Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c067051-246b-3962-a737-39251e7784df.roa
File:                     3c067051-246b-3962-a737-39251e7784df.roa (raw, json)
Hash identifier:          dfzL4Sn7lMqxvH1w6qSfc9Ig1vQYrLxgwSY0zknus6s=
Subject key identifier:   33:A3:51:4A:37:6D:31:33:3B:D4:F1:8C:DE:09:7C:C4:07:D3:CA:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86B78E3922809EDC0FB400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c067051-246b-3962-a737-39251e7784df.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33657
IP address blocks:        2001:559:3bc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:b7:8e:39:22:80:9e:dc:0f:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=49c2b85e-02f9-48cf-a679-3e680f2f7887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:4d:30:46:48:83:d2:3e:3b:79:f2:36:ed:
                    89:26:3c:a5:48:89:f7:2e:81:97:2a:98:01:b4:9d:
                    d8:f4:ef:51:61:68:a5:7f:e7:92:87:08:81:68:b1:
                    c1:ad:a2:3b:2b:6d:56:72:30:0a:c2:2f:94:a2:94:
                    87:91:09:d3:5d:04:67:b8:13:e6:4e:d8:23:7a:75:
                    77:8d:a4:0d:a0:ce:0c:ca:32:90:49:45:7f:0a:d5:
                    51:b1:4a:df:8e:fe:4d:5e:6f:5d:3f:5c:d5:a3:68:
                    5e:2c:32:94:5b:08:01:97:77:ff:27:29:ff:2a:c2:
                    21:2f:c2:26:87:3e:30:7b:2d:96:99:e2:3e:21:41:
                    db:18:29:40:b8:82:18:86:5c:0f:ea:0f:3b:1b:16:
                    1e:e6:19:ad:6d:4d:f9:db:81:f4:72:dc:37:e1:1c:
                    e3:b3:54:b7:e2:c3:75:64:f4:c1:f4:2c:24:6c:77:
                    c0:ec:e7:08:f1:34:7c:f2:78:7a:5a:91:05:34:e2:
                    d6:83:70:42:e8:a8:22:e1:8b:19:0f:f5:50:81:61:
                    19:5a:29:a4:7d:bf:9c:ab:bf:c7:62:28:92:86:10:
                    21:09:e4:0b:31:07:0f:55:4a:9e:fa:df:af:c7:f1:
                    c9:41:b3:d2:a2:07:84:8b:3d:7e:cc:43:28:47:df:
                    ec:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A3:51:4A:37:6D:31:33:3B:D4:F1:8C:DE:09:7C:C4:07:D3:CA:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c067051-246b-3962-a737-39251e7784df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0d:73:05:fb:f4:67:fd:a2:ec:f9:69:f3:90:14:ab:83:12:
         f2:c5:30:7f:47:d0:02:4a:a8:b4:62:be:16:e1:c6:16:25:3d:
         10:c7:3b:61:7f:2d:14:01:6b:7a:91:7e:24:37:05:88:33:10:
         00:e8:6b:d2:5c:df:ba:92:be:c7:ae:54:14:1b:1d:59:3b:16:
         13:6c:b0:5b:71:89:b6:2a:a6:00:e1:96:0c:3d:8f:b7:69:f0:
         07:e9:de:75:cd:60:f1:71:21:25:54:6e:ee:e7:66:5f:dc:67:
         f6:ce:67:4d:8f:b5:4a:28:5f:a7:f8:68:e6:2f:34:c6:c7:e5:
         cc:fa:0d:b4:39:66:83:4e:1a:e0:e9:bd:e6:6c:c5:18:64:fd:
         d2:ba:e0:f6:1b:32:f9:29:c9:fa:3e:58:fe:b7:b6:d2:76:b3:
         8c:96:72:5d:86:13:50:6a:9e:7a:e7:96:af:0d:24:35:ea:41:
         20:29:dd:21:83:1d:9d:4e:a1:91:46:d7:71:27:4a:ec:8e:50:
         69:ff:83:47:fc:52:73:03:3e:c9:50:4e:6e:13:90:5e:75:5e:
         5f:e8:22:e5:d8:77:6b:7f:bf:94:67:43:66:7a:43:93:c5:56:
         b3:28:8f:93:9b:6b:e1:ee:73:57:22:f6:df:96:62:5b:8f:a0:
         3c:3f:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:27:26 2026 by rpki-client