Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c93d45c-9d8d-3930-a905-204b99a760d3.roa
File:                     2c93d45c-9d8d-3930-a905-204b99a760d3.roa (raw, json)
Hash identifier:          HeUDUNeHYBXagHd1Ml9Qj3ECbUoAB7N7Y1H0LQP3WzI=
Subject key identifier:   1E:3F:E5:50:DE:49:1D:C8:B3:EB:E1:F7:E8:35:AC:5D:58:D7:2B:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA90AAF207CC62696830E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c93d45c-9d8d-3930-a905-204b99a760d3.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33659
IP address blocks:        2001:559:c363::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:90:aa:f2:07:cc:62:69:68:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=855f37f1-6304-4493-9a28-6b9baf33c029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:02:cd:73:3b:37:53:49:74:b8:0d:bd:af:
                    b2:79:b5:d6:06:5a:44:03:5a:38:77:17:ce:78:ed:
                    a6:86:e7:cc:d7:16:00:df:13:de:91:2f:9b:ed:1e:
                    24:9d:10:0f:e4:2c:47:73:e9:31:72:40:ac:22:ea:
                    cb:4d:9f:5a:33:c0:5a:40:84:82:11:3d:49:48:54:
                    c2:9b:d9:eb:91:c6:17:58:09:e7:f1:fa:f5:53:c1:
                    64:00:d6:4e:10:dd:f8:0a:91:d3:51:ff:bd:ff:9e:
                    1d:60:70:98:c5:47:73:48:0d:a6:78:a9:7d:e1:48:
                    25:bc:5d:0b:85:d7:a5:60:8a:65:ca:03:27:3b:0e:
                    e9:6c:96:3f:25:59:e6:c7:f4:b5:8c:a0:8d:ad:76:
                    41:26:88:cd:90:ff:56:d5:8d:17:29:4c:d7:16:c3:
                    dd:63:9a:5c:f7:6c:d1:b5:fd:10:18:2c:31:a8:a5:
                    14:28:7b:ef:2c:2a:c8:b9:41:4a:f0:22:74:b1:70:
                    36:ac:6a:f9:50:c5:70:7b:69:8f:33:1a:29:ef:fb:
                    b8:a4:00:6d:da:ae:a1:2f:6d:83:e0:30:12:ff:09:
                    69:b0:9e:02:26:63:24:a9:bf:4b:aa:93:8e:b3:17:
                    91:cf:a0:97:de:c6:e9:57:87:e4:5c:c6:11:e7:f6:
                    b7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3F:E5:50:DE:49:1D:C8:B3:EB:E1:F7:E8:35:AC:5D:58:D7:2B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c93d45c-9d8d-3930-a905-204b99a760d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c363::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:43:14:67:81:61:23:b9:f6:f4:59:a6:9c:0b:ea:b9:c6:96:
         f7:76:9f:2d:9f:44:b8:c8:f9:bb:62:29:aa:19:63:72:71:f6:
         13:23:9d:ed:15:a5:76:9b:34:dd:d6:ac:48:8c:df:d7:be:d3:
         0b:35:ef:03:e0:0e:55:8d:93:ca:0a:ff:4a:5b:b8:a1:f7:df:
         c4:b6:d4:d7:b7:41:4a:19:60:7a:dd:0d:9c:53:69:26:d2:b6:
         01:7d:0f:d5:cc:68:5b:5a:bb:16:a8:fa:84:36:af:08:a6:d9:
         9b:69:01:95:fd:7a:32:c4:eb:f8:18:df:cf:74:e0:d2:be:6e:
         7b:38:2e:f3:06:c9:f2:ae:4a:66:84:1b:80:a5:94:ec:6e:ec:
         a1:ae:25:f5:8a:53:a2:3e:ba:bd:10:d6:98:02:08:73:70:2d:
         4d:3f:53:1a:49:6c:26:f0:39:b0:20:7e:a8:40:3c:37:a6:0e:
         b4:50:85:30:2b:be:3e:aa:d7:c2:26:8b:b3:f1:83:5e:fe:5e:
         16:3b:71:24:c8:8e:55:e0:41:c1:07:97:52:03:b4:16:86:84:
         3c:24:70:e2:11:fe:fa:e3:f6:c8:b4:45:ab:13:d6:d7:a8:46:
         5e:65:f3:b1:40:18:c9:4a:08:a4:3b:a4:5b:5f:84:e9:52:db:
         a9:72:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:22 2026 by rpki-client