Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b14a6a-b2c3-34d9-b78b-1741b5bf5f47.roa
File:                     08b14a6a-b2c3-34d9-b78b-1741b5bf5f47.roa (raw, json)
Hash identifier:          9JM12vpDfzw1IViB6+LQHFtyMfLifS0xd2snSky9daM=
Subject key identifier:   E6:8E:DD:F0:A8:CF:73:8C:FF:05:29:C2:7F:4A:4C:4E:CA:63:AE:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497A23924D1DBB0E74CC6200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b14a6a-b2c3-34d9-b78b-1741b5bf5f47.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33657
IP address blocks:        2001:559:367::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7a:23:92:4d:1d:bb:0e:74:cc:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e12d36e4-508b-49be-9289-6c0859e35167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:b1:78:28:e1:8d:e8:d3:15:f2:e8:32:38:
                    f1:cc:fb:15:38:e1:bd:b9:77:ac:a1:b7:74:39:d1:
                    b8:a8:9e:af:2b:a5:99:45:32:20:e1:f7:e7:75:89:
                    02:2b:d7:61:23:15:38:f2:a4:3c:62:5f:2d:d2:24:
                    cc:7a:3f:53:e3:f4:69:9b:38:71:9e:d5:a9:02:43:
                    26:d5:72:45:bc:e9:4a:6d:e4:ac:e4:b6:19:f8:e1:
                    26:d0:11:75:96:e5:0d:4f:04:e8:28:8d:5e:0a:e5:
                    e3:12:5f:c7:54:48:7e:71:8c:ef:75:36:49:ec:8d:
                    1d:c8:b2:4b:b7:b5:3b:81:8a:de:c7:0f:5f:64:2e:
                    ba:53:7e:6c:31:78:3b:7a:e1:19:d2:b2:a7:1c:e2:
                    74:64:8e:5d:cf:79:b1:e2:fc:cd:e5:d3:8c:6d:7f:
                    b8:46:19:80:90:e5:e6:3f:bc:74:59:20:a5:2f:fd:
                    eb:d4:be:64:18:19:08:50:c2:eb:82:d4:37:96:09:
                    f0:2f:15:49:66:b1:6f:a3:45:39:19:1f:c0:dc:b9:
                    d5:9d:c4:23:a4:54:7c:89:d6:95:a4:19:f5:55:13:
                    bd:06:44:bb:54:58:79:a7:63:77:39:02:ec:0e:0d:
                    d3:f5:f1:e7:4b:c8:fa:02:f1:b7:8d:f8:ba:b5:1e:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8E:DD:F0:A8:CF:73:8C:FF:05:29:C2:7F:4A:4C:4E:CA:63:AE:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b14a6a-b2c3-34d9-b78b-1741b5bf5f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:367::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:72:62:24:3c:3b:2f:d6:06:4b:c6:d2:05:53:fb:bb:32:33:
         f6:32:14:db:70:f3:0d:5f:30:4a:97:d9:20:8c:31:42:25:b4:
         6a:8b:6b:bd:d7:21:da:ab:0e:20:8e:55:61:95:88:91:59:6b:
         4b:c4:f0:d5:72:12:a4:0a:bc:32:3a:78:2f:d8:20:d8:5b:02:
         8b:4a:ae:3c:77:0c:37:73:c1:4c:b2:bb:4c:15:3e:bd:af:37:
         3f:eb:85:7e:14:bd:0e:98:5e:59:aa:b9:cd:bd:4a:65:4a:46:
         0b:e1:09:22:21:87:d9:ed:9b:07:86:b0:04:01:f9:0a:15:61:
         79:28:e6:bb:7f:eb:b2:86:5e:23:69:dc:cd:b7:fb:ec:06:75:
         1b:84:4f:a3:9e:9f:e7:a9:ef:58:b2:91:8d:6a:ad:8c:01:ff:
         b2:63:d4:5e:57:e2:7d:49:1b:1a:9e:e2:6c:fb:68:6a:11:ef:
         f8:dd:69:6f:56:e9:20:06:b5:f5:d4:24:0c:9c:c5:a0:6e:f5:
         a8:f9:85:14:70:c8:59:fa:7b:53:5d:16:47:a2:95:4c:ad:37:
         5d:cf:7d:fc:16:4a:de:72:b7:88:92:05:70:fa:99:ad:de:a8:
         7a:49:fa:3c:be:b7:4a:01:4b:5f:a0:a7:e1:80:a9:a5:5e:d6:
         b1:e6:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:16:49 2026 by rpki-client