Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84cab967-63a4-32a1-a4c3-d82fdefae9bc.roa
File:                     84cab967-63a4-32a1-a4c3-d82fdefae9bc.roa (raw, json)
Hash identifier:          uNrqWbuib6rUmHMsb/K/cLquYyfNUnBsPXMTloCBEEU=
Subject key identifier:   D0:F8:37:D8:18:5C:AE:F3:F4:ED:7A:D4:9D:77:B5:CD:CE:A6:1A:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9EFF297EDFBB7324B7300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84cab967-63a4-32a1-a4c3-d82fdefae9bc.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33668
IP address blocks:        2001:559:7e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:ef:f2:97:ed:fb:b7:32:4b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=2ddc2faa-b7fc-4302-b1fb-2d179aa057e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:bb:c9:60:ce:6d:af:97:17:22:ff:4e:96:
                    21:38:6a:8b:15:b0:d6:cb:2d:ee:0d:25:cc:34:bb:
                    e9:94:9a:09:3c:1a:a5:55:59:99:6f:23:2b:69:ba:
                    18:af:5e:ae:30:f1:44:72:cf:9b:40:05:84:c5:0b:
                    c8:7f:03:7e:c4:e4:37:f4:4f:cd:2d:62:32:2e:e4:
                    0f:fa:80:da:3b:3a:f4:88:f0:c9:49:2a:c5:ec:c6:
                    2e:03:e7:cc:40:e7:10:7c:92:3b:13:a3:35:03:c6:
                    28:a3:21:03:23:7d:24:8a:71:d5:9c:0e:3e:a5:87:
                    1f:67:b6:cf:d8:29:2a:ad:94:8c:23:77:a5:61:24:
                    7a:bb:58:d8:45:43:57:04:56:d0:7e:ad:1d:ff:45:
                    53:e2:2b:b0:e2:15:63:cd:11:c1:09:ec:52:88:3b:
                    82:b0:f4:ea:ca:67:5c:2e:0a:9b:00:20:af:da:21:
                    81:de:6f:57:28:61:7b:1b:ab:7c:6d:59:bd:6b:65:
                    9d:b9:f8:94:ea:21:59:cd:9c:4d:d5:3d:d4:af:67:
                    09:cb:68:3c:59:81:87:8a:24:33:22:e8:e9:eb:38:
                    75:bb:96:f3:2b:4c:95:80:57:a3:b3:8d:ed:3b:47:
                    17:44:7f:ab:39:cf:5e:77:5b:1e:51:34:0f:fc:cf:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F8:37:D8:18:5C:AE:F3:F4:ED:7A:D4:9D:77:B5:CD:CE:A6:1A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84cab967-63a4-32a1-a4c3-d82fdefae9bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:7e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:0d:89:68:bb:77:6a:ea:d3:b7:4f:71:d9:25:45:3a:d1:ea:
         7d:a5:77:93:ba:fe:44:ac:7a:54:f5:36:9c:5e:aa:ed:3e:5d:
         af:2e:6a:0d:94:3f:ff:df:20:24:59:44:7b:37:b4:62:46:44:
         38:c9:ed:4b:4e:f2:88:4a:d2:5f:a2:24:b8:08:21:9c:a6:47:
         98:cc:f9:2d:3d:6d:ee:d8:e2:e1:5c:18:fd:49:6a:c5:67:73:
         1f:6b:a4:5d:ef:c6:b2:8b:92:12:00:6b:e9:94:9a:3e:39:95:
         5e:60:5e:e6:33:77:0a:42:c6:74:bf:59:fc:3f:79:5e:43:7d:
         28:2a:6d:f6:66:b4:61:de:33:f5:28:64:6f:3b:03:03:08:8d:
         08:06:f8:7b:f6:56:49:55:a1:47:19:f1:24:bf:b4:c7:15:06:
         00:ff:5b:50:93:dd:53:f2:8b:0d:43:a6:65:94:ce:df:a8:3b:
         16:e9:0a:56:1d:8e:03:b9:c5:dc:a5:39:07:4a:ea:b2:59:16:
         17:06:df:9e:18:48:f3:fa:f0:c7:c6:70:ab:63:9f:dd:13:54:
         b4:66:1f:2b:80:4c:03:39:14:f4:8d:7d:55:48:4d:8e:5d:bd:
         62:82:99:3c:66:af:4b:d7:26:40:b6:43:b8:fb:67:92:82:58:
         44:21:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:19 2026 by rpki-client