Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8549872e-abdb-3a82-8767-3346a04baa72.roa
File:                     8549872e-abdb-3a82-8767-3346a04baa72.roa (raw, json)
Hash identifier:          iuUdz9X7ADnqNRMrt7NqQ0F9nIvgRUnXUFUAEsJ3n04=
Subject key identifier:   62:F4:10:E3:22:DE:26:8C:63:0F:CE:FA:1C:3C:20:30:F9:97:04:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78A14704E3E2CA10C724200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8549872e-abdb-3a82-8767-3346a04baa72.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7015
IP address blocks:        2001:559:81eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8a:14:70:4e:3e:2c:a1:0c:72:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b81c259e-51bf-4f98-a977-219f2a31e9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:b7:68:8d:ad:0d:da:5a:68:5f:c6:c5:31:
                    4b:af:80:44:2c:48:12:fc:99:cf:52:e1:78:c6:90:
                    1a:48:6a:ba:d3:68:79:c8:ca:4a:aa:fa:68:30:79:
                    6e:c4:a0:7b:88:2d:af:15:9e:e8:da:32:0e:0a:d7:
                    4c:60:83:c3:a5:ee:46:03:ae:81:a2:e5:78:8f:0a:
                    34:ab:a1:e9:85:7c:a6:03:d0:0e:c2:e6:4f:52:12:
                    c8:13:f3:74:3b:b2:82:9b:45:64:10:2a:f1:63:58:
                    cc:03:e1:0e:91:c8:2f:52:89:c4:5a:34:59:43:c7:
                    a4:75:bc:3c:3a:c4:ab:b7:28:53:0f:c7:fb:ae:27:
                    cd:68:62:ab:32:2a:d2:87:1c:a4:2c:d9:69:df:63:
                    f5:09:59:18:63:72:a3:2b:50:ca:f0:ab:10:37:29:
                    87:07:0b:64:2f:84:5d:18:d0:70:2c:f8:b4:64:29:
                    ac:16:31:da:07:6c:03:a6:24:37:a5:ef:8a:4c:99:
                    60:24:f1:7e:7c:2b:b4:a6:0d:28:24:38:a2:82:81:
                    df:f9:83:7e:66:48:5b:c3:99:ca:07:0f:d6:be:df:
                    14:62:06:58:36:ba:2b:09:07:43:70:53:5d:45:b7:
                    1f:86:45:e2:c9:f2:e9:58:53:af:69:84:27:36:f4:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:10:E3:22:DE:26:8C:63:0F:CE:FA:1C:3C:20:30:F9:97:04:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8549872e-abdb-3a82-8767-3346a04baa72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:81eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:71:a9:8e:76:68:0c:5a:c6:3b:fc:f9:ea:83:eb:84:aa:16:
         49:d9:71:05:36:ef:74:49:e0:f4:8f:fd:fe:cd:28:ad:23:c9:
         5b:78:f6:1b:f5:fd:1b:6b:32:e0:55:dd:66:66:75:2b:f9:c4:
         7c:9b:8f:df:d3:75:1e:a1:74:e3:24:fe:ac:e7:14:44:c6:18:
         90:a2:ad:a8:6a:14:d0:a5:97:75:c6:df:9b:d3:a2:d5:b7:ff:
         85:74:ed:f0:c8:87:85:49:10:74:8f:58:5e:8a:73:5a:ed:9b:
         be:31:4e:a9:20:4a:d2:a1:23:5f:68:0f:a5:11:b0:a2:e1:a2:
         90:71:6c:20:b4:b9:3a:53:d9:e6:36:1c:76:65:1c:9d:91:2f:
         0a:ad:3e:f5:ca:ce:88:21:fb:f9:da:70:a2:52:e8:dd:ec:68:
         13:6f:6b:f2:b8:6f:b5:31:15:d5:ac:50:38:5c:c4:ad:69:1c:
         3f:b6:be:59:9d:83:15:00:39:8a:ee:2b:e6:cc:93:33:11:69:
         73:9f:ac:d6:49:1b:0b:e1:3a:9d:79:4d:9c:1a:d3:02:c5:ee:
         51:81:63:4d:0c:2e:77:56:15:a6:ec:4d:c3:3e:3f:e7:f5:a6:
         28:09:38:62:bd:19:2b:a7:fd:13:01:97:e9:33:b6:0d:bd:4b:
         26:f0:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:55 2026 by rpki-client