Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58fb09c2-930f-310e-bc04-788257a7c7c0.roa
File:                     58fb09c2-930f-310e-bc04-788257a7c7c0.roa (raw, json)
Hash identifier:          ilQXt2M2WcklbEVJN9r0DWGcAgL9v7qmn9Mw4wGvN2w=
Subject key identifier:   23:BF:B9:BA:F2:83:D2:BB:4B:D0:96:99:BF:9A:8C:2D:06:A8:D2:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA562D3A4757BDA517A7180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58fb09c2-930f-310e-bc04-788257a7c7c0.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33287
IP address blocks:        2001:559:7ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:62:d3:a4:75:7b:da:51:7a:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=fb7472ea-296f-429b-baad-ee5d9462cc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:21:e4:6e:21:8b:51:53:d3:7c:76:a7:94:1b:
                    dd:45:42:b8:57:e8:6f:d7:c9:b4:83:b3:38:a4:c1:
                    af:b8:bd:f5:45:9d:4c:32:33:5c:30:85:02:de:f6:
                    45:ad:f8:80:b8:5b:d3:2a:e6:ee:ee:1d:c6:19:c9:
                    00:17:1d:41:26:21:2d:1f:fe:a5:7e:9f:c0:4a:b2:
                    65:4d:0e:3a:83:d9:7a:ad:49:53:60:d0:a8:57:c0:
                    d4:a0:4c:fe:60:27:ae:f8:82:49:da:c9:ac:a2:d0:
                    51:09:96:ac:2f:20:35:41:c9:a7:df:2e:3d:cb:5b:
                    09:47:e2:41:99:d8:ae:8e:ae:53:c0:03:a0:01:27:
                    b6:e5:39:28:f4:fa:59:2c:94:a0:b0:86:d4:e0:80:
                    eb:c9:a4:e2:c4:27:b7:1c:64:63:bd:34:25:aa:7d:
                    90:19:c2:c1:fc:4d:8c:7b:d1:2e:bf:aa:b5:3a:bb:
                    9d:03:3b:4f:ac:0b:a5:8c:8e:d0:f5:ba:06:cf:85:
                    78:d2:c6:2b:89:92:bb:d3:10:0c:e4:67:19:87:28:
                    77:9d:a7:e0:95:26:0a:79:51:1e:5e:4b:50:09:97:
                    45:01:12:12:e6:39:6e:6c:5d:5e:97:8a:12:ed:da:
                    33:e4:05:cc:84:0d:d8:13:d4:6c:2e:0d:48:d2:be:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BF:B9:BA:F2:83:D2:BB:4B:D0:96:99:BF:9A:8C:2D:06:A8:D2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58fb09c2-930f-310e-bc04-788257a7c7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:7ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d1:54:79:b9:e5:7a:a4:23:cc:71:05:57:c0:9a:a2:a2:7b:
         72:29:26:04:f2:93:5a:26:04:1c:2f:07:fd:45:15:c9:1f:e4:
         87:05:84:00:e1:b6:85:c1:c6:ca:f0:a1:6e:d6:98:ac:02:ff:
         f3:d3:3f:06:b7:60:cd:54:bb:60:35:70:3e:fe:5e:7c:3c:a7:
         69:4a:f0:d9:21:7e:83:f2:79:9e:93:96:3f:1f:ac:42:62:e9:
         a7:25:0a:33:e9:2c:a5:cf:c0:fc:9a:92:ae:db:56:ce:1f:1b:
         f7:c7:40:e6:17:a0:5e:f1:c8:ea:77:91:ce:11:e4:67:cc:5c:
         41:3a:1d:77:04:e4:04:d6:e7:1f:5b:77:89:77:73:26:42:6c:
         ed:a0:bc:92:06:22:9d:9c:04:25:25:7e:a6:e3:e3:d1:17:75:
         f5:b1:1f:e4:3f:27:fa:ab:a5:69:03:a9:f9:f9:25:05:5d:02:
         47:5d:1f:dd:0d:24:3e:e4:97:3b:4b:c3:20:a4:c2:2d:f9:c1:
         7a:e2:60:7b:2a:4e:0f:6a:42:ee:b5:c3:b4:a0:15:69:ed:99:
         1a:09:48:cd:0d:ff:5f:fc:47:9f:d0:6e:2e:09:09:12:e2:03:
         6a:8c:6f:dc:7a:f9:17:8b:13:02:47:48:30:14:8d:2d:e7:81:
         dc:53:8d:a2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pWLTpHV72lF6cYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZmI3NDcyZWEtMjk2Zi00MjliLWJhYWQtZWU1ZDk0NjJjYzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyHkbiGLUVPTfHanlBvdRUK4V+hv18m0g7M4
pMGvuL31RZ1MMjNcMIUC3vZFrfiAuFvTKubu7h3GGckAFx1BJiEtH/6lfp/ASrJl
TQ46g9l6rUlTYNCoV8DUoEz+YCeu+IJJ2smsotBRCZasLyA1Qcmn3y49y1sJR+JB
mdiujq5TwAOgASe25Tko9PpZLJSgsIbU4IDryaTixCe3HGRjvTQlqn2QGcLB/E2M
e9Euv6q1OrudAztPrAuljI7Q9boGz4V40sYriZK70xAM5GcZhyh3nafglSYKeVEe
XktQCZdFARIS5jlubF1el4oS7doz5AXMhA3YE9RsLg1I0r7ByQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCO/ubryg9K7S9CWmb+ajC0GqNKBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNThmYjA5YzItOTMwZi0z
MTBlLWJjMDQtNzg4MjU3YTdjN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQf/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEfRVHm55XqkI8xxBVfAmqKie3IpJgTyk1omBBwvB/1FFckf5IcF
hADhtoXBxsrwoW7WmKwC//PTPwa3YM1Uu2A1cD7+Xnw8p2lK8NkhfoPyeZ6Tlj8f
rEJi6aclCjPpLKXPwPyakq7bVs4fG/fHQOYXoF7xyOp3kc4R5GfMXEE6HXcE5ATW
5x9bd4l3cyZCbO2gvJIGIp2cBCUlfqbj49EXdfWxH+Q/J/qrpWkDqfn5JQVdAkdd
H90NJD7klztLwyCkwi35wXriYHsqTg9qQu61w7SgFWntmRoJSM0N/1/8R5/Qbi4J
CRLiA2qMb9x6+ReLEwJHSDAUjS3ngdxTjaI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:06:48 2025 by rpki-client