Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27e89153-a13a-3882-bffe-41d7023bc3d0.roa
File:                     27e89153-a13a-3882-bffe-41d7023bc3d0.roa (raw, json)
Hash identifier:          9/Rv6BcLVCvFsg/jU01AsMPiBHX+etdvKmOto0/E5W4=
Subject key identifier:   4F:DD:FB:6E:78:E9:5F:EE:DF:F8:C3:CB:AF:04:FB:D3:28:A3:AB:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4979CB1F3F22BC11F6A71780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27e89153-a13a-3882-bffe-41d7023bc3d0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33287
IP address blocks:        2001:559:193::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:79:cb:1f:3f:22:bc:11:f6:a7:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=958dbb4f-4cb4-4d8a-8482-0c5e9b1da8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:b0:0a:bd:9d:5a:41:ca:bb:e0:7c:bb:74:
                    7f:1b:84:ef:70:b7:be:e7:f1:f0:02:5c:c0:2c:b1:
                    5c:48:5d:ff:2a:b5:ea:6c:fd:82:30:6e:60:88:71:
                    ba:24:05:74:b7:e7:19:61:78:42:2f:9f:43:a0:92:
                    df:44:78:2a:99:07:d2:b1:82:06:5e:d2:1c:e3:56:
                    f0:49:44:1a:11:df:76:ab:28:e1:51:c7:40:8d:78:
                    da:e5:73:bf:09:e7:81:b5:4b:d3:0b:62:ac:46:ad:
                    11:d8:39:96:f8:78:8a:15:3a:a1:89:21:55:37:69:
                    19:76:53:2f:19:8e:80:b1:75:b3:ac:11:08:50:fe:
                    3d:65:9a:e6:cb:45:86:15:a8:4c:95:ce:31:98:5b:
                    82:a6:82:51:24:aa:cf:d5:a8:c1:5e:9a:05:f9:fe:
                    fa:af:b5:fc:bb:d4:12:79:7f:29:a8:67:20:c3:34:
                    9f:e2:4e:9f:7a:e0:8a:40:e7:d2:e2:60:c6:d2:11:
                    c9:cc:86:96:c9:f1:66:12:ee:ee:63:fe:1d:ae:62:
                    1a:ef:1d:1b:50:1b:2b:e9:75:dc:2a:a8:16:89:a4:
                    29:b9:5f:d4:96:7b:2a:91:4b:da:13:c6:9f:7b:f2:
                    34:5d:08:81:2d:18:2e:a0:b9:21:4c:bd:c7:cf:80:
                    22:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DD:FB:6E:78:E9:5F:EE:DF:F8:C3:CB:AF:04:FB:D3:28:A3:AB:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27e89153-a13a-3882-bffe-41d7023bc3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:193::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:f9:49:e2:70:88:e4:16:df:27:d7:b8:96:c5:ff:ae:04:
         60:71:c3:c3:24:89:01:c7:93:4c:75:3b:ec:81:b0:08:65:60:
         3b:dd:87:2a:b2:6f:e6:27:e6:88:25:75:d8:35:c6:7c:4c:03:
         2a:25:60:25:bc:db:b5:15:b4:3b:88:3d:b3:7f:19:56:bd:5b:
         d8:32:c6:5d:65:4d:96:8e:89:c5:f5:6c:b0:5f:64:cf:06:7e:
         e8:e9:0d:8d:99:a3:c4:c7:75:bc:52:14:20:f7:f6:60:2f:15:
         b5:a1:2a:38:ea:93:ce:3d:33:28:08:9f:ce:15:d4:6f:ad:09:
         be:6c:6d:84:e7:1f:f8:1c:64:9e:14:7d:8b:d4:fa:85:5e:c6:
         d9:c9:3d:ca:5f:ab:96:89:11:ed:db:c9:e6:71:a2:b3:b2:e6:
         79:e2:9e:2b:ef:b2:a1:e2:38:c1:b6:99:d3:3f:88:7b:a3:69:
         3f:22:12:10:53:96:10:e7:56:75:9e:a0:8c:98:a3:84:bd:23:
         36:40:b5:13:b4:1b:31:41:72:ae:92:33:06:3c:1d:65:ad:f6:
         aa:70:66:0b:ea:1e:f5:78:45:07:29:06:12:13:00:d8:8e:bb:
         18:0d:6e:8e:21:ec:b4:a8:2d:99:98:bb:22:f9:fb:9d:4c:7c:
         f1:04:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:49:45 2026 by rpki-client