Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e876db-a61d-3041-8422-ca113b771106.roa
File:                     a0e876db-a61d-3041-8422-ca113b771106.roa (raw, json)
Hash identifier:          ipjZRgd7RYTfHi+wb7I0EYVq43eu3uCgm7APowcKr/Y=
Subject key identifier:   8D:0E:D7:2E:D3:61:20:1A:93:09:5E:2C:EB:DC:75:B4:F3:D7:15:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE876BE6404513B26D276B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e876db-a61d-3041-8422-ca113b771106.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33662
IP address blocks:        2001:559:153::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:6b:e6:40:45:13:b2:6d:27:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=3feb95e0-446b-4a1a-86b4-5db5129949d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:6e:fa:f2:96:43:68:32:b6:93:2c:53:14:
                    63:32:94:ff:0c:76:66:67:dd:bf:9c:b7:0f:a6:52:
                    d4:67:dc:85:11:6f:1a:ae:31:a7:f1:c7:0b:b5:3f:
                    25:93:34:84:1b:c7:71:8a:f5:a7:8c:07:89:98:58:
                    3b:3b:b0:8c:df:67:32:ec:ac:06:64:b7:83:82:c7:
                    1d:de:cd:1e:38:f0:b9:5f:ec:70:51:ec:2c:d6:ee:
                    eb:9a:41:9a:d7:a0:07:5c:1c:96:65:cd:82:88:d3:
                    93:64:02:27:96:d1:15:c3:79:b4:5a:5d:a4:7b:40:
                    13:c7:80:4a:6f:85:1e:93:f9:09:52:79:64:19:13:
                    3a:c8:4d:24:ff:6e:77:1d:01:9b:4a:14:f9:2d:52:
                    77:fd:d8:66:26:24:13:14:a7:c5:a8:b8:fc:6c:0b:
                    f0:41:fd:d8:84:f4:38:30:4b:de:5a:44:dc:8c:04:
                    f3:bb:b1:56:d4:93:29:cb:10:77:b2:f3:7a:ac:ef:
                    74:6f:08:95:4a:30:de:e7:3a:e2:2b:e3:bd:f4:01:
                    97:bc:5e:9c:8a:e6:9a:52:6a:67:bc:16:e6:ab:cc:
                    2d:12:b4:03:6f:d9:3c:4d:62:71:95:29:5e:a3:44:
                    59:57:54:e4:f2:cb:03:a3:d6:6b:39:48:67:91:c1:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0E:D7:2E:D3:61:20:1A:93:09:5E:2C:EB:DC:75:B4:F3:D7:15:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e876db-a61d-3041-8422-ca113b771106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:153::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:90:71:2a:b1:74:b0:98:63:29:98:50:78:f8:15:95:fe:74:
         c5:7a:b8:eb:6d:44:38:1d:3b:f0:2d:c3:29:2e:52:47:e3:1c:
         7f:58:ea:b0:1e:de:fa:97:9b:49:a5:6a:c0:c8:4f:8b:f4:de:
         6e:df:66:0d:8a:8e:a9:f4:1e:6c:b7:5c:ef:f6:25:34:40:25:
         92:14:f7:99:55:66:de:f2:d5:dc:c2:35:27:51:66:ea:dc:68:
         66:43:56:55:a4:cb:c1:93:6a:3e:b0:6a:d2:be:ef:c4:a8:66:
         46:b5:c2:3c:35:12:25:34:59:a5:8c:ba:c3:ab:76:fb:cc:51:
         b6:d1:04:75:24:df:d4:01:f3:6c:11:5e:c4:d5:ee:65:c1:8d:
         82:d6:f6:bd:4d:2b:5d:6b:1d:cc:84:8c:90:a8:04:9e:fa:0e:
         4b:e3:c5:04:fe:83:18:15:c5:e3:93:14:23:e8:f7:ca:91:7c:
         28:6b:98:ae:06:89:15:ab:05:66:ca:e9:d3:ff:11:94:81:c0:
         83:15:d2:75:49:1b:b6:74:55:78:9f:12:87:76:db:7c:c1:ce:
         ea:4e:ee:e0:9d:45:5b:2b:4e:36:14:2e:1a:f8:a8:cc:76:f8:
         81:52:49:37:9c:0e:28:6d:ed:ba:44:69:38:ab:74:25:21:ed:
         c4:e2:72:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:10:06 2026 by rpki-client