Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b60f3c2-9f80-3a48-8c25-8285c7b8b21f.roa
File:                     0b60f3c2-9f80-3a48-8c25-8285c7b8b21f.roa (raw, json)
Hash identifier:          ZeWKMDNzq6ndMX+zYofaBc2LR9kjq5xNueeAxQmvmuU=
Subject key identifier:   A7:1D:95:52:0D:87:2B:8A:4C:C3:B7:3A:8F:A9:D2:0A:84:8A:AC:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9A5FAF64FC96BC735B4E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b60f3c2-9f80-3a48-8c25-8285c7b8b21f.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22258
IP address blocks:        2001:559:407::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:a5:fa:f6:4f:c9:6b:c7:35:b4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=e58a076d-a8f2-4961-ab77-b01ca3655cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:f3:9d:a3:09:09:14:3d:58:4c:cd:fd:98:
                    1b:dd:49:e1:54:df:c9:fe:1d:bb:45:79:ca:b9:58:
                    c5:92:90:8a:b3:1b:63:8d:9a:16:a4:0c:bb:2e:6d:
                    cc:e0:69:01:eb:70:c5:91:d3:a3:c0:f0:07:f3:13:
                    06:73:90:91:7f:0d:14:c3:e9:9d:d0:26:40:75:e5:
                    c3:1e:86:dd:57:60:5e:f0:49:3c:58:65:b2:8b:4a:
                    b8:f0:bf:df:24:32:4e:8a:ae:7e:3e:ef:b0:e0:93:
                    71:bd:f5:02:8d:61:57:7e:f5:69:03:e3:df:9c:e5:
                    a3:90:68:a5:02:20:d7:f6:70:83:f2:89:02:9d:f6:
                    49:1b:20:76:6e:92:ac:d4:d5:86:f5:12:d1:98:d1:
                    49:e9:88:81:24:e3:e9:68:04:aa:05:59:d5:6b:16:
                    79:05:78:42:2c:cd:5f:c5:c2:e8:48:e0:f2:2b:66:
                    30:01:70:63:c9:c2:c2:d6:e5:7f:33:7e:46:cd:a9:
                    a7:f6:30:6b:38:42:55:78:89:21:36:86:38:f1:fe:
                    f0:a7:92:2a:bc:62:27:72:03:ac:07:28:8d:d7:0e:
                    dc:65:44:a1:cc:4b:7c:19:92:84:54:4a:b0:04:38:
                    67:f2:e4:e6:a8:c6:66:a6:fd:a7:03:5f:6c:04:d5:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1D:95:52:0D:87:2B:8A:4C:C3:B7:3A:8F:A9:D2:0A:84:8A:AC:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b60f3c2-9f80-3a48-8c25-8285c7b8b21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:407::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:3c:c1:22:7c:e2:9f:aa:fe:7e:77:36:e4:4b:9d:36:c2:9d:
         76:c8:6d:21:06:dd:06:f1:42:5d:89:57:73:fc:34:f8:af:5e:
         73:bc:23:7d:fe:88:83:1a:1a:91:b6:47:75:34:44:17:c8:4e:
         e0:d9:0e:98:7a:68:5a:5c:0e:40:03:9d:40:92:97:90:26:8c:
         bf:1c:f8:64:d1:d9:ff:c1:9f:a2:91:69:3c:d8:d1:d1:ad:8f:
         ab:60:f3:1d:c5:ba:13:53:1d:18:2f:67:09:11:b3:cc:55:7d:
         51:e7:d3:c2:d1:98:61:e3:75:b3:b8:21:ce:1b:3a:9f:6b:27:
         aa:67:91:05:3d:ba:c8:e7:bd:c4:ea:4d:e7:00:23:19:fb:ec:
         74:36:b8:07:c8:f9:d9:25:61:9e:1c:c6:37:b5:c7:3e:68:11:
         2a:c3:f2:b7:7e:fd:5e:78:74:c5:08:48:7f:20:10:1b:95:f0:
         e2:4d:66:6b:ce:4a:cc:72:3c:64:96:79:0c:87:e5:f2:ab:5f:
         d0:a0:d9:73:27:65:ed:75:6f:8e:84:81:cd:36:a5:f0:43:a2:
         58:f6:0c:5e:9f:7a:26:98:10:48:48:03:a4:dc:53:7a:2e:9f:
         31:24:4b:a3:80:73:26:3f:7a:e2:18:6b:b7:27:13:41:a6:50:
         10:77:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:38:40 2026 by rpki-client