Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c60d7db-d3d7-3e0a-82be-a109d914b25a.roa
File:                     1c60d7db-d3d7-3e0a-82be-a109d914b25a.roa (raw, json)
Hash identifier:          u2LhmTbLQZWx69+YrpD0GzIIyhSPZOdj2g1y0wAUEMQ=
Subject key identifier:   10:26:BC:29:04:39:6F:26:B6:F1:B3:C5:39:70:1D:D7:7A:4D:70:2C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9FD6EAF6E9FFCCBD16D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c60d7db-d3d7-3e0a-82be-a109d914b25a.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7015
IP address blocks:        2001:559:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:fd:6e:af:6e:9f:fc:cb:d1:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=faa91eba-d297-4665-9d52-9877937bb3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:4f:4e:5c:51:21:a0:0c:82:a1:34:3e:e1:
                    cd:24:bb:7e:f3:2e:5e:57:95:ae:cf:bd:0b:9b:87:
                    65:d6:5b:b5:d7:91:7e:ac:7b:28:5e:75:c7:98:0f:
                    59:f5:82:3c:d5:9d:0b:38:07:64:2f:1e:8e:ef:0f:
                    c1:be:10:1b:5f:30:2a:71:0c:a7:4e:c1:e7:0f:7c:
                    25:75:05:3b:d0:ec:f1:23:ea:81:dc:87:b6:ff:3a:
                    2f:6a:a8:92:24:ce:1a:12:57:f0:b0:3d:17:6e:a5:
                    a3:03:49:58:96:f2:34:68:d4:a5:07:bf:f0:91:37:
                    08:25:51:ed:8c:1c:93:65:73:6a:e9:0c:75:a8:d2:
                    3f:1e:b4:0a:f3:c2:e2:6a:6c:fb:64:b6:c7:0a:52:
                    82:b2:14:6e:54:18:6e:dd:18:00:22:05:9d:bf:10:
                    72:6b:ec:f8:cd:a0:8c:03:6b:9e:66:db:f8:4e:1a:
                    25:4b:8e:a3:94:74:eb:39:e9:e2:80:b7:48:51:c1:
                    88:2f:f2:65:2c:ff:04:47:3a:7f:56:2c:9b:05:7b:
                    c6:58:92:c2:ba:49:24:0d:d9:94:bc:8a:43:70:ca:
                    c9:46:eb:61:de:60:55:9f:eb:af:53:8b:54:0e:25:
                    0d:bd:1b:f9:d3:ea:71:10:77:82:fc:fd:f4:57:96:
                    1a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:26:BC:29:04:39:6F:26:B6:F1:B3:C5:39:70:1D:D7:7A:4D:70:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c60d7db-d3d7-3e0a-82be-a109d914b25a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:95:dc:00:c4:54:31:11:94:c1:f6:8c:3d:b4:21:3c:1e:8e:
         09:c7:79:a1:b4:9c:19:67:ef:b6:51:a5:9b:fe:31:65:af:b6:
         fb:ad:bd:dc:59:d1:6e:dd:ff:23:5b:37:56:5b:e0:b2:f8:6a:
         69:ed:aa:88:cf:ec:89:82:68:f1:c1:19:31:28:4a:57:ee:cc:
         ca:67:ef:16:04:de:c7:6e:fa:5e:35:bb:31:6f:40:42:07:29:
         45:7e:3c:3c:33:2a:4d:0d:ce:68:85:15:4c:14:b2:7c:c9:04:
         20:ba:96:00:c9:cf:b0:d0:40:f1:a6:43:50:3a:1c:dd:d9:f1:
         42:91:f8:9a:da:8f:e0:4f:d2:95:8f:37:86:9d:e4:54:a9:83:
         f8:37:5d:cd:6b:3f:af:b3:5b:aa:0e:91:d7:fb:2c:54:22:90:
         48:cc:f8:59:ff:44:5b:ef:e9:3e:a5:e0:18:23:4e:62:e8:01:
         b0:87:4e:4c:41:b1:04:ce:4b:4c:50:09:9e:c3:09:df:68:23:
         1e:02:bb:fd:c7:b3:3c:9b:43:9a:d8:23:ee:b5:d5:b8:df:b1:
         46:de:a1:9c:80:2b:66:7f:d7:9b:d5:e7:1b:47:5b:54:9f:49:
         16:f8:cc:5b:7e:03:2f:a6:2b:ed:23:76:8c:8e:cb:fd:32:68:
         40:d0:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:37:59 2026 by rpki-client