Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dc11db-8161-3bdf-89a6-97762b1f98e1.roa
File:                     40dc11db-8161-3bdf-89a6-97762b1f98e1.roa (raw, json)
Hash identifier:          YOm7bXyNqMawu5epopFoVwISw6A0UKlNacAAHGChxvw=
Subject key identifier:   25:16:4C:62:8D:1A:41:C6:C7:D2:33:0F:9C:60:5C:FB:D1:E4:1B:A5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87274AB3B6FDE56B35997C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dc11db-8161-3bdf-89a6-97762b1f98e1.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     7016
IP address blocks:        2001:559:244::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:27:4a:b3:b6:fd:e5:6b:35:99:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=50268022-07d7-4cc8-b982-3d4cb7e3d63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:de:22:7f:69:a8:ef:6f:b6:f1:de:cc:fc:
                    0a:a9:58:b9:92:f1:75:b6:ce:95:70:f4:14:d6:7b:
                    49:7d:3d:9c:39:52:e7:af:19:ec:af:e5:4b:2f:8c:
                    2b:50:e6:aa:71:fc:cc:db:b5:cb:d6:f1:34:61:ff:
                    d1:49:bf:39:c2:7a:1c:a2:c2:7a:48:3f:b9:60:25:
                    38:12:a2:47:3a:51:a3:8c:e2:7b:fc:85:3a:22:5c:
                    6b:75:54:1f:1e:bf:8a:9e:cb:07:ec:d4:e5:7b:ad:
                    a5:1c:c3:a8:42:94:c5:d2:72:89:7c:09:dc:a9:8f:
                    d9:ba:52:d0:49:79:ff:43:49:bd:09:2c:0d:71:79:
                    f1:39:f3:6a:bf:74:b6:b9:d2:e2:66:56:34:c3:f1:
                    15:b5:e5:2f:c1:7d:71:37:e1:3d:7f:24:7d:9f:af:
                    46:48:6e:ac:f0:42:f5:9f:10:28:41:11:57:8c:94:
                    cc:46:a5:b3:d7:3b:33:0a:3c:86:e4:cd:1a:0f:59:
                    2c:98:39:cb:d4:8d:3d:fb:48:34:9d:f9:aa:f3:c8:
                    8f:fb:93:9a:c4:8c:37:e6:84:49:c0:a1:6e:ab:cf:
                    c0:a9:ec:3d:f8:4c:9d:41:92:b2:20:a2:e1:5b:03:
                    2c:5f:71:13:ef:2a:0c:b2:8a:16:44:e1:68:c6:df:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:16:4C:62:8D:1A:41:C6:C7:D2:33:0F:9C:60:5C:FB:D1:E4:1B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dc11db-8161-3bdf-89a6-97762b1f98e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:244::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:c2:2f:86:df:22:27:aa:15:5f:64:a8:4b:c1:5a:87:b9:a5:
         bc:d3:fb:8d:eb:44:3a:07:0c:16:ec:58:ef:99:5b:64:f9:3e:
         56:34:2e:a3:34:13:94:25:93:59:8f:8d:70:e0:c1:bf:9d:47:
         c6:03:d8:58:2a:56:7a:be:fa:1c:b4:22:bb:f4:f6:ed:45:b4:
         74:be:cf:47:b3:20:0d:58:6e:ec:cd:6c:4c:35:06:4f:24:7b:
         86:6b:2e:c1:3d:d7:28:32:11:4c:0e:ee:67:bc:a6:b7:fb:2b:
         30:72:d1:cc:35:9b:54:0d:44:ac:76:88:16:e4:03:f4:50:3f:
         03:fa:15:2c:5f:bc:e2:3d:39:8c:f3:aa:13:02:41:bd:81:c7:
         12:fe:8b:ca:7e:c4:ba:9a:1c:cd:14:c4:6b:dc:0d:a2:9a:06:
         5e:df:cf:ee:c5:a3:9a:d9:d5:8b:67:7c:6b:fc:84:ae:f4:d2:
         68:81:42:41:40:8e:fd:34:0a:7c:10:4a:6d:26:0d:b4:51:c5:
         45:a7:9e:bd:48:ba:ef:3e:0f:5a:f0:91:7d:b7:eb:fb:f6:ff:
         6d:ff:4e:ed:af:ab:83:94:1e:11:77:d9:c5:a3:1b:1e:53:a7:
         ed:86:6f:96:82:eb:fa:a9:65:69:73:61:a5:67:b8:e2:4f:b8:
         a1:78:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:48:58 2026 by rpki-client