Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f2a33ed-e0d3-3397-bcdd-d4bbb57819f8.roa
File:                     7f2a33ed-e0d3-3397-bcdd-d4bbb57819f8.roa (raw, json)
Hash identifier:          kGJxBnt4QK3rO3xVKCRqoL5k+gaVDR6CU6fz9152jzI=
Subject key identifier:   F0:76:03:A4:0F:E7:CA:64:80:F8:5E:37:44:9A:51:21:BC:09:4F:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78D96216ACB983B8D90FCC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f2a33ed-e0d3-3397-bcdd-d4bbb57819f8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7015
IP address blocks:        2001:559:8304::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8d:96:21:6a:cb:98:3b:8d:90:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8d53edc1-e61b-4c9c-9224-05cd4e56faae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:f0:1b:a0:f1:49:07:21:58:a2:99:ab:f6:
                    f5:6a:a0:60:7c:08:eb:19:f2:0f:38:31:c4:11:40:
                    aa:a8:08:e9:cf:c1:6e:f3:b1:4f:87:f7:80:c6:d4:
                    5d:01:b7:b3:86:0a:82:fe:42:3a:d3:5b:dc:78:bf:
                    d5:79:2b:af:2e:7d:57:06:c4:d4:fe:1d:9e:f9:16:
                    1a:8c:19:ee:06:fd:6d:5a:25:8b:e4:2f:78:cd:65:
                    cf:4b:ae:69:a8:e0:dc:f6:8b:a2:13:0b:05:8e:3e:
                    18:13:5a:9a:8d:15:34:67:62:52:1f:4b:e4:04:37:
                    90:a3:d3:5c:7f:82:67:20:b8:09:ae:52:4f:43:6b:
                    24:69:e5:69:c1:75:b2:a6:00:c6:5f:80:e9:76:7b:
                    3a:3b:fc:5d:54:d5:92:f0:2f:a7:bd:4d:c1:11:7a:
                    14:b9:25:4f:97:f8:bb:bc:30:9d:5a:5d:55:ba:65:
                    98:02:b9:db:d9:d4:cb:5b:72:87:7b:e9:ce:04:d0:
                    70:22:31:28:f4:c9:73:44:0b:d1:cd:4c:69:8c:0e:
                    6b:35:e2:c4:31:20:11:ba:61:ec:2e:5b:aa:d8:7f:
                    5b:01:44:03:2e:5d:e3:aa:43:a8:72:aa:de:15:fd:
                    fa:8b:5c:32:60:b0:1b:4c:b8:c1:94:94:79:3c:e4:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:76:03:A4:0F:E7:CA:64:80:F8:5E:37:44:9A:51:21:BC:09:4F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f2a33ed-e0d3-3397-bcdd-d4bbb57819f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8304::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c9:48:96:6a:6a:0d:fd:eb:a1:c1:34:9b:b1:f1:9b:1d:6b:
         13:9f:2b:f5:c7:73:b0:0b:80:bd:62:df:7d:6b:de:04:2e:ff:
         39:8a:ea:84:de:eb:cd:3e:c3:38:88:a0:d2:ca:ff:89:99:70:
         3b:28:64:8a:ca:a2:70:55:1d:96:40:62:3c:bf:5b:02:4d:f6:
         41:db:14:e5:eb:c9:a2:9f:f0:29:63:f7:76:38:01:d8:40:60:
         5f:14:09:31:7f:19:fd:0d:3e:b8:93:92:23:a1:f3:78:ba:cd:
         9c:92:ab:ea:1b:d6:20:b1:ff:3a:f1:cb:b5:db:06:d7:57:62:
         e6:cf:08:cc:0a:67:32:4f:70:09:c3:68:02:03:f9:5e:88:a1:
         2b:1f:d2:1c:30:55:01:06:9f:0f:4c:32:e8:09:78:7e:ab:d9:
         72:10:36:66:60:72:b2:82:c8:af:52:9c:51:94:57:ab:8d:74:
         0c:34:5d:1d:60:26:3d:5b:76:3a:17:35:fd:e4:22:10:f1:33:
         5f:49:62:cb:7d:26:f8:cc:a1:03:ef:ff:90:dd:4b:0b:2b:68:
         be:3c:8e:80:8b:96:08:c5:ea:bb:05:8f:0a:91:7c:d7:eb:8b:
         5a:f9:db:b5:8b:13:68:de:44:b1:02:66:f8:0f:2f:74:f8:f8:
         2f:62:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:33 2026 by rpki-client