Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c72fda-d88f-3622-bb11-d27971cad063.roa
File:                     97c72fda-d88f-3622-bb11-d27971cad063.roa (raw, json)
Hash identifier:          XwHkl1oyn3ofm5GSvExoMzYTsxTbFZYeQDzRHGo8VSg=
Subject key identifier:   57:26:6C:33:1D:80:DF:E9:50:9E:83:D9:41:E4:0C:E7:1F:38:49:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA96C208661AA90FAEFCC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c72fda-d88f-3622-bb11-d27971cad063.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     20381
IP address blocks:        2001:559:c466::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:96:c2:08:66:1a:a9:0f:ae:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=19a502a1-f453-4b59-8708-02d2e76e651d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:ec:18:a6:84:35:1c:85:f7:5d:1f:7e:35:
                    7b:54:c6:e8:3b:b1:fb:f3:a2:65:5d:fe:4b:99:a5:
                    78:9e:27:84:c9:5c:84:52:1d:fc:2c:7a:1a:1b:38:
                    58:fd:70:df:7e:b8:d3:f2:b0:1a:8e:92:d8:cd:20:
                    d7:5e:d2:5a:c9:e5:e1:d4:ab:55:7e:9f:07:56:9d:
                    7b:f6:07:73:b0:13:02:c8:30:33:29:d3:1d:43:76:
                    7f:36:6a:94:c3:36:d4:93:a2:8a:72:a2:5a:52:19:
                    ea:c8:0d:f4:f0:5b:4f:14:ee:d8:54:e2:f3:ce:fa:
                    00:60:7c:5a:ef:16:d7:e8:f2:1a:1b:b3:d4:1f:3f:
                    f4:80:2f:86:33:a2:55:39:74:31:82:7d:8d:ec:b1:
                    a8:34:0e:d5:5e:fa:19:20:a3:b2:31:dc:b0:e1:a7:
                    3d:61:d7:1f:73:f0:d1:90:9f:25:e2:57:a5:4c:8a:
                    c9:00:a5:49:8c:c8:94:8a:7f:c9:cd:a2:15:b3:ae:
                    43:6c:e8:48:e6:b8:d9:0e:fd:60:1c:66:5b:2d:55:
                    da:1d:cf:a2:f9:da:6b:25:d1:ec:e2:4f:3f:60:44:
                    34:76:bf:da:5e:d0:0b:ad:11:ae:f9:9d:6f:02:99:
                    60:fc:cd:04:23:cd:cd:c1:af:dd:f8:38:19:19:89:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:26:6C:33:1D:80:DF:E9:50:9E:83:D9:41:E4:0C:E7:1F:38:49:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97c72fda-d88f-3622-bb11-d27971cad063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c466::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:be:13:a5:f5:43:56:cb:c3:79:8a:96:79:3f:eb:fe:a8:
         34:9d:75:8c:b4:6e:9c:14:be:57:dc:be:68:6e:80:1d:00:26:
         0f:1a:23:60:03:08:a8:eb:c8:90:70:4a:00:b4:88:3a:6a:09:
         82:ec:ad:df:c7:92:09:ba:82:b5:a5:70:11:6e:83:b7:8a:b6:
         1d:62:d8:76:47:f0:93:40:d5:0a:e8:c8:9a:bf:70:b6:7e:aa:
         d0:42:09:da:5a:c1:db:56:27:5d:3e:ca:6b:ec:aa:95:89:3d:
         6f:b7:d1:f0:50:5a:21:2f:9b:9e:18:91:ab:1f:82:64:dc:e0:
         4c:5f:ce:3f:48:1a:ad:45:36:bc:89:87:92:f7:c5:53:72:e2:
         8d:57:80:5c:b1:bb:f0:db:82:e1:7a:cf:c9:5f:fb:e9:60:a1:
         b3:a9:3c:fe:70:bd:97:b3:a6:39:a9:fb:cd:76:e8:96:69:78:
         a1:b8:c8:f7:b9:ee:6f:52:33:24:5e:b7:87:96:c1:a7:bd:6b:
         3c:65:95:cd:e0:21:71:63:be:db:16:a9:35:6b:a5:10:d2:7f:
         76:50:4c:04:08:6f:ea:ac:26:27:f5:d4:48:87:5a:33:7c:b7:
         a5:77:ba:50:de:29:78:25:db:57:73:5c:8f:5d:6e:06:30:62:
         c5:ed:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:54 2026 by rpki-client