Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86f8339-bd5f-38e1-a1a7-36bbe58fbc03.roa
File:                     a86f8339-bd5f-38e1-a1a7-36bbe58fbc03.roa (raw, json)
Hash identifier:          /xpn+L/FWYaq1qGlk5B/fjcL8H8dqqB5LeARsh6P7f4=
Subject key identifier:   24:29:95:5B:A9:92:DC:3D:EE:D0:63:1C:CC:E4:81:00:2A:56:1E:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA54DB76D3BE1868CF7D880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86f8339-bd5f-38e1-a1a7-36bbe58fbc03.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        2001:559:c11c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:4d:b7:6d:3b:e1:86:8c:f7:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=33084377-365e-4abb-9840-8e41fbfddd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:52:d0:70:56:7e:fc:ee:63:dd:89:3b:4c:
                    fc:02:b6:64:cf:45:1e:89:bd:04:57:8a:10:95:fc:
                    31:e1:02:c5:59:1d:34:4b:94:22:cc:35:19:fe:57:
                    9f:ca:94:20:80:23:b6:f8:ea:3b:0f:67:fa:c4:73:
                    4c:82:4e:86:b2:25:e9:3c:db:c9:f1:17:c0:ea:1d:
                    ca:92:23:26:61:eb:03:1d:95:70:55:ef:f8:df:0d:
                    5e:e7:e9:36:07:41:5a:05:2d:ac:f8:90:ba:27:c4:
                    8d:5c:64:7e:c8:d3:f7:f3:91:cd:4c:2b:4b:63:ec:
                    29:65:19:8f:83:10:f5:c9:86:08:d0:d5:02:56:ea:
                    84:fc:63:a8:b4:cf:1d:be:24:2c:72:2c:ed:71:2d:
                    28:4a:d9:ed:da:e6:05:d2:56:d4:85:5b:08:b8:f2:
                    4c:88:b4:6d:8b:54:72:bb:e0:bb:94:15:b0:b4:8e:
                    92:1c:1a:68:35:26:6b:cd:67:0e:fa:2c:ad:d1:d8:
                    67:fd:9e:f5:1e:9f:52:b1:e6:dd:e4:ff:ee:24:2a:
                    3f:a0:be:f9:50:f4:26:80:d0:b3:2f:dd:1c:80:6b:
                    e3:92:b6:47:1f:20:30:01:5a:9a:8e:0d:96:25:c4:
                    2f:65:db:65:ec:05:7e:60:96:bf:55:3e:40:ba:5e:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:29:95:5B:A9:92:DC:3D:EE:D0:63:1C:CC:E4:81:00:2A:56:1E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86f8339-bd5f-38e1-a1a7-36bbe58fbc03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c11c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:20:f1:5d:c5:36:7b:c8:d3:4a:11:7b:28:11:09:e5:d8:1b:
         13:c0:1e:20:ac:2c:4d:27:54:dd:fb:7b:9a:d4:f5:8c:03:8b:
         a6:59:43:22:39:ce:72:4b:25:a3:45:22:e6:e7:8e:d2:14:37:
         ec:f2:1c:4c:3a:37:a3:0b:c2:c9:2b:17:f4:c0:de:49:9a:eb:
         38:2b:36:d2:f8:41:65:07:b2:ff:07:d1:f5:61:72:d9:85:4d:
         b9:4e:e9:1c:0f:29:22:b0:e9:15:d3:cd:53:2a:08:07:6c:8e:
         b7:19:29:10:07:46:c7:b8:31:65:f4:d3:27:8c:fa:fa:6a:18:
         3b:e8:a1:12:11:5e:1e:d5:b4:53:94:39:fe:96:7e:22:2e:24:
         b8:ea:67:6b:e7:2b:4d:35:07:ca:cd:9c:20:78:e0:8d:f0:b5:
         a9:80:0a:a3:c5:ea:95:1f:38:6b:ed:ca:8c:a5:fc:90:39:2f:
         0a:53:d9:c2:08:d2:12:92:98:81:0c:19:bf:43:05:18:60:43:
         c0:a5:43:01:e9:3c:7b:8c:88:82:32:d4:82:9a:ea:84:60:0c:
         8b:27:51:f8:50:55:8f:78:7f:9b:06:18:fa:81:12:c8:38:fa:
         23:21:c1:3c:2b:0c:2e:4a:a9:68:61:82:9f:5b:de:8f:34:b5:
         f7:a9:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:31:26 2025 by rpki-client