Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37032795-5ed2-3011-89e1-43933fd768a5.roa
File:                     37032795-5ed2-3011-89e1-43933fd768a5.roa (raw, json)
Hash identifier:          Nh0S0OklEaCA4Xsvi+wXq8LlNmlztenBNpB6uOt4rvI=
Subject key identifier:   F0:5E:D0:DB:22:CA:03:05:8E:83:73:B1:4A:6E:92:DF:9B:C2:54:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78AE8D50DDDF0091D35DA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37032795-5ed2-3011-89e1-43933fd768a5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33287
IP address blocks:        2001:559:84c9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8a:e8:d5:0d:dd:f0:09:1d:35:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=34ce9551-3847-41ec-9435-51a2d4957205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:33:f3:5a:e0:9e:4f:10:ab:67:f5:f2:bd:
                    cd:1d:8e:8d:37:06:42:d9:60:cd:21:4c:0d:ae:a5:
                    00:a8:21:41:c4:c0:66:3b:7f:27:90:28:73:94:2c:
                    8f:1f:08:92:60:6e:6d:8e:87:d2:9c:d5:d5:94:d8:
                    d5:d6:f3:34:ca:15:de:7a:25:0d:88:e9:cc:c5:15:
                    3e:a1:e4:54:b4:30:b4:39:b2:8e:29:63:a1:36:bf:
                    56:23:9b:5d:17:e9:f8:77:8f:f2:96:d4:9b:d7:3f:
                    fe:8b:38:13:6a:d2:87:bc:97:e1:61:04:ce:e5:bb:
                    bb:bf:15:75:44:b7:8f:2b:73:10:a6:6a:7b:45:da:
                    c5:77:14:9f:4f:28:a4:f0:dc:48:47:cc:05:95:1d:
                    4c:d3:6d:3c:76:2c:19:8d:98:30:fd:f6:fb:e8:78:
                    fb:3b:5e:95:d7:51:3e:35:45:26:d1:ee:89:1c:e4:
                    b3:b6:3a:7d:b1:43:b9:b5:2b:c9:6b:81:a1:10:e9:
                    5b:74:23:f4:2c:09:f2:1d:74:eb:e6:7c:5b:90:0c:
                    08:40:ba:5a:cb:4a:2c:33:16:99:37:23:44:bd:bf:
                    25:56:83:bb:a1:c8:4d:32:19:77:c3:e3:0e:37:a1:
                    9f:89:c8:c9:09:8c:e5:cf:47:cf:ae:03:f6:0a:9a:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5E:D0:DB:22:CA:03:05:8E:83:73:B1:4A:6E:92:DF:9B:C2:54:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37032795-5ed2-3011-89e1-43933fd768a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:84c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ad:3f:19:f8:60:5b:67:88:c3:9f:44:60:3e:09:11:b9:66:
         1d:16:f5:b4:23:00:3e:d0:9d:3e:ba:8b:34:95:13:d9:5c:d9:
         1b:67:c1:25:b9:57:54:0d:62:8b:04:62:00:b1:6f:b5:62:1d:
         01:10:d7:61:f6:74:43:6e:e7:67:21:8a:7c:6a:b2:6b:54:92:
         0d:27:08:6e:61:4a:5c:56:ee:61:93:18:d1:57:1e:f8:56:d1:
         5d:16:18:72:b6:b7:f9:0c:2c:a9:02:1e:2b:77:0e:1a:ef:15:
         5b:3e:dd:d2:46:29:a7:3d:c5:23:68:ec:b5:77:07:5a:bb:38:
         5a:3d:13:a1:94:65:f9:2c:bb:f5:27:4d:21:4a:97:d8:b1:a8:
         61:3d:60:bf:7e:6f:f2:00:53:ac:90:70:65:27:b9:c3:dd:26:
         08:d4:ac:8e:25:e9:11:b7:68:74:83:cf:c7:44:b0:66:e8:1c:
         2d:20:5b:e1:c2:b8:5a:7e:2c:44:b9:26:37:14:02:4b:10:3b:
         a3:85:ff:b3:f0:f6:e3:7a:13:7a:cc:05:d8:4d:08:e0:94:05:
         d7:6e:4b:f0:1e:03:d8:37:10:ec:3a:c2:51:47:6c:39:e3:07:
         4c:9f:d2:ec:70:6b:4f:c4:ed:5d:2e:ad:87:5c:bd:4e:dd:eb:
         71:38:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:01 2026 by rpki-client