Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21fac468-0077-378c-acca-723a4f7eab31.roa
File:                     21fac468-0077-378c-acca-723a4f7eab31.roa (raw, json)
Hash identifier:          4py3TE4mMlBxeR9/pQCjn6U/VouHUxeQ9gXnTsia038=
Subject key identifier:   9E:3B:D5:B7:10:4A:CA:F4:31:80:3B:89:62:27:23:E7:EE:E5:BA:F1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78D8EFF1433FDB646132CA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21fac468-0077-378c-acca-723a4f7eab31.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7015
IP address blocks:        2001:559:78f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8d:8e:ff:14:33:fd:b6:46:13:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=30e8d307-3977-4b78-931e-df895a842a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:47:d0:5d:e7:15:bb:6f:9c:96:9f:50:7f:
                    64:88:8e:4b:8e:d9:db:f6:79:e6:6f:6a:3f:3f:04:
                    a6:0a:9b:dc:e4:d6:2b:94:0f:85:da:f3:24:e3:74:
                    ef:fc:35:02:b0:98:ac:8c:ca:d6:26:ff:7b:45:fd:
                    a0:69:c2:82:27:c6:ec:7b:21:1e:14:fa:29:45:99:
                    a4:de:ea:14:72:92:fa:c8:84:e4:f2:b7:aa:7b:0d:
                    df:1b:14:e1:62:9f:98:6d:87:5c:78:dc:6f:2f:c9:
                    5f:03:41:8b:1c:71:bf:8e:8f:6d:29:94:39:a8:da:
                    ca:49:14:e4:a5:89:51:b7:da:b5:51:de:0e:f7:26:
                    da:09:f2:fb:1b:7a:be:7d:37:f4:77:b3:6b:a2:76:
                    8a:17:07:7b:06:e9:a0:eb:cb:9e:e2:91:b6:cf:ac:
                    be:96:64:34:37:87:93:21:2a:a9:97:49:67:73:ce:
                    81:cb:e8:10:d7:91:0d:01:72:62:b5:09:0a:e5:7a:
                    19:7d:bb:da:9b:fb:df:da:a9:a7:e7:f1:5e:81:8b:
                    88:ce:4f:c3:24:e6:61:e0:50:07:31:8d:e7:eb:e3:
                    01:c8:10:14:6a:7a:96:0e:4a:65:50:4e:51:28:be:
                    af:55:b7:0d:bf:51:66:22:ec:3f:37:2a:39:c1:d8:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3B:D5:B7:10:4A:CA:F4:31:80:3B:89:62:27:23:E7:EE:E5:BA:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21fac468-0077-378c-acca-723a4f7eab31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:78f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:69:e3:74:d5:32:81:5a:3b:23:ed:ab:b7:d4:44:4b:03:3d:
         5b:06:86:b8:0d:ce:42:a1:19:5f:a7:a6:3c:eb:e0:26:3e:9d:
         f9:7f:9d:e6:7a:9b:30:c3:73:ed:71:65:3c:09:43:98:5d:7d:
         fa:4e:b4:8e:0a:c8:b9:2e:44:20:a8:81:8e:a9:9e:f8:2d:6c:
         80:da:ba:e1:47:a8:d5:b8:61:50:2b:f8:65:75:82:91:c8:a8:
         ff:02:df:5d:d6:fc:b3:89:54:3a:77:7a:b9:3d:36:95:46:f0:
         6c:3f:b1:07:64:bd:2c:d3:5a:1a:02:06:76:a6:96:84:5a:75:
         fc:71:29:b7:31:be:83:60:1d:b1:72:98:95:7f:e5:d0:6c:93:
         00:39:42:31:76:a5:c5:9a:06:76:30:ba:02:c3:9a:ef:fb:fa:
         94:43:5f:e9:4b:6b:41:21:1b:30:1b:95:7c:c6:1f:89:2b:e4:
         5b:70:21:4e:30:16:ba:eb:5c:46:ee:70:54:21:ea:4f:7f:53:
         59:98:c9:cb:26:13:15:58:f9:2b:56:6e:ed:66:c9:fc:fc:ae:
         8c:5b:2c:d2:5d:c4:ac:54:be:81:3a:7e:cb:43:38:14:4a:6d:
         7f:9d:3e:3a:36:7d:2c:77:7d:07:d5:bf:32:f5:38:af:ae:58:
         7a:1d:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:57:04 2026 by rpki-client