Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27db05ee-f364-3680-96db-4a85ff6f609c.roa
File:                     27db05ee-f364-3680-96db-4a85ff6f609c.roa (raw, json)
Hash identifier:          O89A/3/dAFtIoCTURdjLA7DkG0yeYse9RbxHyCuk+5c=
Subject key identifier:   39:46:E9:DE:44:88:DB:DB:BA:F0:C4:05:67:D6:1E:88:69:EF:E1:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8F8E65C988F0386C0DF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27db05ee-f364-3680-96db-4a85ff6f609c.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33657
IP address blocks:        2001:559:721::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:f8:e6:5c:98:8f:03:86:c0:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=ef0ef927-8f85-41d0-ad19-bd1e37b45ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:f2:94:43:e9:1a:46:27:db:6e:1a:bc:63:
                    81:89:79:a4:0b:e9:6a:f4:b0:2a:29:5b:3b:1d:db:
                    62:16:c3:bc:bb:78:f1:63:71:1b:82:dd:b8:c1:11:
                    2a:2e:8f:a4:dd:21:7d:1e:de:ac:86:54:c2:4c:ab:
                    de:91:e2:c0:18:93:0b:d9:dd:8a:a2:e2:0e:4d:ed:
                    b6:98:bc:c7:85:73:08:3c:5b:37:c4:4a:ab:84:9d:
                    7e:41:03:f3:c8:e4:fa:aa:6d:b9:e5:6a:63:87:90:
                    37:5a:df:8a:ec:eb:c1:72:01:d7:13:bd:f6:40:80:
                    2e:9a:ba:31:06:e7:3b:e0:94:b7:fd:ea:ec:c9:3d:
                    8c:58:85:39:28:20:7d:43:15:86:1d:3c:b4:6e:fe:
                    5a:b5:15:8f:2d:0c:bf:dd:84:73:56:2e:d0:2d:f2:
                    a2:1a:f6:e1:ea:ba:c4:9b:59:57:34:bc:da:75:20:
                    e9:5c:8e:e3:37:57:57:f8:c8:b9:d7:cf:eb:ed:fa:
                    23:7a:cf:2c:d2:ec:09:e6:99:b9:4c:8d:51:7d:06:
                    71:bd:0c:aa:27:07:31:c3:04:bb:47:7e:7b:ec:b8:
                    6a:6d:b6:a2:7b:31:b8:08:ce:3f:c7:53:2c:a4:7e:
                    c4:3c:12:f3:75:53:c7:0c:37:8e:de:54:6f:78:b8:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:46:E9:DE:44:88:DB:DB:BA:F0:C4:05:67:D6:1E:88:69:EF:E1:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27db05ee-f364-3680-96db-4a85ff6f609c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:721::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:56:9b:6d:c7:25:d9:5a:be:bd:2a:95:d0:88:e5:62:45:f7:
         bd:eb:96:af:87:f7:db:bc:24:37:dd:81:ab:b0:7b:ba:d0:80:
         82:75:35:c2:d3:02:f5:83:ee:f0:7f:f4:e7:b7:29:25:8c:61:
         e4:1a:59:74:e9:17:3f:f6:29:6f:e2:57:0a:17:8a:cf:9b:e7:
         c9:18:5a:e0:90:4d:bd:eb:df:cd:28:dd:54:7c:5e:83:b5:fc:
         49:48:2b:66:cc:ba:f6:cf:5e:79:4b:05:62:c0:82:34:a1:29:
         a0:bb:08:e1:ca:21:2e:82:14:3b:e0:25:43:00:5c:0d:2c:15:
         c8:d7:85:7d:8b:0d:35:73:3a:9d:11:7d:f4:b2:51:00:d0:45:
         a3:ef:e5:e3:14:53:5f:5c:1c:b9:4b:8b:b8:d4:c5:f0:80:83:
         ea:14:5b:e3:89:46:6a:e0:a9:0d:a6:b6:8a:7b:fe:e2:21:dc:
         93:78:9f:38:c7:6d:68:fb:3d:2e:e6:dc:0c:60:d7:06:a9:9c:
         be:44:8f:ee:b3:0b:15:65:1b:34:21:49:fd:b7:e0:0c:b6:4a:
         9b:6a:49:3f:b4:73:7b:af:00:74:18:a8:c0:e8:8f:3f:ca:7c:
         03:25:5e:e2:cf:45:75:67:d6:73:83:b3:ba:d7:6c:b8:74:f0:
         41:6d:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:52 2026 by rpki-client