Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b1c4004-8ddd-3764-8cbc-ec692ff898f2.roa
File:                     9b1c4004-8ddd-3764-8cbc-ec692ff898f2.roa (raw, json)
Hash identifier:          lxmbszKdtmfkR1EMA7z3P8V5jI13xFKqtKw+bN3lWdw=
Subject key identifier:   21:FA:F9:5F:CC:DF:F9:2F:15:FE:72:45:37:43:0C:06:35:A6:0A:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9E258A710A2E192F26400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b1c4004-8ddd-3764-8cbc-ec692ff898f2.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33662
IP address blocks:        2001:559:c2d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:e2:58:a7:10:a2:e1:92:f2:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=ad37fa6c-51ad-4ffb-aefa-2689c1697b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:07:dd:be:c2:06:90:29:27:02:51:3e:34:
                    8d:97:73:34:9a:4b:84:17:27:c1:0d:24:da:02:6d:
                    2c:23:3b:71:3a:28:c5:93:ae:a4:17:55:b6:21:48:
                    9a:93:9d:70:45:21:15:a2:bf:58:d0:12:fc:77:d7:
                    91:c7:1a:f2:60:93:a7:2f:65:99:9b:bf:46:af:10:
                    d8:eb:ee:49:fa:1d:c0:18:39:63:dc:a8:33:91:e4:
                    90:52:e0:a4:70:02:9e:e3:fc:34:20:5c:d7:9e:88:
                    bc:83:c1:ec:31:4a:dd:aa:4b:92:73:50:76:61:3b:
                    cb:5a:4d:0c:4e:fb:eb:5e:c6:f0:79:e2:b8:48:a5:
                    08:c0:6b:0e:7b:25:6a:99:b7:30:ab:65:bb:02:9c:
                    00:eb:5e:c1:41:f8:bb:c0:88:8e:29:21:ec:f1:30:
                    6f:f2:4b:70:54:68:1e:cb:4d:aa:39:09:7a:0f:22:
                    7c:a1:fe:93:49:56:2d:b6:02:bc:ef:00:46:54:42:
                    9f:7b:0e:20:6c:30:be:3f:e9:56:5b:a2:e4:d1:b2:
                    e4:dd:3b:8c:3e:1b:08:fa:b8:42:60:13:a0:81:29:
                    45:da:60:d4:54:bb:28:e2:8a:f7:73:0b:69:cf:ce:
                    66:86:92:ec:a1:22:db:c6:28:0b:f6:09:38:a6:3b:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FA:F9:5F:CC:DF:F9:2F:15:FE:72:45:37:43:0C:06:35:A6:0A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b1c4004-8ddd-3764-8cbc-ec692ff898f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c2d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:b2:51:f5:9d:62:0c:95:7b:6a:ff:eb:ca:7d:10:d5:33:88:
         d8:79:91:6b:a8:d2:45:c2:d6:13:68:32:0b:81:c2:83:96:bb:
         76:12:cd:3e:4c:ee:da:08:6b:69:eb:1a:97:18:eb:da:7a:c5:
         c6:a7:b2:59:ce:4a:2b:fa:24:87:ff:37:b4:88:56:04:81:2b:
         d1:a6:ab:8c:a2:d5:eb:a4:3c:85:e3:a6:0c:28:dc:ea:ab:39:
         10:69:19:56:87:f1:04:0d:4a:42:79:32:9f:11:8f:77:31:dd:
         0f:0a:38:a8:d6:99:93:07:b9:34:15:a9:14:65:68:84:4c:3d:
         bb:63:f6:a7:84:f3:5a:9d:1e:ea:5e:98:66:6a:ed:fd:a2:70:
         ad:b1:f6:4d:17:2e:56:c9:23:97:36:e7:40:dd:9e:4b:20:76:
         1d:e0:6f:c2:72:11:cf:98:a8:b1:31:b8:96:ee:e2:52:f4:48:
         38:9e:12:a1:4d:21:5a:e8:63:f0:69:f0:47:c7:3b:a4:59:a7:
         f8:fe:a4:c1:4b:42:c6:f0:cf:0b:6a:a8:dc:66:0f:b0:21:4c:
         ef:d8:6f:e6:b6:c3:a0:35:fa:df:20:0c:69:d2:52:81:d9:4f:
         f9:be:78:73:6a:56:13:24:0b:68:6e:2c:3f:f7:c4:37:54:98:
         f6:6a:1b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:52:55 2026 by rpki-client