Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f0ed72-728f-3403-992c-19e4348e092e.roa
File:                     28f0ed72-728f-3403-992c-19e4348e092e.roa (raw, json)
Hash identifier:          qXrxoVVbTyOAKJjYDxf1J09pPZyLKUhSQL6/YaXxvUc=
Subject key identifier:   B9:DB:22:32:3D:03:9C:5B:EE:39:69:09:66:D7:C3:F8:A3:8E:08:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE865FFB160D5D69C97C7440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f0ed72-728f-3403-992c-19e4348e092e.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     7015
IP address blocks:        2001:559:827d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:5f:fb:16:0d:5d:69:c9:7c:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=1bf463e4-e418-4f67-8312-82243032acfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:12:ec:0d:2b:81:8a:30:85:f6:14:f6:d3:
                    ad:c8:29:4a:43:cf:36:4d:b1:f5:17:f2:40:f7:c2:
                    f3:44:f2:4b:f0:72:ae:23:95:81:88:14:28:ac:c0:
                    59:da:30:68:ba:a7:c2:b2:5d:d1:e7:26:e0:07:36:
                    6b:51:68:80:21:53:97:db:03:72:ca:30:37:02:97:
                    05:7d:f9:65:0b:7a:ea:04:9f:62:40:70:f1:3b:c9:
                    fa:4c:a5:67:aa:8f:fc:9e:2a:5c:78:4a:a9:c0:d2:
                    aa:dc:a5:9b:9f:27:84:21:72:b4:29:f5:e4:2e:32:
                    55:9e:43:45:5b:d1:48:98:26:7c:b6:d4:bc:00:db:
                    dc:cc:22:a1:e6:61:77:04:84:a9:08:21:36:ca:7d:
                    5d:bc:94:83:51:db:59:fc:47:53:6d:b7:b7:9a:35:
                    ac:be:34:0b:d6:d9:9b:dc:e7:4e:7c:3e:cf:cd:5c:
                    67:b8:ee:3d:36:f4:d4:09:cb:e4:6e:8e:3b:ea:2a:
                    e8:fe:90:93:07:d3:25:ef:09:bf:30:bd:b4:58:a7:
                    6d:32:cc:f6:8d:9c:20:87:5d:47:ac:1d:5e:b5:12:
                    e0:b2:fb:ea:ac:23:9e:f9:7c:b1:f9:c7:02:b0:54:
                    6c:d1:ee:0e:f1:c9:20:f4:44:1a:61:e6:8c:33:ea:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DB:22:32:3D:03:9C:5B:EE:39:69:09:66:D7:C3:F8:A3:8E:08:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f0ed72-728f-3403-992c-19e4348e092e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:827d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2a:c9:7c:9d:ec:07:8f:c1:c9:57:1d:6a:0d:5d:24:34:66:
         4a:fe:2b:43:fb:fa:48:b8:30:cd:c8:67:74:47:ef:1b:c9:a7:
         10:85:0a:25:09:1f:c1:60:6e:df:85:a8:4c:4a:d8:91:23:dc:
         26:f4:7f:df:75:6d:e6:98:de:2d:9d:64:b5:fd:6d:74:09:cf:
         aa:65:d8:03:32:93:52:16:64:ed:a8:0a:e5:41:5f:66:74:60:
         57:04:ea:f6:10:bd:48:75:3f:56:14:a2:0b:2d:8c:08:f9:78:
         9d:6b:1b:24:53:f5:df:08:2a:3c:d2:2a:9d:1c:2f:08:50:bb:
         7c:a3:f7:00:87:9b:5f:00:e8:f1:d3:9f:ee:08:06:58:3b:37:
         6b:46:52:96:1d:76:ed:21:81:42:0b:db:6c:21:32:0c:7d:88:
         8b:a5:8b:22:bc:f8:6e:cb:90:4f:52:69:9f:b6:38:62:ba:d5:
         61:9b:b2:05:e6:49:3b:11:3a:cc:46:ea:d7:63:b8:17:ec:19:
         e3:dd:82:dc:92:ef:88:6d:52:07:25:16:b0:5a:50:dc:1a:8f:
         7e:ee:87:e2:cb:ee:e6:c2:b0:1b:10:f7:74:68:a7:7a:34:34:
         3c:65:6b:c0:0f:c7:2a:bd:b8:fb:32:b8:23:43:e2:dd:93:26:
         e5:3a:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:27:12 2026 by rpki-client