Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a16420e-1806-3224-927d-04703e1a22d5.roa
File:                     9a16420e-1806-3224-927d-04703e1a22d5.roa (raw, json)
Hash identifier:          eWX1gg44w3CtPFVNIB/hjcSimDT+lZky0y31CfruqZM=
Subject key identifier:   F1:26:71:8C:D8:9F:69:E3:93:7E:79:6C:26:02:12:34:7A:5D:63:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9CCFE17E904CAAF5EC600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a16420e-1806-3224-927d-04703e1a22d5.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33651
IP address blocks:        2001:559:c0aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:cc:fe:17:e9:04:ca:af:5e:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=7ec9b6ce-3c4d-42fb-a829-7025c2db8218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:5f:54:8f:4d:82:1e:3a:8c:78:e2:9a:dd:
                    c8:9b:59:14:c8:f3:d4:af:da:cf:aa:2e:45:d5:58:
                    da:d9:47:42:7a:9f:6b:48:46:84:db:30:a4:d3:6b:
                    89:17:5a:d3:2a:7c:98:e4:74:28:10:61:e7:1f:df:
                    38:bb:0e:77:20:60:b9:9a:83:7a:dd:93:37:3e:01:
                    5b:bc:60:66:34:67:05:56:6a:e1:62:00:1d:76:83:
                    a3:a7:8f:3b:3d:19:56:3e:3d:5b:99:d7:78:54:30:
                    36:99:17:f4:eb:27:02:de:a4:96:1f:d5:02:ba:70:
                    8c:27:60:db:b8:19:f0:a6:97:14:43:5f:31:cd:1b:
                    18:3b:cc:6e:43:7c:3d:bf:59:71:30:df:a0:5b:76:
                    b6:11:fa:1b:9c:ef:16:fb:4f:57:6e:36:77:8d:ec:
                    5b:66:8e:b0:d0:0f:55:3b:a6:2b:5a:96:ef:fd:5d:
                    46:5e:3d:47:03:89:07:61:13:cf:6d:a8:14:48:cc:
                    96:41:ce:9b:06:7c:7b:30:3f:d7:bd:3e:4e:57:ac:
                    11:2d:cd:f2:af:1f:bd:49:83:c3:f2:0b:09:11:3b:
                    15:9f:1e:f4:32:29:ee:ab:2a:7f:59:b0:81:e0:47:
                    c8:43:10:0c:d4:48:e6:2e:8d:d6:56:53:83:b6:f9:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:26:71:8C:D8:9F:69:E3:93:7E:79:6C:26:02:12:34:7A:5D:63:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a16420e-1806-3224-927d-04703e1a22d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c0aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:fd:7d:79:40:eb:41:3f:96:85:1c:1f:ec:4a:df:f5:88:
         52:69:05:ad:74:cd:b7:ee:52:72:c9:80:b1:19:2b:5f:88:5d:
         0b:c6:1b:67:fa:d6:d9:f7:62:3b:86:97:79:54:90:01:3e:50:
         3c:97:4a:93:ae:ad:58:97:96:4e:05:47:0d:6f:fc:68:ac:51:
         ee:84:04:cc:b6:1b:a2:32:af:94:67:f8:98:2f:21:0b:b3:a8:
         41:5d:bd:b3:05:d4:26:19:da:d4:0c:b6:38:a8:ef:cc:89:a7:
         0a:99:0c:01:cc:9a:96:1e:a7:c3:a1:54:32:3b:e7:49:b4:a7:
         31:be:3e:41:31:25:01:ff:69:de:0d:b8:8b:c3:a8:e5:37:19:
         05:0f:c7:3b:65:46:59:e5:df:cf:60:25:34:36:c8:a7:e2:d8:
         f6:5f:34:86:13:db:51:52:af:0f:57:87:d9:d2:6a:7c:5b:27:
         9d:24:d5:46:cb:f9:21:2d:6a:bc:9e:2f:d7:97:25:9f:cb:63:
         6a:98:e5:44:d4:c7:31:4d:43:56:35:76:7c:b5:13:e4:91:0c:
         cd:cb:54:c8:f3:38:d3:96:29:e8:91:39:f9:21:d0:df:96:44:
         01:e5:32:c1:e1:4d:a4:4d:23:2b:6a:a4:21:d2:63:6d:c4:bc:
         74:92:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:03:02 2026 by rpki-client