Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36b77989-d0e5-347a-a6f3-290478931c8b.roa
File:                     36b77989-d0e5-347a-a6f3-290478931c8b.roa (raw, json)
Hash identifier:          FisbVlHrpmkaK90q+3xp9IqmDveb3UIFBw8lOpkKT7Y=
Subject key identifier:   D5:12:F3:9B:3D:37:D8:72:45:67:60:D0:93:F8:6A:27:1F:78:F2:05
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858498CFF25676407107EF09B5780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36b77989-d0e5-347a-a6f3-290478931c8b.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     36040
IP address blocks:        2001:559:0:98::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:25:67:64:07:10:7e:f0:9b:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=923ca969-9200-4d69-aa75-6a4c9f08229e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:25:c2:f6:85:a1:b5:59:6e:aa:e8:49:68:
                    36:5a:66:9e:68:9e:fd:99:ed:99:0f:f9:f9:57:9e:
                    ad:cb:14:ed:e2:18:e0:d5:1e:8f:f9:b4:ea:0f:cf:
                    44:cc:10:77:5e:d4:fa:43:59:93:72:bd:95:9b:46:
                    fc:c7:64:a6:a7:95:c1:ae:df:33:54:6b:b7:df:0b:
                    cf:03:8e:4d:3a:95:32:3d:a2:45:a0:c4:3f:1a:5d:
                    03:fd:8e:38:6f:13:3c:57:f1:7c:75:4e:36:a7:df:
                    37:96:1d:40:ae:c6:c6:ca:cc:1a:ef:22:51:10:39:
                    26:e4:b4:34:3e:e4:04:91:0c:69:60:ec:bc:d3:2d:
                    30:04:77:4f:5f:74:65:9b:d6:84:d4:8f:b9:90:17:
                    29:58:04:44:ac:45:75:f0:58:0e:57:ce:d3:1b:67:
                    74:ed:46:f2:b0:f2:eb:89:e0:d1:42:03:95:78:3c:
                    60:58:96:19:fb:da:b5:5e:6a:bc:a0:54:54:32:8f:
                    b6:eb:ea:5d:51:e0:da:56:dc:91:ac:42:74:5f:9d:
                    e5:96:80:8f:40:d0:df:1a:f3:e0:a4:7b:3a:a7:58:
                    11:82:f9:67:3d:5f:d6:76:7e:71:cd:ad:5a:c0:90:
                    5e:db:76:24:f2:ba:bd:de:31:44:13:fd:99:eb:d7:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:12:F3:9B:3D:37:D8:72:45:67:60:D0:93:F8:6A:27:1F:78:F2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36b77989-d0e5-347a-a6f3-290478931c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:98::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1e:53:d1:a6:51:0d:aa:23:e7:00:3b:51:d3:b7:78:e9:6a:
         b6:d0:fa:c1:ad:0e:47:d6:db:ed:16:8c:20:0b:8c:65:82:67:
         44:15:8d:3f:0d:b5:65:ea:e1:eb:ac:8e:fc:ed:8e:77:c9:9d:
         78:97:f7:a4:74:a9:5c:c8:cb:33:47:25:b5:4d:9a:45:45:b6:
         dd:6d:40:98:88:b1:10:b2:da:c9:3f:e5:f6:65:cc:63:39:98:
         9c:4a:f6:c0:19:f0:e2:51:eb:88:8c:cc:9b:ce:96:23:30:30:
         b6:6b:92:b7:22:ad:12:bf:05:a6:12:3c:6b:33:1c:64:7b:6e:
         d9:4a:e8:08:31:fd:78:48:1e:a0:76:84:ac:1c:61:76:62:14:
         6b:9d:74:1b:43:f7:0c:0a:24:91:dc:a7:48:35:40:77:09:0d:
         f4:d2:c1:84:07:20:1f:cf:4a:8f:b5:1a:55:0f:98:3a:17:7a:
         c2:3a:10:67:0b:a4:7a:6d:dc:ab:39:8a:f2:c1:ec:65:4c:19:
         1e:e6:16:9e:aa:2f:80:d7:07:6b:55:92:7a:b9:e6:b0:6c:e7:
         8c:39:54:a6:52:0c:34:cc:0e:08:9b:81:41:58:e9:46:b7:7c:
         2f:0d:94:cb:fa:3e:ae:d5:9c:d5:14:31:ea:37:5a:9e:a5:88:
         27:11:f3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:06:35 2025 by rpki-client