Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ade331-1ac5-3b5a-aa4c-498d34c8fafc.roa
File:                     d3ade331-1ac5-3b5a-aa4c-498d34c8fafc.roa (raw, json)
Hash identifier:          +q6noGgDFiMex1mfbSOeSBkyTZgvwTc5kAqKAcfmFxs=
Subject key identifier:   55:05:64:5C:E1:A0:52:5E:6D:67:0F:E2:60:8B:F4:C6:86:91:B5:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CB2A7585E1ED758A4D380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ade331-1ac5-3b5a-aa4c-498d34c8fafc.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33657
IP address blocks:        2001:559:a012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:b2:a7:58:5e:1e:d7:58:a4:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=22bd2192-9243-4af3-a580-e717be275642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:f7:74:ac:e0:ef:30:c4:de:42:3b:6c:d0:
                    09:f6:8a:b6:da:ae:ac:87:9e:23:22:04:c3:16:00:
                    a1:c0:60:74:e6:7d:dc:95:d2:49:0d:5d:00:f5:75:
                    57:2e:cf:13:31:5b:63:65:5f:dd:9f:67:7b:56:fe:
                    e8:a5:c6:1f:03:3f:f2:ca:05:bf:35:dd:6d:1e:36:
                    51:c5:08:70:07:e1:b9:78:1e:e4:02:5d:62:c5:0e:
                    e2:e7:f3:e3:67:13:f5:84:01:64:5f:c4:56:04:cd:
                    ae:d1:05:91:d4:10:d2:0e:69:95:dd:e1:09:03:8f:
                    12:45:f0:d0:80:18:8a:36:95:23:9f:93:94:91:80:
                    1c:71:c4:92:ad:d8:13:5e:96:9d:4b:93:37:80:14:
                    86:31:92:f2:0b:6d:30:ff:31:19:77:f1:63:5b:b9:
                    5d:50:6a:c3:1c:bd:72:4a:be:c1:d7:ae:b0:3c:3a:
                    46:f4:99:a8:7b:7c:0a:05:f0:44:c7:0d:78:66:5a:
                    0c:68:30:51:ba:35:05:ee:f8:8a:c6:56:c0:7c:66:
                    55:38:be:6f:9e:0e:d7:04:94:51:b3:ca:ab:bd:42:
                    6a:af:76:61:6f:2d:55:7f:34:92:90:8c:2a:4c:cc:
                    2a:f0:13:0c:d6:a6:52:ff:fa:dc:4e:c4:19:39:71:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:05:64:5C:E1:A0:52:5E:6D:67:0F:E2:60:8B:F4:C6:86:91:B5:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3ade331-1ac5-3b5a-aa4c-498d34c8fafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:a012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:9f:4c:b4:81:b5:51:57:40:ac:32:ba:f1:96:75:2f:10:d6:
         07:39:04:1c:de:80:2c:3c:b5:87:d5:66:b8:82:74:3b:86:cc:
         78:21:8a:9a:08:2b:91:6f:ba:8c:04:37:2b:ec:44:c1:d9:13:
         86:1d:f8:b4:4f:d1:b8:4c:d6:08:19:67:e1:2e:b2:28:48:85:
         cc:21:52:f5:09:c3:6d:78:dd:18:13:9d:c7:b6:c5:fe:d3:73:
         bc:04:df:87:91:dd:02:80:62:80:cc:e6:03:92:46:74:f8:08:
         e8:6a:b2:4d:de:fc:2b:ab:99:a5:08:81:f6:0f:8f:37:1f:02:
         5b:fd:35:7d:0b:67:61:98:55:7b:59:e9:76:cc:cb:64:5a:e4:
         5b:4b:5d:89:46:1b:b5:77:67:d5:f3:00:ba:34:a0:59:45:57:
         9d:73:c7:9e:c1:92:76:0f:e3:f7:7f:b6:41:cd:b2:f7:84:86:
         44:ff:ef:4f:a9:13:5f:22:53:b2:7e:06:18:94:81:1e:74:ea:
         80:c7:55:a0:69:3c:b7:ab:8e:f5:93:4d:b8:3f:a0:89:85:d2:
         86:0b:fb:ba:c8:27:bc:83:b8:f3:b6:cf:74:2b:3b:4f:67:29:
         a7:ff:02:2d:37:d1:1a:6d:34:fb:e6:59:4c:2a:de:11:2a:ef:
         e4:a1:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:49 2025 by rpki-client