Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9423e2-c125-3d75-86fc-1fdcb58802f7.roa
File:                     4b9423e2-c125-3d75-86fc-1fdcb58802f7.roa (raw, json)
Hash identifier:          va7BIOChkz2qZPkoLCS9TX2qyDT6spfK7eBlnZOXX6M=
Subject key identifier:   18:C3:69:F4:C8:48:95:C8:E5:43:A6:F5:15:E8:53:3A:79:4E:0B:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F498275DAEB0CE065512D6E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9423e2-c125-3d75-86fc-1fdcb58802f7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33657
IP address blocks:        2001:559:48e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:82:75:da:eb:0c:e0:65:51:2d:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a768b8e5-e9c1-4185-aa2c-cc50b300cc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:e3:b4:16:93:b1:90:7f:20:82:0f:ea:47:
                    e6:eb:79:a8:1f:d0:5c:d2:e8:d8:9f:97:d5:ed:48:
                    b9:90:8a:27:14:67:48:95:7b:38:7e:b2:63:0c:1c:
                    e5:64:a8:87:23:d3:6a:1a:0c:4d:0f:46:79:1e:e7:
                    a4:54:79:90:b5:c1:ee:b9:81:d4:b7:9f:09:69:04:
                    9a:59:0c:4d:a3:72:3c:28:2a:c5:a6:30:08:8c:1a:
                    1a:f7:3d:7d:e5:e0:ec:8f:5e:5c:e1:9a:22:17:3b:
                    f3:3a:3a:13:3f:ca:b5:19:3e:86:5b:a9:13:a4:f4:
                    f0:7d:b6:c0:82:c5:2d:1f:19:a6:74:8a:bc:26:1b:
                    70:bb:6b:d8:9e:36:b2:c9:f0:fe:68:83:0c:69:19:
                    8e:d0:07:67:72:f9:24:36:6b:83:2f:e7:cd:3f:0f:
                    31:af:f1:76:37:4e:10:2b:0c:3f:ca:a3:bf:ef:73:
                    14:fb:79:f8:8a:ac:03:db:79:4e:4d:7c:6f:cc:fa:
                    1e:e1:e3:e6:0d:cb:7a:40:47:3b:11:26:e9:f1:49:
                    f5:36:5b:69:d2:60:a0:ee:da:b7:51:ff:02:46:82:
                    af:ba:ab:bf:34:f5:cf:7b:37:bc:97:95:1b:50:2f:
                    2f:6f:37:c2:ed:87:93:8b:b4:6f:b6:08:30:18:94:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C3:69:F4:C8:48:95:C8:E5:43:A6:F5:15:E8:53:3A:79:4E:0B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9423e2-c125-3d75-86fc-1fdcb58802f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:48e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:aa:2a:ae:75:ff:74:86:2d:37:91:fb:ed:fd:bf:e1:02:95:
         96:52:7c:ba:10:af:da:13:8a:de:49:c5:85:62:f8:d1:ad:af:
         71:d8:64:6f:37:a0:57:75:3e:eb:68:df:2c:07:28:39:40:49:
         46:d9:5f:16:50:e8:ca:0c:dd:f7:94:d9:e8:86:9d:67:1c:87:
         bc:26:8f:f6:5f:08:7b:5a:72:28:bb:d4:f6:45:e0:f7:d0:07:
         6d:a9:69:fb:d5:7e:29:d8:f2:15:30:2b:8e:6e:26:70:b4:81:
         e5:24:42:cb:d4:05:e5:dc:3a:2c:6f:be:e2:5f:3a:3a:35:03:
         72:6d:fb:0e:64:82:c8:aa:40:9d:a4:d2:77:6f:e0:d2:12:c1:
         ba:8f:e3:c7:2a:07:61:89:de:61:cf:37:3d:f2:47:de:6d:db:
         37:8c:c3:73:dc:e6:d2:da:56:54:27:53:73:bd:f6:97:47:c5:
         92:e9:e7:f8:e5:3a:ba:dd:93:d1:04:1f:26:8d:4e:e9:13:3d:
         27:c6:0a:5e:0b:0a:23:d9:5f:19:0b:83:8a:57:8d:12:dd:6c:
         dc:f3:fc:6b:ab:31:78:b3:60:59:bd:67:bf:cf:97:ae:60:98:
         f0:32:5f:a9:be:5d:6d:47:da:bd:bf:fc:fe:0f:99:90:0e:5d:
         02:2e:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:54:25 2026 by rpki-client