17:83:74:56:37:36:B1:6D:9E:E3:2D:B7:EB:42:DD:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ab7cf775-7f99-34ab-aa5c-0427d44b8972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c445::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:31:53:ed:2a:e9:93:e2:fc:a9:8f:c5:1f:53:0a:89:2f:62:
         bd:ae:21:ec:e9:3e:bd:8f:69:56:07:17:35:b7:46:fd:b5:b1:
         5a:6c:68:92:98:5b:69:1d:00:b0:15:ad:e5:4a:ed:fb:f7:72:
         6e:ab:cb:a1:84:1d:ac:3e:b3:22:15:d2:38:b6:94:81:b4:ed:
         a2:91:a9:7e:bf:ae:68:53:55:d2:a7:06:2f:5f:32:88:3c:cd:
         49:d5:9c:68:cc:e6:b0:4e:f0:67:9c:dd:77:2d:5d:1c:9d:43:
         1e:65:b5:36:35:97:53:9c:e8:63:2c:9d:38:df:89:cb:4b:a3:
         b2:a2:03:c8:86:0f:b5:14:45:26:7e:2d:de:56:8e:76:df:20:
         c1:ab:c3:6a:50:2b:c0:10:60:7e:c5:0b:ba:6a:62:61:7b:78:
         a7:17:f8:c0:82:02:af:7d:11:a7:b9:24:93:96:ee:91:6d:23:
         26:26:b0:b6:93:4b:d7:27:15:6b:56:d2:b4:2f:12:d2:28:7c:
         c8:5d:4d:dd:a2:39:1f:dc:72:c8:d0:be:52:a7:d7:fe:06:fc:
         94:88:68:05:46:7c:8e:36:db:9b:0c:1d:a8:52:22:f5:03:30:
         39:9f:3c:23:55:3f:ee:7f:19:98:dd:32:a2:12:f6:20:a9:15:
         c7:5a:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:21:26 2025 by rpki-client