Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee850be7-b1fa-376f-9bbb-20cebaf7d7d2.roa
File:                     ee850be7-b1fa-376f-9bbb-20cebaf7d7d2.roa (raw, json)
Hash identifier:          iaw7NWrWV7munMZTkuxqNkYSahWXDWMvyvCS6ZTq7PE=
Subject key identifier:   87:F5:58:E9:35:96:F0:D6:74:80:70:0F:60:6C:02:1E:05:3F:A5:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DBA0D2EC86B32C3BB332600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee850be7-b1fa-376f-9bbb-20cebaf7d7d2.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        2001:559:c2b8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:0d:2e:c8:6b:32:c3:bb:33:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=49ead7ea-1d14-4796-b997-55c8874a03f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:88:f5:82:71:08:2d:06:26:07:58:18:4b:
                    75:c1:e9:2f:43:ba:8a:f5:0a:85:cc:d8:21:cc:e2:
                    b3:cb:19:25:8e:6f:1b:e1:3c:48:71:4a:c3:53:83:
                    1b:e7:21:86:d9:d7:54:f8:63:8b:01:24:b8:c4:41:
                    e7:70:55:72:4a:af:f3:07:1a:d8:40:a1:7c:6c:f3:
                    98:2e:bb:a9:7a:d5:65:88:0a:53:6f:26:bb:b3:33:
                    3b:20:33:39:3b:9b:aa:9e:fa:fb:97:c1:99:fb:fd:
                    18:0a:d8:88:83:02:02:0e:b3:a1:3a:35:0f:cb:23:
                    c9:13:1f:b2:93:4e:d8:02:2a:6d:a3:1e:ab:48:61:
                    b6:11:44:4d:95:07:52:9c:a2:3d:7d:2d:cc:1e:dc:
                    0b:8d:15:8f:94:6d:d7:7e:f3:0f:9d:8b:9b:4f:cd:
                    cd:ba:c2:45:37:7d:35:b9:5a:c0:68:c9:c7:90:53:
                    bf:73:60:15:52:3e:be:ef:0b:61:05:43:3e:f6:ec:
                    c0:05:6e:ac:9e:55:83:38:c7:de:49:46:f6:af:28:
                    52:b3:38:24:0c:53:d9:2b:c9:42:11:5a:06:96:60:
                    df:76:09:44:1b:c6:c8:a4:33:32:3a:18:67:35:09:
                    c3:26:68:61:40:1a:d1:7a:56:32:1a:16:2b:b5:83:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F5:58:E9:35:96:F0:D6:74:80:70:0F:60:6C:02:1E:05:3F:A5:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee850be7-b1fa-376f-9bbb-20cebaf7d7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c2b8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c0:f2:95:ae:f7:c8:6e:93:62:ff:a5:9d:37:73:e3:7a:0f:
         cb:94:d3:a0:e7:b0:7f:b9:37:b9:33:27:3e:9e:35:7d:8f:5a:
         63:b0:57:71:87:0d:34:59:1a:02:a3:3c:31:da:85:cf:a3:16:
         4a:bb:bb:ac:ad:31:8c:a6:c3:4d:04:5e:c8:6d:17:63:65:9b:
         f7:4c:f7:76:f7:5f:41:95:f3:a3:58:59:b3:d5:71:a9:85:13:
         4b:89:36:39:f6:30:7d:a1:39:aa:1e:c3:21:de:16:fc:6d:af:
         d1:8b:be:24:66:5b:24:41:ab:7e:75:3d:ac:2b:52:cc:d1:21:
         81:e4:46:3e:a8:fe:06:08:f8:47:df:53:b1:26:12:0d:13:0a:
         cb:ce:38:ab:47:b5:43:ec:91:bd:92:39:83:14:0a:c9:eb:07:
         55:46:b4:b6:fe:9e:64:8c:fd:ef:59:fc:32:41:e1:08:93:7b:
         7c:ea:ec:ba:ea:91:ff:9f:56:79:6e:c0:b5:69:bc:46:7f:ea:
         f6:9a:78:35:a7:dc:55:51:39:57:62:66:36:f9:81:49:61:1f:
         ce:b8:20:b0:b0:fb:35:31:3a:66:00:f5:25:f2:46:08:08:7f:
         0f:01:66:36:43:b8:b1:ef:5b:96:bf:49:0b:51:88:af:85:dc:
         e5:81:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:47:36 2025 by rpki-client