Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d86d8a-f24b-373d-a169-f42f377b56b1.roa
File:                     23d86d8a-f24b-373d-a169-f42f377b56b1.roa (raw, json)
Hash identifier:          vK2kxgrKv+HSlGnZ3fxP/SwRmltaGsALwaMOxBPzuiw=
Subject key identifier:   76:93:0E:00:C0:7E:A8:01:D8:A2:49:3A:56:BE:AF:64:FB:60:B7:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8D740E3679273790F1320
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d86d8a-f24b-373d-a169-f42f377b56b1.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33287
IP address blocks:        2001:559:781::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:d7:40:e3:67:92:73:79:0f:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=e2eab386-53af-4ea6-9e25-d0642002cdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:26:6c:2a:a8:98:f2:5d:7b:6d:75:a0:63:2c:
                    58:bf:28:d8:ff:8b:51:ff:cc:52:0a:e8:ee:be:e4:
                    8f:4e:fe:c4:33:cd:ba:c7:c4:7a:86:9b:95:6d:a2:
                    97:b9:bf:59:3d:81:fa:26:47:ef:88:89:b0:a6:29:
                    19:cb:2f:8c:5c:20:69:1e:ff:3d:06:ab:76:ec:ec:
                    06:85:fc:dc:57:65:f4:85:98:44:24:d4:0e:bf:5d:
                    fa:00:00:cf:e2:c2:fb:7f:a3:17:0c:31:89:2b:c2:
                    f6:e5:c4:c4:bb:e7:a5:f8:6b:85:16:2a:ac:5f:ea:
                    d6:e9:25:6e:f9:aa:ae:cb:ac:04:88:d9:af:12:cc:
                    40:cb:57:f1:e6:d2:41:bc:79:72:65:a3:a4:f6:00:
                    6d:91:1e:e1:eb:5a:83:55:67:34:80:a5:f2:69:9d:
                    0a:40:5c:83:f4:12:9b:9f:c9:b6:40:1b:35:af:0c:
                    3b:35:09:2f:e9:d5:0c:1e:dd:75:f9:5c:82:12:87:
                    60:75:2d:c8:5e:23:cd:41:17:bf:89:df:37:65:df:
                    51:66:84:1e:80:15:34:05:21:6c:17:50:3c:90:98:
                    b4:4b:e2:b4:1e:7b:77:8a:4d:81:2d:d7:d7:15:0d:
                    23:42:9c:e1:4e:eb:40:b8:65:02:93:70:fb:c9:74:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:93:0E:00:C0:7E:A8:01:D8:A2:49:3A:56:BE:AF:64:FB:60:B7:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d86d8a-f24b-373d-a169-f42f377b56b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:781::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:26:a5:be:b9:0c:b6:ba:e0:31:38:20:a6:75:fb:5e:23:5d:
         f2:3b:34:6a:35:bc:5d:93:56:29:29:8a:ad:34:43:0f:23:37:
         fe:1b:2c:19:8a:bd:05:75:90:83:2f:4a:d0:d2:54:f7:8e:4f:
         59:e2:98:01:5f:a0:55:da:df:cb:32:24:bf:90:3a:03:0f:ef:
         ae:d3:94:df:ab:9b:99:41:6d:3e:48:9f:28:11:73:a1:0f:73:
         1c:e3:7b:9d:ce:08:3c:a5:b6:bb:b2:8c:76:f1:03:24:96:55:
         78:5e:cc:cb:aa:ed:ff:7d:b3:c1:cd:3b:e4:49:ae:7a:61:bb:
         79:6f:9b:96:24:4f:3c:d0:b6:2f:67:f3:02:2d:d7:ef:7f:d1:
         90:d3:6e:4e:00:50:7e:64:15:f7:e0:af:f7:2f:43:a9:a3:98:
         2f:9b:7d:aa:44:a4:0d:cc:1b:c1:d9:06:a2:6c:3b:0d:00:e2:
         dd:c4:00:17:39:97:8f:8f:ec:85:6c:f9:3f:99:42:38:0a:f4:
         e3:3c:32:3f:4b:ba:44:ec:f4:16:3c:84:ee:24:78:88:c2:96:
         07:74:c5:4a:ba:db:3c:80:66:16:51:3a:aa:46:94:08:73:b1:
         6c:d6:85:20:8c:50:52:a0:56:a7:65:47:fc:ad:9c:9d:e2:10:
         25:a2:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:45 2026 by rpki-client