Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0505549b-5ec8-3867-b527-727a71201910.roa
File:                     0505549b-5ec8-3867-b527-727a71201910.roa (raw, json)
Hash identifier:          Xsd7DkTEf0+/D+LVYbNUjeRjcKf8uMJYd7htRHPSNt0=
Subject key identifier:   48:FF:F2:9C:21:F5:8E:50:30:70:F1:DA:46:19:7E:70:5F:A0:F4:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA7EE37CD5926C5285A500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0505549b-5ec8-3867-b527-727a71201910.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33657
IP address blocks:        2001:559:c012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:7e:e3:7c:d5:92:6c:52:85:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=d4a44936-9e95-4e83-b037-f41d66f6e92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:b2:cb:16:e3:db:b8:d5:d8:66:36:4b:b6:
                    33:92:d5:fe:bb:82:c7:34:21:f1:c0:bf:d2:a1:28:
                    d4:82:d7:e7:50:79:02:b3:8f:72:ae:03:26:b6:e7:
                    a7:03:05:c2:f3:79:97:68:37:e5:26:61:e4:34:48:
                    07:fd:89:d8:2d:79:a8:dc:e3:90:ae:61:1c:ba:d4:
                    38:77:50:3a:65:03:54:73:80:49:ba:27:3f:6e:06:
                    1f:b3:5c:23:47:37:1f:91:14:b4:0e:e7:74:03:fb:
                    8d:0b:e9:d1:3d:92:a8:1d:2b:81:b3:59:1c:e9:e0:
                    57:8d:0e:c5:14:8e:b0:6c:01:46:6a:88:7d:74:55:
                    7c:43:b8:e0:93:18:c7:7d:a0:8a:c3:e5:a4:3b:e6:
                    c8:b7:d2:aa:54:f1:8b:b4:d2:80:58:9b:b9:f0:71:
                    6b:d6:ea:76:12:e7:19:81:5e:8c:f4:05:45:8b:6b:
                    2b:ea:bb:7a:da:d8:54:50:89:23:4a:67:27:2d:52:
                    c4:04:7b:5a:56:be:5b:66:c3:2b:3e:2b:d7:4b:ab:
                    6e:8b:e1:57:3c:72:a2:ec:06:f2:2b:1f:31:e3:00:
                    22:bb:05:1d:6f:26:72:fe:34:14:f3:0f:52:11:8a:
                    24:ee:9c:f8:5c:74:a1:ea:9b:9e:fc:0f:d0:95:99:
                    6d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FF:F2:9C:21:F5:8E:50:30:70:F1:DA:46:19:7E:70:5F:A0:F4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0505549b-5ec8-3867-b527-727a71201910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:97:3a:7d:01:92:dd:05:90:35:00:d8:8b:15:b4:1b:33:ff:
         70:2e:e1:8c:36:b5:f6:09:20:7a:7f:c6:08:77:f2:51:1a:46:
         a8:a3:37:4b:8b:eb:7a:62:72:14:db:a8:0d:fe:26:d1:97:5f:
         28:ca:39:9d:24:0c:78:78:ce:d0:72:8a:d0:ec:8c:4a:2d:2a:
         c1:18:56:88:d8:ef:3e:3b:7f:18:fd:93:21:01:d7:c4:b2:d3:
         31:13:c5:05:17:08:53:1d:20:c4:5f:50:7d:93:29:e8:c1:d2:
         96:08:72:3f:60:ba:e6:24:4e:0e:f2:e8:77:0c:4d:a6:4b:75:
         3b:60:f8:7a:95:69:51:58:54:e8:fa:92:f6:67:95:60:a5:6c:
         42:f0:81:be:e7:67:52:26:72:d4:5f:57:4c:28:4b:b1:11:26:
         7e:6e:66:b5:d5:e6:d8:33:06:99:6f:5e:91:3c:15:cb:2f:20:
         44:07:99:43:e9:04:ae:48:ec:a6:8d:52:72:d3:50:ff:40:5f:
         72:6b:01:a9:cc:63:b8:c1:8b:15:a3:7a:da:55:a5:c2:2e:dc:
         78:64:23:60:d7:6c:b4:4e:e5:e8:45:52:a4:65:ea:bd:21:25:
         9c:84:2c:93:cc:3a:2b:14:e2:a6:81:e0:1f:b0:4e:db:19:05:
         7f:ed:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:27 2026 by rpki-client