Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9b2433-9439-3617-960d-cfb0d1a9f50b.roa
File:                     2c9b2433-9439-3617-960d-cfb0d1a9f50b.roa (raw, json)
Hash identifier:          i/96O49ZTfpwEZbKwsU1IZqkgYPcVOI9CqIMf9R3OQA=
Subject key identifier:   32:12:28:F3:CF:36:21:4D:64:81:57:0F:83:90:29:60:79:9C:5F:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA595B46AA3F44E635F400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9b2433-9439-3617-960d-cfb0d1a9f50b.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33287
IP address blocks:        2001:559:80b8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:59:5b:46:aa:3f:44:e6:35:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=a065f4d9-8df1-4c83-a968-d364fed4c882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:38:65:01:c9:49:da:89:5d:30:44:37:e3:
                    22:e9:b6:52:3e:0d:54:cd:dd:fc:d5:5e:6a:2d:d9:
                    7a:8f:01:7b:df:cd:d4:95:27:ac:b4:1e:b2:80:1f:
                    16:01:22:de:e6:be:ed:9a:cc:80:bc:34:04:85:46:
                    94:84:be:18:17:b1:6a:19:7c:a1:91:14:37:95:f2:
                    35:42:31:3b:52:75:56:09:91:57:7c:ab:e3:48:14:
                    e8:8b:6b:c1:08:25:e1:42:fc:c6:22:59:18:0b:f7:
                    7c:1a:b9:7a:3f:b1:3d:e5:b2:43:92:fb:33:0d:fb:
                    d9:33:63:fe:94:73:1a:97:0f:3f:d8:63:cf:7e:3d:
                    08:d7:3d:16:01:e1:c8:b3:d0:b3:3a:76:4f:c5:8f:
                    13:d5:ed:2e:e7:22:78:54:09:b3:15:66:ed:cd:fd:
                    5f:39:c1:e7:67:2e:6b:85:88:db:59:f7:ed:6b:70:
                    fe:8a:54:ef:85:78:af:f9:1d:f0:1a:4e:50:2b:ba:
                    ff:3f:09:89:6f:c1:dd:d8:bc:d5:dd:d2:7e:f2:9f:
                    9d:27:c6:fe:93:1a:6c:3c:4b:59:e8:d2:1f:1d:51:
                    7b:ed:ce:24:f6:9f:98:93:58:46:6d:d5:10:43:d0:
                    e4:7e:1e:dd:e0:5e:38:39:e6:c0:33:19:24:95:99:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:12:28:F3:CF:36:21:4D:64:81:57:0F:83:90:29:60:79:9C:5F:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9b2433-9439-3617-960d-cfb0d1a9f50b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80b8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:25:21:2c:cb:ea:70:10:46:a4:32:8f:f6:5e:cb:29:df:ee:
         09:f6:a0:20:07:1c:d7:50:50:43:cb:ae:d9:88:85:2f:e6:3d:
         ac:fc:3c:7a:cd:51:1a:cc:61:80:a5:c1:dd:58:35:dc:44:7d:
         a7:c0:34:c7:8d:dc:ce:bc:3a:6d:8e:5a:da:8a:0c:cf:25:9a:
         e0:2d:df:3c:84:aa:30:a6:10:08:7d:b4:9b:d5:07:0f:e1:62:
         63:72:0b:bb:12:76:9b:5d:d1:c7:b3:bb:6a:35:1d:7c:80:b4:
         01:8d:fa:56:da:e8:ae:ae:7c:a7:e5:4e:c5:d5:2e:8f:ae:e0:
         5b:d3:0e:f8:16:db:39:38:5e:d8:a4:0d:f1:71:f1:bc:7d:81:
         58:22:77:da:24:81:51:b0:90:a3:dc:1b:80:5f:6b:d2:17:c4:
         bb:bf:9c:51:90:69:2f:52:be:b7:57:cd:bb:ee:1d:cb:51:a9:
         03:50:d6:08:6c:27:78:cc:8a:a4:79:5c:04:e4:c7:2f:aa:75:
         f3:db:c8:75:12:f9:09:22:c7:31:8d:66:73:b3:f0:7b:e7:4d:
         70:ef:a5:3a:f0:af:a6:2e:60:42:09:3a:2b:4a:82:8e:3f:41:
         0b:2a:55:86:cf:38:70:8f:33:33:45:c4:c3:77:ec:99:69:9d:
         9c:54:33:81
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96llbRqo/ROY19AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
YTA2NWY0ZDktOGRmMS00YzgzLWE5NjgtZDM2NGZlZDRjODgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDE4ZQHJSdqJXTBEN+Mi6bZSPg1Uzd381V5q
Ldl6jwF7383UlSestB6ygB8WASLe5r7tmsyAvDQEhUaUhL4YF7FqGXyhkRQ3lfI1
QjE7UnVWCZFXfKvjSBToi2vBCCXhQvzGIlkYC/d8Grl6P7E95bJDkvszDfvZM2P+
lHMalw8/2GPPfj0I1z0WAeHIs9CzOnZPxY8T1e0u5yJ4VAmzFWbtzf1fOcHnZy5r
hYjbWffta3D+ilTvhXiv+R3wGk5QK7r/PwmJb8Hd2LzV3dJ+8p+dJ8b+kxpsPEtZ
6NIfHVF77c4k9p+Yk1hGbdUQQ9Dkfh7d4F44OebAMxkklZmWjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDISKPPPNiFNZIFXD4OQKWB5nF/fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmM5YjI0MzMtOTQzOS0z
NjE3LTk2MGQtY2ZiMGQxYTlmNTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYC4
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMslISzL6nAQRqQyj/Zeyynf7gn2oCAHHNdQUEPLrtmIhS/mPaz8
PHrNURrMYYClwd1YNdxEfafANMeN3M68Om2OWtqKDM8lmuAt3zyEqjCmEAh9tJvV
Bw/hYmNyC7sSdptd0cezu2o1HXyAtAGN+lba6K6ufKflTsXVLo+u4FvTDvgW2zk4
XtikDfFx8bx9gVgid9okgVGwkKPcG4Bfa9IXxLu/nFGQaS9SvrdXzbvuHctRqQNQ
1ghsJ3jMiqR5XATkxy+qdfPbyHUS+QkixzGNZnOz8HvnTXDvpTrwr6YuYEIJOitK
go4/QQsqVYbPOHCPMzNFxMN37JlpnZxUM4E=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:20 2026 by rpki-client