Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11b96848-2c4e-3993-a7cc-d6f88a116a72.roa
File:                     11b96848-2c4e-3993-a7cc-d6f88a116a72.roa (raw, json)
Hash identifier:          HRZSvI/V5vrIyklTb8mAnB/dZ4yYfKp4bl4dlo8QID8=
Subject key identifier:   FF:E9:4F:82:71:7A:09:B9:5F:37:85:E7:F7:4A:48:44:28:FF:ED:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE88A8E85E98326D465E6F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11b96848-2c4e-3993-a7cc-d6f88a116a72.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7015
IP address blocks:        2001:559:c4bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:8a:8e:85:e9:83:26:d4:65:e6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=156f2e76-2d3c-40d0-abc4-3c509846121a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:73:de:45:db:fc:4c:12:82:33:fa:e9:d9:
                    aa:a6:23:05:1f:c3:98:a0:fe:89:d2:47:6e:b0:14:
                    9a:fb:36:49:96:9b:23:44:43:d9:ae:3b:5b:f5:87:
                    29:fa:e9:20:bb:42:77:5a:ad:6b:d0:d8:d2:c1:28:
                    96:e7:1a:2f:cd:67:4d:ea:1c:2c:3e:7c:5d:f5:42:
                    cf:9f:bd:36:95:03:b6:51:bf:ca:3b:ec:30:53:cf:
                    0c:3d:e0:4a:5a:7e:95:34:c2:5d:30:44:bf:12:e2:
                    3d:e4:79:af:9d:76:d9:84:dd:75:1a:66:fa:29:48:
                    b6:ea:88:96:be:eb:a4:c5:ee:c5:6c:5c:3c:b8:88:
                    e4:b0:1b:66:1b:0d:24:29:ce:b6:82:4e:c2:f2:b5:
                    97:28:9c:75:4e:ce:72:f3:fe:3d:78:c3:b4:e5:ae:
                    98:d7:10:6e:89:88:cf:70:6b:c0:20:83:66:52:ff:
                    6d:28:09:21:14:63:e7:03:6e:e6:16:20:f7:30:06:
                    69:2a:1e:9e:79:89:de:d2:43:5d:63:cc:99:28:3e:
                    34:d1:94:47:e2:9f:12:06:ce:36:61:10:f3:82:a5:
                    8e:2c:41:57:f7:49:a7:cb:db:ca:6c:0d:c5:17:34:
                    5a:b4:a3:3b:b7:9b:d0:6b:3c:f8:da:31:c6:1a:8a:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E9:4F:82:71:7A:09:B9:5F:37:85:E7:F7:4A:48:44:28:FF:ED:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11b96848-2c4e-3993-a7cc-d6f88a116a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c4bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:c1:d3:39:b5:fb:60:b2:da:a7:c9:16:70:5f:c9:cd:7d:c5:
         12:dc:d5:3f:39:0f:d7:c6:04:6c:b5:a2:d4:8a:b8:46:fc:ea:
         68:f9:f7:5d:8a:6a:a3:0a:c0:93:80:e4:7e:86:03:ff:76:e4:
         50:68:3a:66:6b:65:77:08:aa:ae:38:b3:cf:df:06:21:76:c7:
         b7:cb:1a:a9:83:57:a3:17:23:e9:7e:b9:f4:46:aa:6e:d5:51:
         89:58:90:d8:14:a8:5b:d1:93:65:64:fd:d2:db:b1:1c:bc:55:
         0f:06:50:1c:06:df:f9:4b:3d:8b:3d:a4:c4:fc:1a:17:0d:6b:
         b1:aa:c6:3f:b0:47:9b:33:76:26:4c:25:61:2a:0f:d8:b9:3e:
         e3:3c:e5:62:99:6c:91:80:ae:32:27:95:5f:e0:e9:1d:0f:45:
         e3:31:60:94:a1:8b:57:5e:66:46:a0:a8:b7:a4:2d:11:7c:43:
         78:43:54:6f:e9:e0:8b:b9:2b:a7:8b:00:a5:17:2d:90:e4:86:
         e1:e3:ca:27:37:f5:54:69:68:65:d1:ae:e7:1c:8f:b8:1f:cb:
         90:13:b3:a5:c3:ad:b6:d7:80:53:4b:c4:c8:6c:23:f1:8a:8e:
         cc:67:6a:7f:cc:33:2b:35:d6:4a:09:18:13:74:27:88:11:54:
         f2:f9:35:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:34 2026 by rpki-client