Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a13bfd-6d87-3ad7-8d48-ae89fe0d9161.roa
File:                     13a13bfd-6d87-3ad7-8d48-ae89fe0d9161.roa (raw, json)
Hash identifier:          WHcUtJmnRCNdq/f6hyEIdbi4BLAAnFrDzlykuy40cZU=
Subject key identifier:   60:78:2B:4E:8F:4E:2F:DD:40:7D:44:87:90:B6:B4:A4:E1:F9:73:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49819734399A8B44AD8C7A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a13bfd-6d87-3ad7-8d48-ae89fe0d9161.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7015
IP address blocks:        2001:559:87a6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:97:34:39:9a:8b:44:ad:8c:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b5903823-e6e4-4923-bd45-d29b29841e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:19:18:ab:af:14:ec:67:da:20:1f:b3:ed:
                    b5:a7:b5:91:ae:4d:01:2e:50:9e:f1:85:6a:e0:4a:
                    ca:93:59:c4:b1:86:14:83:f4:a8:70:d6:98:4f:af:
                    e0:22:a4:17:31:9e:80:65:b9:9f:14:5a:98:08:76:
                    d2:df:68:16:08:dc:e7:91:8d:71:ea:d6:bb:b8:fa:
                    2f:a0:1e:f4:0c:62:e1:5a:49:c8:d5:25:89:18:46:
                    62:19:af:da:af:44:ea:3f:5e:6a:c1:80:1d:73:11:
                    6f:1b:1a:49:d8:b0:28:3b:ee:d1:de:e9:94:2e:b9:
                    8d:95:4e:01:ad:f7:51:e9:6c:32:80:39:75:87:c5:
                    d0:38:4e:2d:2d:7b:68:03:e9:b7:d3:92:84:87:96:
                    5c:17:e8:02:07:c1:ae:38:f3:b8:0c:3f:14:41:64:
                    eb:c5:c8:a6:fe:b9:33:a4:5c:de:fb:d3:08:7a:ab:
                    37:7d:e0:45:3f:9e:bb:25:b0:06:49:d1:88:f6:42:
                    e9:e4:d5:9c:df:15:4d:f2:9f:e4:da:05:41:81:a6:
                    7b:86:8e:76:17:34:be:87:5a:d0:a8:43:41:e2:9e:
                    0f:44:51:8e:2f:68:c2:98:ca:58:01:24:4d:aa:9e:
                    79:a3:0c:34:e0:92:f0:c2:77:4d:52:b8:57:73:2d:
                    f3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:78:2B:4E:8F:4E:2F:DD:40:7D:44:87:90:B6:B4:A4:E1:F9:73:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a13bfd-6d87-3ad7-8d48-ae89fe0d9161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:87a6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:45:e1:f8:ce:31:da:99:f8:d5:36:9f:ed:5b:1d:f1:d1:09:
         6e:67:c9:92:a2:80:a3:be:cf:33:4c:48:c7:bf:1a:7b:92:6f:
         0f:cb:c0:4a:4c:6b:39:b5:99:fc:cd:70:a2:88:9e:37:68:d1:
         44:f6:51:40:1f:80:e5:75:1f:8c:31:2d:ee:ba:f1:94:76:ce:
         b7:7d:86:94:f9:b0:11:3f:c9:a9:43:25:d1:bc:8e:f3:37:6d:
         93:7f:15:cb:03:8f:39:f3:e7:99:e0:ab:7a:61:df:70:dc:2f:
         b1:f9:f8:6a:3f:99:71:e7:a1:f5:1f:e0:5c:2d:81:1f:fd:51:
         c9:da:6b:37:39:fb:5e:5f:0b:04:7f:d2:02:80:76:82:02:de:
         d9:50:47:a2:63:13:18:77:56:69:dc:71:e4:06:0f:ff:d0:fe:
         cd:9a:b5:ec:2f:da:44:da:ab:75:62:c3:a6:76:de:1e:34:aa:
         69:7a:6e:26:23:69:87:f4:e9:46:27:8b:46:a4:1c:7f:c5:18:
         27:ea:b6:a6:9c:4c:76:08:ae:3c:c8:41:b0:17:4c:02:3c:8c:
         f0:67:f1:be:e8:fd:7c:8c:90:55:7e:e5:4d:3e:77:16:c0:22:
         3b:60:16:0f:62:53:49:32:2b:82:3e:bf:c4:60:2b:dc:a9:6a:
         36:75:69:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:49:33 2026 by rpki-client