Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a33a874-5399-3fbd-a7f3-c2bc3d7d8794.roa
File:                     5a33a874-5399-3fbd-a7f3-c2bc3d7d8794.roa (raw, json)
Hash identifier:          ep31FcZsWuOc54DXQjQWy8OyTjX/6Vcp+BNmPZqxrOk=
Subject key identifier:   BF:FE:4A:3C:CF:F9:DD:E1:89:3F:1A:B4:F2:3D:36:0C:97:96:97:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE872691DA511894977A2DA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a33a874-5399-3fbd-a7f3-c2bc3d7d8794.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     7016
IP address blocks:        2001:559:84::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:26:91:da:51:18:94:97:7a:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=8bfdc09a-343b-4d8c-b99e-33c8e6bb7c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:04:d4:89:ed:df:d1:15:34:f5:03:26:2b:
                    80:78:5f:20:39:d3:3d:8a:6e:71:0d:a4:d6:69:a7:
                    e8:36:ff:f3:05:8d:50:5e:2a:7b:b5:61:73:83:b2:
                    9a:1e:07:7d:8e:90:9f:33:fc:d8:ee:b9:f1:a2:fb:
                    8d:a4:18:ad:89:b5:c3:c1:89:80:00:79:7b:51:53:
                    65:a4:75:a8:94:8b:75:7d:9b:b7:65:77:26:38:06:
                    a4:79:0f:c4:d6:a8:3f:ba:29:93:00:95:92:39:ad:
                    af:cb:c6:9b:8c:57:19:c7:10:a3:32:14:e5:6f:f4:
                    ed:95:b2:3d:55:0f:56:16:c9:16:77:35:4f:5e:03:
                    3a:7d:d5:74:4c:fb:ae:1b:10:e4:c3:15:8b:72:1d:
                    01:e8:dc:77:90:c1:4b:62:ef:f7:b4:bc:42:79:e9:
                    ff:cc:4d:2d:81:5d:a8:ed:7d:d2:cc:8f:24:1f:2e:
                    47:cc:9a:f6:06:ef:0d:c5:51:88:a2:f7:10:8e:0e:
                    e0:b6:34:b4:2a:35:e4:53:20:ed:a1:fc:20:11:98:
                    22:73:34:2e:fd:54:bd:41:cc:eb:5c:90:fb:c2:18:
                    06:af:93:3e:0a:2e:c0:3a:42:07:d2:81:3c:5c:b4:
                    6a:8d:fb:c5:7e:92:23:ee:5a:64:0f:46:af:78:e2:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FE:4A:3C:CF:F9:DD:E1:89:3F:1A:B4:F2:3D:36:0C:97:96:97:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a33a874-5399-3fbd-a7f3-c2bc3d7d8794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:84::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f3:28:28:d2:95:0d:be:0d:6a:23:63:fb:e5:80:80:c7:1a:
         7a:5a:c0:d3:83:3a:b0:0d:b9:42:eb:1e:4c:c0:63:48:ee:5a:
         07:8b:83:e5:c3:db:ec:4a:14:dc:b2:35:e1:fc:f7:4e:5c:8b:
         63:6d:8c:61:51:e8:da:cd:ae:c3:b4:f7:b4:84:62:0c:30:86:
         86:64:aa:f6:30:e9:ee:57:82:79:b5:9c:17:6e:f8:7c:2c:88:
         08:c9:a2:cc:3f:1c:68:34:58:de:a0:65:b4:81:95:1a:1c:69:
         8c:8d:ca:59:83:58:8c:20:7d:47:fa:6d:fd:9d:5c:09:6e:bf:
         a6:60:7c:5e:fc:e0:05:ec:bc:47:0a:ff:7f:53:64:25:d0:7a:
         f8:aa:7a:9d:f3:15:ad:07:7a:fb:0e:a2:e9:c4:e1:f1:82:4d:
         1c:4e:68:97:1b:eb:bc:82:94:12:68:0c:67:30:e3:f1:51:03:
         88:80:29:e5:35:34:8d:d8:fa:7c:f5:f3:c4:8a:1c:46:ab:3e:
         3e:1d:8c:85:68:90:4f:48:de:7e:94:cd:c8:9a:de:79:b0:10:
         e8:ba:91:ec:a6:d6:1c:e8:80:bd:e6:fa:fc:15:d0:71:20:c4:
         fe:ef:43:91:15:83:9b:8b:ee:d0:e0:bc:cf:09:b6:d6:27:69:
         5e:4c:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:13:34 2026 by rpki-client