Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa
File:                     7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa (raw, json)
Hash identifier:          3lGjGX4y1tcc1hoaJSMGk85kDBHPa8QbBdL2jXm4b24=
Subject key identifier:   DA:33:FA:E8:32:63:03:96:A8:58:A1:B5:48:A2:64:0B:94:65:E7:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86597340E640F2B6E40380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     7015
IP address blocks:        2001:559:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:59:73:40:e6:40:f2:b6:e4:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=bef68e7f-4ca7-4e4b-805f-4ad96b664862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:db:79:f5:11:a0:a3:34:11:6e:4a:9b:8d:
                    3c:bb:16:4f:42:0e:52:96:44:da:c1:38:b1:e7:15:
                    a3:f5:a0:f3:68:fa:e4:bd:89:11:d4:a2:b5:2c:2c:
                    d9:83:da:fd:26:87:bd:3a:c8:aa:d8:0e:15:07:f6:
                    a6:d9:0c:23:22:12:28:1d:c1:03:a0:3c:35:e2:ac:
                    47:2c:37:f9:27:26:03:89:5e:94:53:8c:2b:f7:c6:
                    11:0c:51:4a:67:6d:e8:ce:fb:eb:c2:49:2e:c9:49:
                    33:fe:56:f3:31:6e:f2:3d:ab:85:49:68:e6:11:73:
                    1a:5b:90:3c:20:94:ae:a9:26:08:84:ab:44:08:60:
                    7f:b1:b4:6f:41:ee:3e:77:74:a3:c3:0d:aa:25:f0:
                    48:ee:fb:4d:96:17:39:be:8c:dc:a3:07:90:b3:65:
                    47:d3:a2:4b:54:8a:ac:16:05:66:80:e4:89:a0:19:
                    83:de:7c:5b:ba:f0:41:23:f2:e7:49:d3:4c:ec:54:
                    bd:1e:93:b0:50:c2:1e:10:fe:ff:fd:a2:b3:27:6e:
                    b8:bd:8c:6d:f0:0b:08:fd:e2:95:33:97:ca:dd:01:
                    7d:c8:e5:e0:89:0e:c1:01:7f:b4:c6:ea:68:de:30:
                    29:d7:95:c8:f7:6c:d7:bb:32:5f:ca:e6:44:42:1a:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:33:FA:E8:32:63:03:96:A8:58:A1:B5:48:A2:64:0B:94:65:E7:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:98:8a:3c:a1:ef:96:98:f8:02:fc:96:3a:b6:bd:33:80:d7:
         86:a3:aa:0c:e9:ff:f1:71:2f:9b:d8:93:09:23:47:62:66:74:
         ec:78:93:b4:af:55:84:e6:2e:3f:1a:54:ec:bc:8b:b1:9a:3b:
         67:9f:1d:67:88:d6:62:19:37:90:e6:1d:f2:86:45:55:41:e6:
         fc:46:92:97:c7:0d:bc:1d:1f:e5:9f:1a:0e:30:69:a6:01:4a:
         6b:04:a0:60:fb:c7:cd:d2:c6:2e:3c:ec:98:e2:d9:85:48:7d:
         7a:ab:ff:19:29:8e:52:aa:da:c4:db:59:8b:eb:c3:c5:4a:91:
         55:08:42:77:7c:71:84:12:32:05:86:a2:76:8d:ff:6f:a4:dc:
         ea:e3:1a:dc:bc:e5:96:3b:6f:0e:74:0c:ce:d3:67:25:54:7f:
         71:40:89:3f:79:e3:8a:81:ef:fd:ee:ec:66:cd:a6:63:37:cc:
         01:e1:04:ac:3f:8a:49:d5:fe:af:f4:ba:39:24:c6:e8:ad:37:
         40:47:a6:c1:1f:92:12:b0:94:29:c2:32:1b:53:39:1e:83:c5:
         fc:3e:e2:01:b1:d0:bc:b7:38:b3:ce:06:ac:59:75:c3:a2:a1:
         f7:08:41:11:b9:ab:92:ac:f4:00:fb:98:fb:55:c5:a2:11:02:
         d4:cd:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:03:42 2026 by rpki-client