Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c14f2479-2c39-3dc7-b4d4-5d8f325ac5cc.roa
File:                     c14f2479-2c39-3dc7-b4d4-5d8f325ac5cc.roa (raw, json)
Hash identifier:          ZXqyUXbSipFDqnQsBfHkKXjtFdXcgcnAQ0KzSaq7L3E=
Subject key identifier:   67:66:86:88:15:49:A9:D1:B8:60:74:25:86:8E:CB:2E:70:7C:4D:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C6BFBEA822A1129BEFD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c14f2479-2c39-3dc7-b4d4-5d8f325ac5cc.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7015
IP address blocks:        2001:559:e045::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:6b:fb:ea:82:2a:11:29:be:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=301c1f12-1567-4ad4-ac5b-bbd6e785d6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:4d:28:8f:63:f0:ac:02:67:70:d7:3a:4d:
                    b1:a0:d4:ef:74:f2:b0:b8:f0:d6:f4:f9:56:e1:a8:
                    7d:1c:d0:4e:de:f8:05:56:38:37:f8:ac:4d:01:e1:
                    c0:dc:6d:a3:f7:94:66:de:4a:2a:56:42:fc:5e:a2:
                    e1:e0:2f:37:5c:5d:20:84:22:65:fd:10:ab:ae:d6:
                    cd:f6:03:53:02:7e:0b:cf:0e:c1:8d:b0:e4:b7:da:
                    7b:94:87:d7:cf:3d:ee:29:79:11:91:52:d8:b5:c4:
                    e7:c2:a2:15:be:cf:ee:ab:e9:e2:1e:04:2b:99:9c:
                    fe:7e:28:d8:1f:58:a4:2b:fd:08:a1:34:bc:87:71:
                    de:41:16:b0:f7:90:17:c8:4a:57:f8:65:4a:93:3f:
                    3e:1e:9f:09:7c:6f:22:72:bf:15:e9:5b:0b:87:6a:
                    08:ab:9b:29:6b:ad:e4:8b:32:1b:7d:55:68:77:aa:
                    eb:00:d1:b9:59:13:68:03:88:35:d5:92:75:d5:e1:
                    41:08:c3:14:26:d7:97:c4:4d:36:25:d5:34:1a:88:
                    dc:31:22:8f:d4:0a:89:68:51:16:4f:92:7d:90:fb:
                    18:1d:69:58:a3:57:06:f1:22:29:4f:94:78:98:6a:
                    1c:e4:5f:a3:0a:13:4c:e7:89:d9:d3:54:54:ce:0e:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:86:88:15:49:A9:D1:B8:60:74:25:86:8E:CB:2E:70:7C:4D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c14f2479-2c39-3dc7-b4d4-5d8f325ac5cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e045::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:4a:6a:fb:cd:80:5f:4c:db:fa:0d:ea:3a:4f:74:3d:65:
         8b:1a:93:82:5f:45:5c:72:72:39:b0:fd:6b:f2:48:3b:31:c2:
         b1:f5:76:ae:81:99:3b:3e:2c:62:fe:bb:90:ec:2b:d6:7d:bc:
         49:47:bf:f1:40:f4:09:99:a4:ce:00:52:f8:f4:63:88:2e:3c:
         8f:31:88:54:89:b7:43:0e:be:f9:9f:f0:de:a4:d6:88:34:8c:
         0a:19:31:b2:0e:c6:0f:22:ca:ee:e4:18:7a:e1:b4:3a:af:de:
         39:10:fd:f4:4f:96:bd:67:2f:9e:91:b7:dd:55:82:ae:a4:d1:
         de:54:aa:86:bf:f9:4f:2d:34:06:95:96:67:61:78:ef:96:9d:
         c2:8e:d9:e8:e9:d7:06:63:f9:77:77:f0:64:81:ca:63:54:cd:
         6d:9b:b1:45:70:2a:81:56:33:40:c8:37:6c:09:3b:30:ee:08:
         c9:3a:bf:a7:db:ff:90:a6:92:3c:2a:3b:ea:ab:94:9e:7c:81:
         cc:80:99:34:f5:29:93:33:5d:54:09:05:92:98:7e:d8:19:02:
         88:f3:48:85:5b:1f:35:be:ed:be:71:90:4c:87:be:c8:2e:c6:
         fc:f1:ad:00:f1:7d:c7:86:66:83:e8:ba:6c:c3:0e:a9:ab:a2:
         d2:a9:e8:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkgPGv76oIqESm+/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
MzAxYzFmMTItMTU2Ny00YWQ0LWFjNWItYmJkNmU3ODVkNmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjtNKI9j8KwCZ3DXOk2xoNTvdPKwuPDW9PlW
4ah9HNBO3vgFVjg3+KxNAeHA3G2j95Rm3koqVkL8XqLh4C83XF0ghCJl/RCrrtbN
9gNTAn4Lzw7BjbDkt9p7lIfXzz3uKXkRkVLYtcTnwqIVvs/uq+niHgQrmZz+fijY
H1ikK/0IoTS8h3HeQRaw95AXyEpX+GVKkz8+Hp8JfG8icr8V6VsLh2oIq5spa63k
izIbfVVod6rrANG5WRNoA4g11ZJ11eFBCMMUJteXxE02JdU0GojcMSKP1AqJaFEW
T5J9kPsYHWlYo1cG8SIpT5R4mGoc5F+jChNM54nZ01RUzg5PIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGdmhogVSanRuGB0JYaOyy5wfE3eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzE0ZjI0NzktMmMzOS0z
ZGM3LWI0ZDQtNWQ4ZjMyNWFjNWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeBF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAADJSmr7zYBfTNv6Deo6T3Q9ZYsak4JfRVxycjmw/WvySDsxwrH1
dq6BmTs+LGL+u5DsK9Z9vElHv/FA9AmZpM4AUvj0Y4guPI8xiFSJt0MOvvmf8N6k
1og0jAoZMbIOxg8iyu7kGHrhtDqv3jkQ/fRPlr1nL56Rt91Vgq6k0d5Uqoa/+U8t
NAaVlmdheO+WncKO2ejp1wZj+Xd38GSBymNUzW2bsUVwKoFWM0DIN2wJOzDuCMk6
v6fb/5CmkjwqO+qrlJ58gcyAmTT1KZMzXVQJBZKYftgZAojzSIVbHzW+7b5xkEyH
vsguxvzxrQDxfceGZoPoumzDDqmrotKp6No=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:35 2025 by rpki-client