Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/205e911a-1e48-3c36-ba78-9de8906cf180.roa
File:                     205e911a-1e48-3c36-ba78-9de8906cf180.roa (raw, json)
Hash identifier:          8zYuyNv41DrWVtHUndZjuoBZUHKZrWYQWoz6iAbxRKE=
Subject key identifier:   7E:D0:EE:03:2D:F5:39:2D:C2:A0:7F:1E:7C:8C:6C:75:C4:26:D5:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA89A8A19D33FE758A1C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/205e911a-1e48-3c36-ba78-9de8906cf180.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33659
IP address blocks:        2001:559:5b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:89:a8:a1:9d:33:fe:75:8a:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=a71b6951-b224-41aa-9a78-af36d4ba25e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:60:c1:b0:60:41:e0:b8:73:c5:85:eb:fc:
                    5e:38:a4:07:19:ba:0e:cd:ee:9a:5f:5d:46:4d:df:
                    c9:c1:bc:ae:b6:c2:96:b3:52:0a:55:b6:e9:3f:e6:
                    5b:f6:66:ab:8d:2a:1e:01:31:6f:c2:6f:e6:e6:42:
                    71:22:c7:db:1f:6a:6f:87:4e:0a:18:ed:6d:33:e2:
                    6e:49:67:8f:1c:a2:57:92:28:f9:d4:d2:9e:09:c0:
                    ec:ef:ae:5c:7f:a8:41:54:0b:97:06:ef:d9:d8:e5:
                    b3:1b:2f:36:d5:31:be:f7:eb:df:37:fb:d3:c0:cf:
                    2c:37:3f:78:7c:97:ae:59:f8:42:3a:5d:be:92:16:
                    d7:8e:de:3f:5d:e9:11:9a:48:6e:f2:c7:e5:6f:d6:
                    1f:52:81:f9:d5:d9:76:4a:de:2f:1b:b3:2c:76:73:
                    7d:52:94:61:63:53:be:49:f2:10:ec:27:bd:c4:ed:
                    7e:14:82:fb:00:b3:a7:99:ce:59:72:00:2c:5b:ee:
                    5e:82:81:58:f8:20:9d:c7:23:31:66:47:52:c2:5f:
                    39:f6:c0:9a:e6:6c:eb:d3:af:56:a1:b9:d1:e3:79:
                    d7:c3:be:28:4f:51:9c:f8:dc:60:6e:77:39:0d:ac:
                    d7:b1:6e:bd:45:7b:10:17:68:0e:8b:0c:c2:d7:79:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D0:EE:03:2D:F5:39:2D:C2:A0:7F:1E:7C:8C:6C:75:C4:26:D5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/205e911a-1e48-3c36-ba78-9de8906cf180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ff:96:c9:70:45:81:a6:c2:bc:aa:f1:e6:62:27:87:27:d0:
         e9:31:58:46:c0:6e:8b:9a:12:10:db:93:c6:5a:0c:ec:96:2a:
         dc:8c:28:41:e7:58:4b:6f:72:26:a5:76:33:5f:2a:16:23:25:
         96:b7:5a:93:f2:ed:78:38:31:e8:24:5e:b6:d6:36:b6:9e:aa:
         53:71:d3:61:21:fc:8a:f5:ea:d5:ab:06:b1:36:ea:ae:24:e3:
         a9:f8:58:c1:a3:2f:d7:25:57:d2:c3:2a:1b:8a:6b:cb:5a:7e:
         aa:e7:1d:87:fc:33:48:5d:88:a6:b9:32:62:96:4c:22:fc:59:
         9d:cc:db:41:67:95:0b:5f:5f:82:dc:37:31:4e:eb:9c:58:a0:
         92:ca:09:6c:d1:94:52:4b:3a:92:e5:a2:b6:c0:c9:d2:36:7b:
         21:a1:c9:6a:90:9e:87:86:59:e0:ce:6b:e9:ea:aa:6e:ea:b2:
         91:45:cf:aa:ec:58:85:c4:2e:39:80:c7:79:df:c0:2e:57:08:
         66:9a:68:3e:47:9f:83:84:0b:50:c2:f6:af:de:26:5a:6c:a9:
         09:de:f3:08:df:c0:f5:43:94:2e:8e:e9:87:b8:8d:21:91:65:
         f6:af:af:c4:24:1c:e2:58:49:b8:ed:f9:f3:3a:df:20:16:de:
         ff:62:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:55:47 2026 by rpki-client