Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/975d625c-e705-38d0-a78b-ec87dfb5457d.roa
File:                     975d625c-e705-38d0-a78b-ec87dfb5457d.roa (raw, json)
Hash identifier:          2ZuLGtThLwDnbOEoe1LqF2lXXV7xysjixtu0JPSQZfw=
Subject key identifier:   8B:B4:5C:50:49:C8:71:D3:62:30:6A:BA:6E:C1:6D:91:7D:D6:54:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8F9ED481F898B63FCF080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/975d625c-e705-38d0-a78b-ec87dfb5457d.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33657
IP address blocks:        2001:559:8045::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:f9:ed:48:1f:89:8b:63:fc:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=3090f969-c7e7-419c-9c64-7dcdaa9b9f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:ec:a5:eb:e9:02:ec:db:d2:66:95:b7:ae:
                    f4:13:8e:c9:e3:c8:8d:9c:e7:d4:f1:fb:9e:d5:c3:
                    be:e7:cf:67:96:47:88:5e:d4:fe:c5:ef:da:2e:e3:
                    71:17:3b:c9:f4:23:4c:c6:e9:5a:9d:81:71:51:55:
                    c0:0c:31:46:ae:8f:00:8a:a4:2d:aa:60:1a:c6:35:
                    ac:90:92:51:ca:27:87:b1:42:2b:30:1e:ef:4f:46:
                    9e:5e:5a:14:50:eb:89:cb:2d:e2:b6:55:42:e3:db:
                    d2:7c:1c:5b:60:bf:38:fe:36:15:6d:1f:1e:36:b7:
                    af:2e:1e:e1:6d:af:dd:5f:a1:3e:d7:c0:d0:57:1b:
                    96:7d:8f:01:c8:32:57:10:88:41:50:69:54:3c:d5:
                    1a:1b:ab:6d:d2:0f:14:a0:29:3f:76:11:0b:79:be:
                    ce:67:5e:c1:60:96:cb:ac:c5:28:f6:fc:8d:e8:5e:
                    78:61:28:73:2b:1a:e5:28:e6:12:7f:cc:24:a7:ab:
                    6f:aa:90:ea:2a:9e:a1:80:2a:20:e2:a4:a5:f1:07:
                    49:53:20:35:8d:d3:60:f7:68:f6:88:a6:ca:a4:21:
                    9d:02:37:e6:69:05:97:21:d9:cc:cf:ae:f5:31:91:
                    09:2c:82:6b:e8:e5:2e:af:4a:b4:2e:3e:44:24:72:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B4:5C:50:49:C8:71:D3:62:30:6A:BA:6E:C1:6D:91:7D:D6:54:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/975d625c-e705-38d0-a78b-ec87dfb5457d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8045::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:37:ab:b4:2c:88:27:2a:1d:2c:28:1b:bd:76:3f:d2:c8:54:
         fc:36:4e:17:94:af:a4:a0:08:a8:c0:ec:61:d9:31:0e:a3:e6:
         a0:96:fd:08:ae:64:b4:87:eb:52:85:35:ce:28:15:09:60:c5:
         f9:50:dc:8a:cf:c8:81:4b:69:c7:91:6b:e3:ee:15:dc:3a:71:
         56:71:24:2f:73:f2:3e:ed:d4:49:de:83:0a:06:4c:25:be:85:
         4f:8d:72:e0:4e:a7:09:3f:1e:b5:ed:99:d4:7c:d9:4f:0a:76:
         4e:31:04:04:38:04:0c:f4:a2:67:6d:e8:5f:71:2b:7d:c0:a6:
         f3:11:d4:b0:32:4f:75:f3:fe:1c:0a:d1:d3:6b:55:97:3d:9f:
         71:0d:bc:a3:b3:33:9f:2d:7f:73:f3:3d:5b:30:7d:77:5d:b2:
         66:b6:1e:fe:0a:9b:2c:88:5c:00:14:1b:15:89:2c:c1:37:1b:
         45:5b:3e:33:14:bb:05:77:db:67:f3:ea:13:b5:50:a6:2b:71:
         f2:dd:cc:93:1a:b8:68:24:70:a6:2e:a7:a8:87:44:05:37:45:
         a6:e4:b0:48:4c:30:96:39:e5:9f:47:fd:75:32:39:e5:50:60:
         5e:e5:8e:f8:8c:9b:7a:eb:55:ed:c1:41:5f:36:d7:b9:7b:8e:
         1a:36:73:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:09 2026 by rpki-client