Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f80feff-cc69-349a-b4f0-d9590dba393f.roa
File:                     6f80feff-cc69-349a-b4f0-d9590dba393f.roa (raw, json)
Hash identifier:          NfEXyHRVUX+mXc9553RXWrKp6P2yk/mww2G08qXnOsI=
Subject key identifier:   C9:CD:8C:E3:2C:69:B1:65:F4:20:1D:3B:1E:4B:57:FE:6A:EE:2E:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87D62512BFF5E123BC2958
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f80feff-cc69-349a-b4f0-d9590dba393f.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33657
IP address blocks:        2001:559:7e6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:d6:25:12:bf:f5:e1:23:bc:29:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=954707df-38e6-4ab4-b8f9-76412a8770dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:f4:cf:c7:9f:0c:3c:4f:25:20:db:55:e1:
                    86:45:50:f0:b2:56:f1:9e:20:cc:55:a8:00:08:32:
                    da:64:da:13:f3:4e:90:ed:a2:92:b3:ff:c0:5c:56:
                    b4:4d:72:4c:97:85:b5:d6:a1:73:d1:00:1f:76:48:
                    af:3b:20:1e:d2:f4:5f:7f:6b:d3:ca:31:be:7b:2e:
                    f9:fa:be:02:d8:c0:91:45:01:81:95:ee:84:b4:c4:
                    28:e7:58:a8:37:7a:7c:ca:8a:ea:ca:5f:40:8f:31:
                    22:5a:bf:5e:d8:5b:f2:bb:5e:c2:80:87:72:e0:b6:
                    27:48:b1:86:b9:10:cd:de:ea:db:31:4f:25:c3:49:
                    fc:b8:a7:04:46:ca:10:01:d8:aa:77:20:10:06:f0:
                    89:c7:8b:6e:26:70:9c:d3:46:98:13:a2:0a:7c:ea:
                    ea:9f:21:c8:21:d3:ce:8f:ce:70:2f:ff:49:fe:d3:
                    c3:bf:58:a4:45:73:05:85:54:9c:0c:f0:20:03:6b:
                    d4:ed:87:4c:09:db:d9:98:09:7a:51:42:c2:68:da:
                    68:f1:75:1c:b7:82:37:88:9a:1a:2f:aa:50:24:a5:
                    64:0c:1c:85:1f:0b:91:d6:a9:78:46:93:5f:f4:2d:
                    9c:a2:4f:ae:56:98:5b:4f:e3:2f:86:4f:e2:af:3a:
                    f2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CD:8C:E3:2C:69:B1:65:F4:20:1D:3B:1E:4B:57:FE:6A:EE:2E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f80feff-cc69-349a-b4f0-d9590dba393f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:7e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:36:b3:66:fe:c4:85:f4:93:f3:24:05:56:4f:fb:f2:ae:ae:
         8b:ec:b6:df:36:ff:49:18:83:80:26:c7:ba:eb:7d:95:8c:c8:
         f8:7f:24:1f:6f:50:c3:f9:95:c3:14:fe:12:06:4c:3d:87:d6:
         c6:f3:c5:d3:07:6d:a1:35:ba:5a:c4:fc:12:a4:79:74:c9:71:
         0f:af:a7:ff:90:e0:7c:f7:d6:7c:b5:4a:c7:c3:45:47:08:43:
         9e:07:09:ad:3a:b0:c8:41:73:d4:87:aa:7a:db:06:3f:2a:3d:
         41:7e:09:89:5f:48:12:21:e7:e5:da:a2:c4:c7:98:d8:59:38:
         52:e2:05:43:1d:a3:13:40:52:d4:2a:bd:cd:45:a1:ae:4f:f5:
         52:92:3c:82:10:19:e8:cc:94:b2:0d:f0:e6:e9:7f:48:b3:dc:
         c9:f5:f1:61:0a:1d:1f:1e:f0:53:d6:79:a6:a2:0d:14:b5:12:
         6e:41:b5:fc:8c:2a:5a:40:a8:52:0c:56:8f:4f:73:f0:b5:40:
         d7:a6:f5:ac:f4:d3:20:53:ce:24:e0:dd:bb:79:e0:d7:0a:c5:
         b4:2c:4d:1a:c9:71:c9:de:de:73:9a:4d:38:8d:c3:ae:8a:fc:
         90:87:22:92:60:f0:74:00:09:72:5f:95:b0:b8:92:c8:bb:10:
         eb:93:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:59:18 2026 by rpki-client