Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c248f30-d68f-3add-92b3-4111cda67aa7.roa
File:                     0c248f30-d68f-3add-92b3-4111cda67aa7.roa (raw, json)
Hash identifier:          UICfiNAa0R3h4jNlktyfgzpJ46rDiV10T023YT/wQfc=
Subject key identifier:   95:92:C9:D5:FF:AD:B6:0A:A0:8A:EA:D7:48:08:FD:50:15:01:D8:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4978C88C60897B6EF283A940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c248f30-d68f-3add-92b3-4111cda67aa7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33662
IP address blocks:        2001:559:8424::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:c8:8c:60:89:7b:6e:f2:83:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0f45e1e5-d5f8-4bcf-a92c-4823bf172f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:75:a1:0e:d9:c4:9f:68:c0:59:be:27:9b:6e:
                    a1:71:8d:87:a8:d9:6b:04:49:7f:27:42:f5:6a:97:
                    df:fd:2e:2c:f9:d5:cf:c8:c6:b0:29:ae:97:a7:81:
                    fe:c9:07:90:39:e8:ad:f9:2b:8f:62:39:43:10:ec:
                    7c:58:dc:b2:47:c5:a3:bc:cc:9a:dc:b7:d1:70:f4:
                    cd:00:08:b1:d5:ac:72:24:e4:ce:69:7e:b5:0e:80:
                    8d:15:fb:bf:04:b3:ef:a5:4e:ff:dc:c2:2d:94:8f:
                    e1:c6:24:fe:2f:96:7d:76:e8:1a:6c:bd:b4:50:44:
                    07:3a:e1:a5:0f:a5:c0:2e:55:9a:f0:9c:b8:2b:ff:
                    11:f5:77:c6:ca:57:6a:28:0c:81:fb:74:ae:90:e9:
                    dc:6e:52:56:0d:d1:b2:b2:3f:a1:df:06:52:da:74:
                    a9:92:25:69:11:04:c1:f8:27:14:6b:f3:93:ca:71:
                    14:f9:08:1e:13:4f:50:d5:be:73:63:a8:ca:8d:d8:
                    49:09:72:73:6c:c9:72:c9:42:de:a5:9c:c5:af:6c:
                    0f:ec:3e:11:5f:8f:2c:e9:f9:9f:2a:8e:1a:14:86:
                    29:d7:aa:86:83:ce:1e:56:11:57:a8:aa:7e:fb:b9:
                    5c:b6:b6:a0:ba:0c:97:31:63:12:95:a6:ba:ae:78:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:92:C9:D5:FF:AD:B6:0A:A0:8A:EA:D7:48:08:FD:50:15:01:D8:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c248f30-d68f-3add-92b3-4111cda67aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8424::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:62:5c:f2:7a:5d:f7:c9:2e:da:ee:ef:7d:c9:b0:a6:32:05:
         c9:e4:e3:90:2e:e5:ca:03:05:a1:5d:97:c3:48:cf:bf:81:e3:
         75:3d:1d:c9:1d:34:c6:7b:40:4c:8b:b8:7f:13:a6:77:6f:84:
         28:96:42:6d:79:14:3f:98:cf:bb:a1:0a:2d:34:49:ef:e7:f6:
         1e:40:2a:0f:93:40:f7:7a:31:33:ad:5a:32:fc:ee:43:51:c4:
         0d:62:4d:13:63:65:6f:f0:c7:30:3a:a0:8e:53:ad:19:57:c8:
         5b:b3:4e:bd:e6:6e:9a:fb:5c:72:0c:63:98:8e:dd:2a:bc:36:
         c4:cf:e0:93:58:a7:20:1a:45:6f:19:ae:0b:62:02:38:57:10:
         d3:5a:3d:6c:c0:08:61:25:4c:c3:c7:78:76:7e:c3:97:e6:4d:
         93:6e:23:75:b9:ad:05:f5:13:11:d1:52:7f:e1:2b:8c:62:ea:
         bf:c8:e2:9a:8b:91:97:50:d2:68:bd:83:06:53:40:d2:e9:94:
         df:0a:0f:d3:df:a7:b7:59:e5:ca:7b:af:6f:dd:03:14:5e:cc:
         55:46:93:cc:70:51:80:58:bc:ee:0e:63:24:e3:59:65:57:2a:
         a7:dd:f1:0f:c1:56:92:9a:47:ea:e4:1c:f5:16:99:5f:3a:9c:
         a7:31:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:17:26 2026 by rpki-client