Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6652d71d-bf16-3d62-9313-c7b00016b2c5.roa
File:                     6652d71d-bf16-3d62-9313-c7b00016b2c5.roa (raw, json)
Hash identifier:          Qz3scmElW8gYVS1eHCatOqT75sspfzCB0V5bHyPJTrw=
Subject key identifier:   41:82:CA:6B:9F:CC:76:4B:79:E5:10:F9:2A:1E:8B:66:B9:FB:EF:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA5A3282D0503ADB642280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6652d71d-bf16-3d62-9313-c7b00016b2c5.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33287
IP address blocks:        2001:559:82b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:5a:32:82:d0:50:3a:db:64:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=9af1c1a5-11d9-41a7-86d3-4942b491f705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:12:01:ab:24:32:fb:ee:7a:05:b6:0d:ec:02:
                    63:32:41:30:e1:96:2c:c0:2e:b9:15:5f:af:64:dd:
                    82:57:cc:e0:9d:b5:37:34:f7:fd:f6:52:1d:0c:aa:
                    47:b9:39:5b:ea:3f:84:c3:01:b6:9b:7d:6d:21:db:
                    b1:f9:32:2c:66:f4:bd:93:93:95:0a:65:84:0a:5c:
                    2d:66:bf:c2:b8:1d:98:bb:0f:9b:9e:88:3f:fb:65:
                    7c:e8:cf:0b:b0:21:ac:84:56:e5:5c:52:6c:7a:3d:
                    0e:98:3c:be:d4:5b:18:0c:e7:ee:78:fd:88:cc:83:
                    be:77:49:f5:75:b3:f4:43:a1:15:7f:3c:cc:80:26:
                    f7:05:40:57:15:a0:3c:78:59:5d:e2:f0:20:23:61:
                    b4:42:6e:43:f3:b2:26:28:09:30:4c:6f:80:51:6e:
                    a3:d0:52:bb:69:3c:64:69:a7:5f:fc:e6:4e:70:09:
                    1c:85:b4:5f:cb:28:93:fb:aa:78:06:dc:4c:8e:f3:
                    c6:d7:40:73:7f:19:5e:d8:ad:94:72:a6:25:2f:c3:
                    3b:7f:41:ed:2b:a8:5d:0a:b6:46:91:2f:62:55:bd:
                    c1:47:0e:6e:03:05:2b:1e:88:e6:9c:5d:73:ec:20:
                    57:ed:e0:e1:93:50:b6:38:68:4c:23:a4:c4:fc:27:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:82:CA:6B:9F:CC:76:4B:79:E5:10:F9:2A:1E:8B:66:B9:FB:EF:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6652d71d-bf16-3d62-9313-c7b00016b2c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:82b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:eb:3d:ca:96:83:c3:10:0d:a3:3a:6e:a2:fd:51:18:0c:ad:
         17:92:e2:21:73:6d:62:f0:b7:6e:4f:5c:c4:1c:08:ed:6e:52:
         ed:35:0c:de:51:28:3d:81:1b:fc:45:78:11:b4:31:a6:8c:8a:
         ec:93:f9:dc:fd:d7:77:07:9f:e1:2e:d0:2c:70:87:0c:88:26:
         70:2e:49:af:5e:42:00:d4:d6:8d:af:f8:9d:22:f3:ca:1d:bb:
         11:32:da:4e:c6:0d:53:e2:cf:fc:4a:9f:0a:02:b2:7a:1e:cb:
         c2:77:b5:91:8d:ad:40:09:40:e7:27:bc:ea:33:6a:8b:93:ee:
         5d:6b:f1:13:76:b6:fe:5e:c0:a4:0a:6c:00:59:fd:f1:bb:23:
         0c:6f:93:be:4a:af:87:7e:c3:cf:54:01:7a:90:cc:7d:51:67:
         25:99:be:2c:66:88:12:a7:e3:94:18:b8:2d:be:d1:95:1a:8b:
         7e:88:9a:fc:18:e2:fd:dc:af:62:42:df:ec:75:cc:b4:e9:51:
         68:b6:e9:89:19:af:36:23:79:8d:fc:9c:7b:41:04:13:25:18:
         a3:ef:10:2a:e5:66:78:94:24:3c:c2:14:86:72:df:09:98:64:
         07:71:90:23:42:bd:c3:f4:cf:a5:74:c4:ef:1c:ef:f5:49:ff:
         06:db:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:13 2026 by rpki-client