Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c6c02c-9520-3122-92d6-6f0d85f2ff2f.roa
File:                     36c6c02c-9520-3122-92d6-6f0d85f2ff2f.roa (raw, json)
Hash identifier:          fIcXotbqjiQc5+YMCfeaR0fukREroDAVVwaJ5sTzLxg=
Subject key identifier:   C4:22:51:54:94:19:AD:00:A6:10:8B:C0:24:33:9B:FA:79:5F:A6:99
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9C39D2B09C40DF5026F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c6c02c-9520-3122-92d6-6f0d85f2ff2f.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33651
IP address blocks:        2001:559:2e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:c3:9d:2b:09:c4:0d:f5:02:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=f7eba467-a85a-4ef9-88e5-9aa8b84195cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:aa:73:e2:f7:17:db:e3:b0:64:67:f0:1f:
                    93:06:93:d8:28:6a:73:c1:7e:d7:65:31:86:cb:a4:
                    f4:50:9d:e3:ac:a8:c0:63:f9:b0:2d:ab:fd:3f:57:
                    1b:18:2c:9a:a3:72:d9:85:b9:fc:70:d3:e7:29:33:
                    12:10:49:62:64:9a:99:90:fd:fc:bd:8c:a2:0e:56:
                    76:fb:25:58:88:aa:33:b3:06:d5:23:b9:78:65:04:
                    6f:fe:77:f0:5f:a2:d1:c5:71:c2:ad:25:03:57:a4:
                    f5:8f:9c:a4:74:12:25:7f:52:59:39:f9:ae:25:92:
                    9b:a6:f6:a0:ca:cb:0b:48:60:7f:96:53:01:8b:6b:
                    15:04:80:2d:6f:42:17:1f:e2:cd:ab:c4:a3:b8:fe:
                    66:ef:04:4d:a8:2c:15:36:be:d3:39:32:96:1d:84:
                    f7:33:b3:47:19:dd:c0:48:3d:e6:67:1f:43:cc:cb:
                    c3:d9:96:5c:41:36:3b:9d:cf:ad:b6:1a:ea:bb:1a:
                    70:ce:a2:a8:6c:6a:1c:56:de:4b:20:73:13:49:56:
                    e4:4e:1c:5c:e5:9c:61:2b:e2:43:46:bb:6f:b0:71:
                    42:e1:c1:ca:43:72:9c:4d:d5:a7:8b:cc:d4:af:1f:
                    d0:64:94:c4:d1:9c:3e:ba:73:6a:df:dd:4d:f4:09:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:22:51:54:94:19:AD:00:A6:10:8B:C0:24:33:9B:FA:79:5F:A6:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c6c02c-9520-3122-92d6-6f0d85f2ff2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:2e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d4:78:1b:cc:2a:ff:e9:21:d9:f9:12:18:83:e0:e8:50:57:
         76:56:db:98:88:d9:73:a2:72:05:4b:e3:21:70:a7:23:82:97:
         f1:dd:53:b5:fc:a9:ef:91:3e:dd:78:77:46:cb:69:90:84:6f:
         04:16:55:da:c0:7e:0e:47:ba:d9:70:ad:ee:e5:cf:26:34:3d:
         f4:84:3b:20:b2:f0:c8:6b:91:6a:a7:51:7d:fe:dc:ef:fe:01:
         11:72:f1:25:ef:bb:d8:bb:89:f2:0c:53:8d:82:74:45:1a:f0:
         dd:34:df:75:5d:17:ca:5c:bd:f5:53:19:3e:fa:7e:af:16:a0:
         61:77:93:8a:87:99:4b:2f:a7:a0:26:80:90:8f:10:cf:23:03:
         37:fd:61:06:b5:6c:1b:e1:b8:5d:42:0c:2f:a0:91:a3:59:a0:
         4d:83:70:c7:10:13:ce:9c:b5:ff:99:00:f3:70:e8:ae:e3:a9:
         42:36:95:ef:b2:b9:2d:fd:05:2d:86:5f:bc:53:2a:93:a7:68:
         66:8c:64:c8:f7:41:1a:1e:a5:fa:21:b3:c6:29:9d:0b:d0:aa:
         35:da:eb:3b:7e:14:3a:ee:1c:87:b1:ed:5a:3a:a3:eb:04:ba:
         bb:d4:67:3c:d1:2a:92:40:c8:d9:1c:53:fc:0b:10:be:8f:9e:
         7d:54:43:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:34 2026 by rpki-client