Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b2bd4e5-efb4-31eb-84d1-e80a2d279efe.roa
File:                     2b2bd4e5-efb4-31eb-84d1-e80a2d279efe.roa (raw, json)
Hash identifier:          2tz20qjifelo8srgyDb3C8FdQc4xNJfKa2kaM7jEXzY=
Subject key identifier:   71:3E:5F:6E:CF:1A:24:BD:B9:DF:10:B2:59:D1:BF:CD:26:21:E3:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA133B150D4658EE794780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b2bd4e5-efb4-31eb-84d1-e80a2d279efe.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7015
IP address blocks:        2001:559:c409::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:13:3b:15:0d:46:58:ee:79:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=4aff6b7b-c7c1-40c4-95df-b544338799d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:b3:73:bd:70:72:bb:37:91:5c:19:3f:bd:
                    34:e9:c4:45:e5:cf:43:12:77:09:ef:32:ca:63:63:
                    e6:ae:56:80:75:ae:fa:7d:a7:bd:21:5f:fd:1f:4c:
                    82:69:4f:68:df:34:ce:3b:4c:50:90:3b:e7:f5:d8:
                    05:e7:8e:25:7a:10:69:5e:6a:b9:8e:1b:72:74:11:
                    9c:f6:5d:36:85:e4:48:32:49:7e:81:64:01:c0:e0:
                    7e:21:32:c2:62:c3:3e:59:75:ae:62:86:e6:9b:50:
                    cc:b1:2f:2e:64:95:46:f0:f2:cb:78:74:2b:d8:30:
                    a9:41:b0:43:ad:df:dc:48:77:40:e1:9f:2d:e6:74:
                    97:ca:cf:f3:61:4b:5b:64:60:59:ea:b0:f5:e1:d3:
                    67:97:e1:ae:f7:b6:8a:45:47:f9:ef:72:c8:ed:f8:
                    44:47:31:05:6a:58:0a:db:bd:7a:fb:82:a2:2e:92:
                    8c:78:9d:d9:c4:6e:94:3d:81:44:dd:6a:40:b3:61:
                    27:3a:c9:5f:89:8f:40:23:fc:5d:1b:a7:9f:ef:f0:
                    33:3e:51:b3:48:de:b9:d6:57:cf:ef:c0:0e:2d:1f:
                    fe:71:e1:51:bf:f1:51:15:1c:a9:90:d3:74:ab:01:
                    16:92:f9:5d:fc:ec:43:1d:6f:57:12:ec:48:88:d5:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3E:5F:6E:CF:1A:24:BD:B9:DF:10:B2:59:D1:BF:CD:26:21:E3:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b2bd4e5-efb4-31eb-84d1-e80a2d279efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c409::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:bd:3f:71:b8:97:4e:c7:2d:9a:88:88:87:6e:26:a9:d7:38:
         8c:43:ac:5b:23:2b:0e:4b:da:66:38:44:82:d4:54:a3:86:51:
         2f:aa:91:bd:78:57:2f:63:c7:d8:92:d0:ce:8e:35:51:f5:8b:
         d3:45:6c:36:3e:44:57:78:31:36:ae:de:8f:78:88:f9:fb:9f:
         ec:34:9a:e4:91:6c:d0:5f:c5:e0:5f:e7:12:e5:28:cd:58:25:
         7b:39:7f:75:26:c7:08:10:71:3d:18:75:b6:e8:96:a1:3d:03:
         6f:9e:c0:85:09:7b:69:d7:99:ef:46:f4:d4:d3:01:08:bd:44:
         82:73:78:ca:98:c1:1d:02:ad:50:1f:74:5b:24:7f:98:ed:c9:
         24:b5:a9:d8:ad:4e:dd:76:44:75:b8:7b:c9:4d:6f:7a:70:a2:
         b6:c2:fd:5e:05:70:80:fa:1e:0d:72:f3:e3:3a:10:f4:92:1a:
         d3:bd:00:28:c9:7c:9c:b0:50:e5:02:98:57:83:f8:6b:66:67:
         cc:e0:56:aa:2a:92:f5:fc:9c:b6:05:9e:aa:15:24:9f:ab:0a:
         a7:5c:1d:79:8c:ca:4d:79:02:01:6a:88:12:e0:ca:23:ca:f1:
         1e:54:cc:9c:53:fd:6d:9b:7e:58:c0:c9:8b:05:0f:a4:37:20:
         4b:75:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:16 2026 by rpki-client