Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047e8a45-c919-32e4-b66b-ba42013225be.roa
File:                     047e8a45-c919-32e4-b66b-ba42013225be.roa (raw, json)
Hash identifier:          xewluaVmN7nFT0gJenz+HPHoL5pYUxvQc4F2Yv9JIB8=
Subject key identifier:   B9:34:11:C3:18:E8:41:33:14:AB:91:04:FA:42:23:1F:57:CA:0C:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE869F4BE5753A0D4273DE20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047e8a45-c919-32e4-b66b-ba42013225be.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33287
IP address blocks:        2001:559:760::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:9f:4b:e5:75:3a:0d:42:73:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=62b8eb9c-cee5-41c4-b7fc-0b13345b2829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:2a:ae:45:33:5a:f0:06:b1:14:1b:08:3d:
                    bc:9e:65:b3:c9:61:e3:86:f6:1f:d7:b2:ee:23:25:
                    d4:08:3e:fe:3b:31:14:31:2b:3e:1c:52:58:97:08:
                    69:d4:6c:41:7d:55:91:a6:ce:65:3f:ee:0b:26:bb:
                    59:94:9f:84:95:d0:9e:21:d4:3a:4e:e4:d6:41:f5:
                    23:92:71:55:70:0f:4d:cf:d2:bf:0f:d7:41:51:bd:
                    5b:88:14:c2:5c:24:74:7b:ce:f5:f1:1c:c2:90:19:
                    ad:68:b5:3c:af:0c:d7:62:55:f9:6c:33:5b:01:81:
                    35:40:0d:38:2a:6e:4c:ac:d8:44:3a:3e:ae:5c:17:
                    1f:1c:58:7d:98:75:ea:55:55:fa:84:b8:87:e1:07:
                    c2:87:82:07:d2:21:46:90:0f:bb:03:b2:95:2f:a3:
                    f1:ea:0c:58:00:3d:61:91:cc:a1:22:cf:8b:1d:05:
                    d1:78:7b:6b:b3:20:0b:03:82:8b:50:2b:48:4c:1b:
                    db:2f:c3:73:26:96:4c:c1:7d:f1:9c:2a:1d:27:16:
                    ea:57:51:9c:57:98:1f:cf:9d:30:c7:18:8c:17:ab:
                    cf:6c:a6:81:3d:82:8b:89:d4:ab:4a:02:cb:ba:b1:
                    5d:d3:93:85:50:c7:5d:89:4e:68:52:de:ca:e4:73:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:34:11:C3:18:E8:41:33:14:AB:91:04:FA:42:23:1F:57:CA:0C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047e8a45-c919-32e4-b66b-ba42013225be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:760::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:05:72:7b:c7:84:da:9a:5e:b7:78:7c:a0:f1:dd:8f:ad:2e:
         3c:83:bd:f8:fa:8c:9a:bb:a9:aa:01:1c:10:96:1b:72:18:61:
         0d:75:f7:c0:19:9b:cb:58:1f:90:d2:c4:de:24:08:71:0a:48:
         47:90:5a:c8:fc:dd:50:8a:e5:fb:85:0f:c0:cc:54:9f:c3:e2:
         a3:9d:c5:1b:0b:fb:a6:78:cc:aa:ae:5b:0b:37:4e:40:f7:5a:
         4e:de:45:79:e4:76:45:df:b7:24:2d:f0:25:11:26:a9:6e:f3:
         3c:98:1e:73:00:47:5a:2d:01:55:e4:be:a6:62:5a:08:e0:2e:
         41:36:4e:1a:aa:08:ac:ac:79:60:cf:29:bb:54:63:c4:1b:8d:
         9f:93:6e:34:79:59:6c:af:f6:d1:a8:7f:6a:f4:70:24:cc:e7:
         58:d6:95:96:8a:fc:d0:b9:dd:01:4a:9f:08:a0:49:1f:8f:6d:
         e1:35:e3:85:f4:39:d7:6c:1c:d4:2e:5d:a3:65:1f:e7:4d:9c:
         ff:2f:3c:ad:ed:06:9e:d8:a5:43:53:53:29:31:51:73:e3:1d:
         f4:77:e1:7d:10:3f:d2:50:a6:27:bf:47:86:c5:9b:03:7b:b3:
         bd:98:43:7b:96:40:3d:9c:bc:03:85:94:99:92:79:d9:a9:57:
         51:db:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:24:21 2026 by rpki-client