Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6520799-8a1a-3b90-86e2-7bbd3ffc77cc.roa
File:                     a6520799-8a1a-3b90-86e2-7bbd3ffc77cc.roa (raw, json)
Hash identifier:          c7EbrGJVvynaSq0XS/oibEUNnSNC+E4bPgrYCw8vYOQ=
Subject key identifier:   82:50:0C:F3:2E:74:91:98:EC:4F:DD:84:98:DF:98:75:DC:57:45:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE9C231EFD745DC97829800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6520799-8a1a-3b90-86e2-7bbd3ffc77cc.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33651
IP address blocks:        2001:559:f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:c2:31:ef:d7:45:dc:97:82:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=685ebdb8-9cd2-4da1-be72-0c2c584db2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:ee:f9:d9:fe:0c:71:f4:22:dc:6f:ee:b5:
                    9d:78:3c:68:35:a6:e5:e4:77:e5:c9:46:89:d3:0e:
                    26:bb:58:08:08:2d:c3:bb:1f:fe:e9:43:2a:63:13:
                    6a:3c:39:38:97:6c:76:c6:f7:24:10:f4:91:3a:50:
                    2d:ba:1c:f4:88:05:8a:4e:38:67:cb:7a:c0:ca:0a:
                    f9:07:9e:bf:84:4a:0b:b3:20:9b:46:49:d6:e2:c7:
                    b8:39:fe:dc:bb:71:13:f1:83:2f:a5:f6:e5:00:86:
                    b0:e2:59:2e:16:38:a1:64:de:a0:2b:7d:38:91:29:
                    46:ce:1d:c3:79:5b:5f:a3:38:f6:1f:5b:fe:86:6e:
                    83:47:d7:6f:d6:75:3d:ce:ad:d3:46:4e:68:71:ba:
                    dc:c4:86:f2:ed:02:b1:43:bb:54:41:fd:60:39:b9:
                    70:cf:ee:91:1b:23:8c:39:21:12:88:67:4b:2c:74:
                    c3:4d:89:79:1d:82:c1:fa:6e:86:35:83:0c:cb:ab:
                    47:c8:3e:c5:d1:85:2a:25:d1:d4:71:5a:31:fb:3d:
                    f5:79:57:eb:98:01:91:9c:5c:31:c0:d9:88:da:14:
                    da:bc:08:9c:95:9b:9c:69:5a:cc:48:c3:f7:f5:c1:
                    9a:9a:93:92:1f:21:bc:2d:e2:6b:7c:d1:9c:9a:53:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:50:0C:F3:2E:74:91:98:EC:4F:DD:84:98:DF:98:75:DC:57:45:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6520799-8a1a-3b90-86e2-7bbd3ffc77cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:dc:82:c4:df:b9:02:ec:a5:9b:c7:f7:e1:5d:7c:ad:b8:25:
         3a:88:00:78:2a:3c:55:fa:8e:75:a2:6b:52:8d:b6:26:ec:99:
         6c:37:10:2a:c0:f9:30:93:c7:71:cc:06:fc:5f:0d:32:2f:f1:
         6e:c7:28:d9:ea:75:30:be:b8:5d:45:37:54:24:d9:ac:b0:88:
         f3:b2:de:d2:d2:22:8b:43:f0:69:85:00:d6:fa:76:15:ae:e4:
         0c:1a:a2:c8:06:7a:0d:72:37:35:d5:c6:12:5b:88:2b:dd:4f:
         a5:91:12:6c:55:56:72:96:4b:e8:d1:58:51:5a:7c:50:45:e6:
         bf:28:7a:03:1e:ce:96:37:f5:0b:ea:eb:a0:6c:ec:92:01:4c:
         a2:b4:87:29:38:90:e5:cf:a4:2b:3f:32:36:27:3c:aa:67:96:
         a3:b2:25:22:45:5d:68:7c:f6:da:fa:26:f1:cf:8e:ad:3d:4f:
         34:e8:d7:39:29:c6:49:fd:9f:0f:e9:4c:b6:76:cf:63:e6:b4:
         8e:b8:54:4a:72:44:68:cd:d4:3c:d5:6d:02:7c:c1:8e:3f:73:
         cb:ec:1f:5d:b4:05:ed:7c:8e:46:3f:14:b8:4f:18:2a:c9:49:
         a7:d7:c8:16:cd:83:45:f8:1a:33:30:b2:30:98:3a:41:27:2c:
         97:78:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:45 2026 by rpki-client