Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37d4a992-d106-3db6-9f34-2459edff587f.roa
File:                     37d4a992-d106-3db6-9f34-2459edff587f.roa (raw, json)
Hash identifier:          dEirL3PtXl1AgyrLpAb3oTu9OC+ErbVxrsP1ZaKr0/k=
Subject key identifier:   79:7C:75:C5:4D:BA:5A:E8:C6:4F:02:CB:33:C7:A4:6F:65:F7:F0:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA07E0D4B4FF67F7CB9224
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37d4a992-d106-3db6-9f34-2459edff587f.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7015
IP address blocks:        2001:559:8491::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:07:e0:d4:b4:ff:67:f7:cb:92:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=c7a070ee-0ce2-46e5-ae43-3e41f2736ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:09:02:1f:d2:ef:4c:1b:82:b5:65:0e:04:bd:
                    88:88:2d:d1:d8:88:d2:33:56:59:85:25:b2:b2:8b:
                    6a:47:8d:10:0e:e5:27:95:b8:70:7a:59:e2:8d:28:
                    af:74:03:60:f9:7b:8c:86:b5:81:9d:ea:c8:d9:46:
                    0a:cd:34:dc:f9:cc:36:80:99:fe:64:d3:5c:90:1a:
                    2d:78:3a:b2:fc:5a:63:ea:70:de:da:b1:b2:c1:ad:
                    60:70:ff:34:3c:80:bd:3f:f4:0b:90:4f:cb:b6:8d:
                    b9:13:b6:94:5b:e9:ca:fb:0f:4c:2f:ea:09:cd:b9:
                    d2:dc:55:58:a7:46:b4:8f:fb:3f:93:a6:f3:d0:28:
                    30:d7:12:2f:80:e7:2e:99:5c:53:f8:cf:6b:7c:91:
                    11:86:6e:47:04:2e:26:9b:cb:ae:3c:1d:8a:cc:6d:
                    fd:de:01:13:c3:04:c7:60:f1:a1:ee:8e:2d:b9:29:
                    57:d1:07:df:08:da:f6:d7:19:d5:4c:9e:99:54:77:
                    ef:2f:17:6d:6a:1d:6f:a6:d5:e7:b7:46:87:19:b7:
                    3b:18:42:11:b2:68:91:4a:02:57:99:24:40:6b:fe:
                    8c:77:0c:79:c1:ea:b7:ad:8c:a6:47:06:29:cf:dd:
                    a5:4f:8c:c1:3e:87:25:4f:21:ed:fc:9c:80:52:b8:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7C:75:C5:4D:BA:5A:E8:C6:4F:02:CB:33:C7:A4:6F:65:F7:F0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/37d4a992-d106-3db6-9f34-2459edff587f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8491::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ce:59:b6:7b:00:2f:8d:15:b9:f6:d4:fb:15:2e:de:97:e0:
         95:41:0a:a5:04:0b:1b:05:36:b6:79:8c:a5:5e:db:7e:dc:8e:
         2a:13:dd:9a:4a:c0:66:24:c8:62:08:91:dd:42:27:6f:33:d1:
         4c:a2:24:2c:82:64:4f:15:ad:55:2f:99:9c:7c:d4:40:3a:bf:
         37:e9:87:05:46:be:59:55:2d:d4:42:20:03:d5:56:b1:75:74:
         d9:89:26:ed:16:2e:3a:01:db:aa:46:1b:f5:af:9c:cb:c3:88:
         57:fa:7a:7b:aa:05:53:2a:a7:c8:95:bd:2d:2b:10:9e:be:75:
         5b:95:ba:e9:bf:c5:59:65:a0:8d:66:a5:ba:24:51:f3:7b:a8:
         7a:82:36:9d:1c:e8:9a:89:16:03:53:2e:f0:1f:72:06:a1:b2:
         4f:37:55:61:7a:b6:5f:53:fe:e6:41:2b:f1:85:f5:92:91:7c:
         7b:a7:08:ce:b4:51:0c:9d:9a:99:be:41:2c:80:8e:82:b1:35:
         37:03:4e:19:26:22:ed:02:27:35:c7:b3:c8:9f:f1:23:c7:b4:
         f2:3a:0f:f1:4b:35:41:3c:f1:b4:5c:a0:23:7b:9d:c3:df:6b:
         fd:32:70:d7:1b:2a:f6:62:16:df:0d:09:f4:7a:d7:ff:f0:48:
         aa:e6:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:58:09 2026 by rpki-client