Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48d3b7e5-16ee-3775-9ec5-073d8bf727b4.roa
File:                     48d3b7e5-16ee-3775-9ec5-073d8bf727b4.roa (raw, json)
Hash identifier:          I9w+wbA1KAj9b5ZGUV/b9KSC2yWBnBwK40jakVqbroc=
Subject key identifier:   34:B7:9D:C4:7C:95:66:E6:C8:36:B3:BC:5D:45:06:D2:92:BC:9F:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB91BDFB2C3BF09C0D3276CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48d3b7e5-16ee-3775-9ec5-073d8bf727b4.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     36040
IP address blocks:        2001:559:0:6b::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:df:b2:c3:bf:09:c0:d3:27:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=d73ee712-7967-4718-8ee8-100b4b8184be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:07:3e:b0:53:0e:76:91:ec:ec:38:a6:da:
                    a5:c2:09:37:72:3d:d4:20:02:db:bd:f6:61:f0:96:
                    ba:fd:8e:f1:a7:77:f5:e6:31:d0:1a:48:1e:39:93:
                    09:94:ce:3f:26:30:d6:03:77:08:42:f6:34:ba:9c:
                    ec:c1:33:60:5b:aa:6c:d1:8f:d5:2c:5b:6a:5f:d6:
                    00:d5:95:51:46:dc:cc:b1:ab:21:07:29:10:83:52:
                    8e:1e:b8:84:0f:6e:c4:ae:90:8a:86:cf:55:1c:41:
                    41:0d:f6:47:43:68:3d:8a:e8:67:34:7f:8b:a8:ab:
                    15:0b:37:ef:73:ac:9e:6c:97:78:8f:b3:7f:40:cd:
                    05:13:ca:4b:c3:30:be:41:23:b7:9f:01:65:59:97:
                    7a:64:73:51:fe:99:c0:19:37:08:97:ec:81:e9:2f:
                    19:f7:68:59:cf:d7:42:34:af:cd:00:44:61:6f:22:
                    28:77:79:55:a0:e6:00:21:2a:de:18:ac:82:a2:48:
                    22:c5:78:63:e5:c6:e0:38:06:91:ab:9f:95:c5:2e:
                    d5:4f:0a:f1:b3:b5:24:c3:dc:22:06:64:5d:4a:fa:
                    3a:55:4f:6f:dc:e7:14:a3:53:c7:1e:72:bd:5b:f4:
                    30:fa:1e:e8:9a:45:42:ee:a4:ae:9b:3b:58:56:13:
                    a7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B7:9D:C4:7C:95:66:E6:C8:36:B3:BC:5D:45:06:D2:92:BC:9F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48d3b7e5-16ee-3775-9ec5-073d8bf727b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:6b::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:35:39:b1:1e:9f:62:0d:9d:00:1f:d4:f3:e9:88:50:bb:66:
         64:30:85:59:5e:cf:5d:b5:93:be:ce:83:86:ce:a3:6f:0a:ae:
         84:d2:32:51:fc:6f:59:18:2d:2f:c3:6f:59:08:cd:0d:74:ca:
         5f:20:c0:70:99:1a:1d:2c:79:17:28:6d:a0:e3:44:5d:f6:b3:
         e9:ae:09:26:55:57:7c:c7:e9:8f:6e:c4:e0:ae:ef:2f:3d:60:
         b4:71:e5:6c:85:7e:fc:47:92:3b:7f:61:61:32:e5:a5:63:bf:
         f1:67:2c:2c:28:66:11:90:6b:9f:72:ef:01:a2:f5:e1:69:a9:
         c7:3b:88:a4:ab:f7:46:65:d0:1d:6c:c2:d7:84:2c:a9:f5:45:
         03:b5:07:b9:17:9c:9b:3a:4e:c6:5a:4c:00:cb:0b:f1:e5:0e:
         ac:2b:9e:56:35:30:8a:41:33:41:43:7a:97:46:44:d9:1f:2e:
         6a:81:36:d0:d9:a6:f0:a0:db:35:bb:15:75:05:5c:ad:07:31:
         5e:12:b3:22:ec:3e:8c:41:bc:56:bb:10:0e:e3:2a:bd:71:d9:
         d1:b2:56:33:3f:8c:fd:5c:ee:db:52:78:aa:26:47:b6:f9:33:
         37:40:8b:7d:b0:88:da:42:0a:34:35:f6:8b:27:81:4d:58:af:
         b8:fe:50:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:52 2025 by rpki-client