Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e79a646-851d-3401-bc52-67adacf270d7.roa
File:                     2e79a646-851d-3401-bc52-67adacf270d7.roa (raw, json)
Hash identifier:          3V2n17L5U6V7O0UgNu+axNGwhaV08lVmqZgp6ZT8wfc=
Subject key identifier:   2E:06:07:AF:54:2D:CC:61:D9:26:BD:45:DE:5F:66:BE:5C:A2:CA:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE860AD0520FF248C4272480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e79a646-851d-3401-bc52-67adacf270d7.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     7016
IP address blocks:        2001:559:876c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:0a:d0:52:0f:f2:48:c4:27:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=5c272a06-f437-4331-9dfa-bcb2750d6a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:78:b4:fe:7c:83:68:8b:12:00:90:92:dd:
                    79:7f:b6:cc:09:1d:75:51:b7:b8:db:de:f6:cb:0a:
                    3c:29:0f:da:7b:31:bd:6d:8f:a2:b6:57:0a:a1:ac:
                    45:37:b8:fb:3e:b5:85:f5:2c:21:f9:9f:75:79:41:
                    ab:d4:9b:c5:98:3a:ec:4d:3d:44:7e:22:51:92:0e:
                    d3:c4:d4:a7:cc:0b:a6:f4:b3:a0:a4:86:e9:4d:f8:
                    c5:ee:e0:62:0b:76:71:7d:a6:99:22:7e:91:89:f2:
                    e0:2a:8c:90:25:b5:e0:81:0b:2c:a8:25:b7:57:7b:
                    8e:2a:3e:b1:37:b3:0b:b4:75:6a:41:60:17:a4:d7:
                    89:6a:43:14:6f:9f:86:d7:14:4d:37:b5:89:45:6d:
                    8a:3e:a6:eb:d3:59:ab:6e:93:33:47:8c:e2:ff:fd:
                    41:c4:d1:34:82:a5:6a:c1:b8:5b:b9:f1:3a:56:a2:
                    cb:39:bf:0e:18:ce:59:f1:f7:41:3a:2a:e2:a8:24:
                    6c:30:a0:67:9f:f1:af:92:d0:78:3f:3c:a7:8f:0e:
                    90:2a:80:60:a9:02:41:f5:b3:1b:0c:99:35:65:71:
                    96:d4:1e:0a:38:0a:2e:b4:8b:46:42:00:03:6c:eb:
                    83:84:44:12:cb:bd:74:9a:bb:ce:72:19:93:b2:1c:
                    60:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:06:07:AF:54:2D:CC:61:D9:26:BD:45:DE:5F:66:BE:5C:A2:CA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e79a646-851d-3401-bc52-67adacf270d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:876c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:28:e0:c3:97:14:35:9c:7a:6a:41:b0:98:4c:1c:d6:5f:00:
         0b:f7:5e:2f:bb:f0:76:29:ee:98:be:b2:56:4e:c4:79:fa:b4:
         ee:3d:ef:aa:3a:09:77:48:b6:62:28:e5:c3:13:d7:1b:39:d6:
         7e:34:e4:8d:71:5c:0a:c6:37:8d:61:49:4d:9c:2a:a1:2a:f2:
         11:18:a2:62:ff:03:8e:b4:fa:1e:06:96:10:0f:b0:01:ab:7c:
         ac:47:0f:85:0f:ce:be:82:5b:f7:f9:c1:b6:e2:2b:ee:d5:c5:
         6f:df:f5:8c:b2:69:1e:8f:06:5c:35:33:1d:bb:d2:ee:57:78:
         37:72:ff:7a:06:ff:44:4e:b6:a4:55:3a:87:e1:88:24:bf:89:
         1a:06:b4:66:4e:78:5c:bf:fb:3e:03:ff:aa:0c:aa:78:e1:b9:
         e7:0b:73:05:08:1d:3b:89:fc:bc:f4:36:0f:0a:9d:8e:d7:10:
         3f:09:d3:91:6b:ac:fa:51:ab:42:2c:68:d5:ef:c3:30:cf:77:
         cb:0d:c1:a6:a4:56:de:ce:35:21:9a:79:fa:01:59:30:d7:d6:
         67:5d:77:85:e8:9a:c9:b1:6d:ea:df:21:24:bc:eb:9f:dd:bd:
         14:9e:74:72:97:bf:f4:b9:7c:f8:9d:ce:d9:91:80:7d:a6:7c:
         69:94:2f:b4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3ehgrQUg/ySMQnJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
NWMyNzJhMDYtZjQzNy00MzMxLTlkZmEtYmNiMjc1MGQ2YTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqF4tP58g2iLEgCQkt15f7bMCR11Ube42972
ywo8KQ/aezG9bY+itlcKoaxFN7j7PrWF9Swh+Z91eUGr1JvFmDrsTT1EfiJRkg7T
xNSnzAum9LOgpIbpTfjF7uBiC3ZxfaaZIn6RifLgKoyQJbXggQssqCW3V3uOKj6x
N7MLtHVqQWAXpNeJakMUb5+G1xRNN7WJRW2KPqbr01mrbpMzR4zi//1BxNE0gqVq
wbhbufE6VqLLOb8OGM5Z8fdBOiriqCRsMKBnn/GvktB4Pzynjw6QKoBgqQJB9bMb
DJk1ZXGW1B4KOAoutItGQgADbOuDhEQSy710mrvOchmTshxg+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC4GB69ULcxh2Sa9Rd5fZr5coso+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU3OWE2NDYtODUxZC0z
NDAxLWJjNTItNjdhZGFjZjI3MGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYds
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACko4MOXFDWcempBsJhMHNZfAAv3Xi+78HYp7pi+slZOxHn6tO49
76o6CXdItmIo5cMT1xs51n405I1xXArGN41hSU2cKqEq8hEYomL/A460+h4GlhAP
sAGrfKxHD4UPzr6CW/f5wbbiK+7VxW/f9YyyaR6PBlw1Mx270u5XeDdy/3oG/0RO
tqRVOofhiCS/iRoGtGZOeFy/+z4D/6oMqnjhuecLcwUIHTuJ/Lz0Ng8KnY7XED8J
05FrrPpRq0IsaNXvwzDPd8sNwaakVt7ONSGaefoBWTDX1mddd4XomsmxberfISS8
65/dvRSedHKXv/S5fPidztmRgH2mfGmUL7Q=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:27:29 2026 by rpki-client