Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bc4d106-b4c0-3a6f-b726-e468a27f523a.roa
File:                     1bc4d106-b4c0-3a6f-b726-e468a27f523a.roa (raw, json)
Hash identifier:          nURiomPQYF0WD17CFMcwly1klXCtWOZc2sFimnRLcpQ=
Subject key identifier:   4F:DA:2B:40:F6:FA:D6:8A:0A:A5:95:F9:5D:4D:EB:FE:0E:AE:D8:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8620B85E9D179B5E1C6300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bc4d106-b4c0-3a6f-b726-e468a27f523a.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     21508
IP address blocks:        2001:559:87b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:20:b8:5e:9d:17:9b:5e:1c:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=b6b3fad9-0662-4136-9a37-c294f3b40d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:49:fe:2f:d5:56:af:ed:f8:9e:25:a3:be:
                    31:8f:68:4c:b0:ad:e9:85:66:d7:da:75:7e:e0:95:
                    28:5c:b0:c0:cf:0b:de:2d:73:ea:d9:32:74:d1:ba:
                    a6:e0:a1:db:5c:e2:1f:00:65:d7:8a:bc:a5:36:73:
                    e2:04:8d:4d:03:06:8f:20:d9:a8:c9:03:2d:33:0b:
                    b1:33:da:a1:06:6a:4a:6a:e6:f6:4d:0c:37:45:5e:
                    8c:49:9d:9a:ea:16:14:94:4b:bb:44:b8:72:47:42:
                    48:11:55:2e:5b:f6:c2:d3:54:50:f9:a5:50:ce:64:
                    64:ec:2d:e9:64:dc:3b:ec:92:62:81:cf:b8:b5:fc:
                    0d:14:d2:c5:dd:ec:b8:7a:46:18:6b:e6:03:9a:62:
                    1e:e7:61:ca:e6:cb:39:be:6c:ea:b9:ea:ae:3d:d9:
                    48:1b:40:10:ae:c7:04:bf:28:91:fc:11:c4:e8:a2:
                    d1:d6:2f:7e:5d:72:6b:2f:4d:42:7f:c9:8b:54:09:
                    d0:9f:d3:1f:88:01:ca:2b:1b:96:8f:de:ca:3c:c6:
                    2d:51:d8:2c:5a:29:5f:ff:c2:02:d4:fb:9a:fd:43:
                    e1:3e:ad:6d:73:26:4b:2d:cd:ac:72:f6:ec:d4:2b:
                    dc:28:be:89:76:19:c1:b2:a3:98:7b:af:b4:aa:9c:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:2B:40:F6:FA:D6:8A:0A:A5:95:F9:5D:4D:EB:FE:0E:AE:D8:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bc4d106-b4c0-3a6f-b726-e468a27f523a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:87b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:2b:db:f5:39:0d:4c:e4:f9:16:13:16:8d:88:a7:89:6e:d3:
         f7:71:1f:0a:29:99:59:ba:71:ee:9f:03:e7:95:89:76:bc:61:
         c6:94:db:79:1c:85:35:34:c8:c5:71:49:f7:76:da:ac:a8:a9:
         1d:19:2a:cc:ff:23:0c:4c:88:a6:47:80:5a:76:c7:c4:13:39:
         a4:b8:32:d6:10:9d:f9:df:13:1b:aa:41:f8:9c:83:a8:3d:9b:
         c5:14:a6:eb:ef:72:bf:bd:90:59:8b:e2:58:ab:28:58:ca:fa:
         8c:36:63:e1:57:d5:22:16:ea:7c:bb:e9:d8:1b:e1:47:b7:e4:
         47:29:2a:6e:ae:d2:83:84:bf:c8:cd:12:3a:39:02:5f:29:ea:
         86:60:ca:3d:d8:a8:8f:c6:22:74:d5:77:26:0c:99:75:59:85:
         ed:25:a1:2c:72:b5:b6:d1:14:20:3d:10:b5:38:a2:82:91:6d:
         5b:99:17:6e:75:87:7b:d3:9e:51:7e:8a:be:c0:01:64:7b:22:
         dc:3d:0d:98:65:75:33:ef:67:f9:a6:5f:5f:38:0d:08:06:08:
         68:e6:b1:0d:41:19:1b:89:f8:39:c8:11:97:fb:01:7d:1a:af:
         f9:68:53:a6:c8:09:9e:d4:f8:70:24:e6:d9:5f:9a:3a:5c:17:
         3b:9c:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:47:41 2026 by rpki-client