Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c2333d-e56c-392b-bc40-410ff8bf5724.roa
File:                     36c2333d-e56c-392b-bc40-410ff8bf5724.roa (raw, json)
Hash identifier:          /thjbhQ7h12+xVYFPLpuP/e/L1vl6kwj1jfQ048H28U=
Subject key identifier:   66:E7:5E:0E:80:71:43:B5:BA:BF:42:96:83:99:27:E7:6E:70:A3:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA6132AE80804C45BC6F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c2333d-e56c-392b-bc40-410ff8bf5724.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33287
IP address blocks:        2001:559:c509::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:61:32:ae:80:80:4c:45:bc:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=2e2775d7-dc45-4730-a783-7026eab8dbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c3:91:72:e0:3b:9c:fc:3e:83:12:16:cb:ca:
                    af:93:93:0a:30:13:f8:39:f1:53:0b:99:de:c5:57:
                    5b:44:45:17:37:18:53:33:ee:8a:6d:a4:eb:cf:25:
                    a0:66:31:3b:8c:f8:ad:b0:3c:e3:74:25:8a:57:d9:
                    8c:cf:76:07:31:0d:fa:e2:81:30:d4:d8:03:37:05:
                    b7:de:db:c0:33:89:94:c7:c5:f2:76:17:0c:27:6b:
                    e7:a8:af:e6:37:b9:d1:56:5b:ea:3c:fc:71:ff:1b:
                    e9:27:c9:06:fb:d9:e7:71:8c:d4:f4:41:63:0a:08:
                    c9:41:4a:d2:10:1f:91:2d:27:90:ac:79:c8:03:e2:
                    99:b7:8e:8b:21:ab:3e:20:ad:3c:23:c8:d4:04:da:
                    85:18:64:0c:4e:60:f3:46:77:a7:59:8b:75:62:5b:
                    b7:40:ce:c5:4a:e8:57:a5:59:bd:f8:32:46:07:e1:
                    73:61:6a:5f:9a:39:b1:67:b5:19:07:e0:9a:9f:52:
                    4c:f9:d1:e5:36:14:92:8b:ba:c8:ba:d5:2e:91:4b:
                    56:63:9a:8e:d5:d9:5c:63:0c:7a:13:31:2a:58:b7:
                    e6:cf:99:65:10:7c:8f:34:7d:f2:c0:55:19:5c:61:
                    96:e7:ff:ca:36:0d:c2:6d:b2:6a:4d:f2:c2:61:fc:
                    32:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E7:5E:0E:80:71:43:B5:BA:BF:42:96:83:99:27:E7:6E:70:A3:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c2333d-e56c-392b-bc40-410ff8bf5724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c509::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:42:68:91:06:1b:07:86:6d:bc:a2:22:9f:a2:56:de:bc:11:
         b1:49:82:c5:b8:4c:14:33:b8:f9:dc:3c:48:ed:34:11:2d:1e:
         56:6d:f6:8f:b8:0d:2b:97:76:b8:69:56:34:58:d4:fc:60:15:
         95:7d:b4:76:70:25:5b:dc:26:89:df:c0:d1:cf:d6:0d:cf:fc:
         3d:90:1a:a8:ab:c6:79:a2:ca:55:86:b8:81:68:1a:87:78:b1:
         d0:61:26:68:7f:d8:d9:99:0f:72:3a:85:27:19:39:6e:85:e1:
         36:3d:47:b5:b0:ca:8d:0b:b8:9d:35:9c:68:89:f0:3e:c2:e2:
         2b:36:e2:08:4d:4a:2d:9a:79:ac:d7:5f:04:70:07:3d:ca:a7:
         39:6b:c7:7c:b8:88:e2:8e:c3:32:08:18:b2:64:e4:34:8d:a3:
         64:f1:80:a3:cf:66:12:01:20:55:ac:7a:d5:fe:a9:24:82:5f:
         d1:14:09:83:50:73:d6:68:85:9f:bc:d2:eb:bb:75:5f:04:b6:
         2f:57:50:85:c3:47:44:b6:c1:a7:27:99:d6:0e:40:8c:41:77:
         1d:60:00:6e:2d:d9:dd:42:3d:68:5a:23:3f:eb:8b:c3:00:3f:
         b8:8a:55:63:f5:7c:df:cf:ed:fe:a0:b4:ca:a7:fc:6f:86:e5:
         27:d9:08:a6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96mEyroCATEW8b0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
MmUyNzc1ZDctZGM0NS00NzMwLWE3ODMtNzAyNmVhYjhkYmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMORcuA7nPw+gxIWy8qvk5MKMBP4OfFTC5ne
xVdbREUXNxhTM+6KbaTrzyWgZjE7jPitsDzjdCWKV9mMz3YHMQ364oEw1NgDNwW3
3tvAM4mUx8XydhcMJ2vnqK/mN7nRVlvqPPxx/xvpJ8kG+9nncYzU9EFjCgjJQUrS
EB+RLSeQrHnIA+KZt46LIas+IK08I8jUBNqFGGQMTmDzRnenWYt1Ylu3QM7FSuhX
pVm9+DJGB+FzYWpfmjmxZ7UZB+Can1JM+dHlNhSSi7rIutUukUtWY5qO1dlcYwx6
EzEqWLfmz5llEHyPNH3ywFUZXGGW5//KNg3CbbJqTfLCYfwyMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGbnXg6AcUO1ur9CloOZJ+ducKOPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzZjMjMzM2QtZTU2Yy0z
OTJiLWJjNDAtNDEwZmY4YmY1NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcUJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANlCaJEGGweGbbyiIp+iVt68EbFJgsW4TBQzuPncPEjtNBEtHlZt
9o+4DSuXdrhpVjRY1PxgFZV9tHZwJVvcJonfwNHP1g3P/D2QGqirxnmiylWGuIFo
God4sdBhJmh/2NmZD3I6hScZOW6F4TY9R7Wwyo0LuJ01nGiJ8D7C4is24ghNSi2a
eazXXwRwBz3Kpzlrx3y4iOKOwzIIGLJk5DSNo2TxgKPPZhIBIFWsetX+qSSCX9EU
CYNQc9ZohZ+80uu7dV8Eti9XUIXDR0S2wacnmdYOQIxBdx1gAG4t2d1CPWhaIz/r
i8MAP7iKVWP1fN/P7f6gtMqn/G+G5SfZCKY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:39:42 2026 by rpki-client