Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad39f5e1-7b7a-33df-856d-696f8c15ca09.roa
File:                     ad39f5e1-7b7a-33df-856d-696f8c15ca09.roa (raw, json)
Hash identifier:          XwURCTJSPCB8aSdsaNPaIznBSNOi6SqjcOZWd34OALM=
Subject key identifier:   66:75:41:40:6A:2A:47:59:E7:5C:DB:19:EA:8F:3B:65:5E:3E:E0:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497923E35A979DD55D732FA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad39f5e1-7b7a-33df-856d-696f8c15ca09.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7015
IP address blocks:        2001:559:851b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:79:23:e3:5a:97:9d:d5:5d:73:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ef8e4230-f69c-4bf3-b52d-5ebfeb7376a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:9e:30:99:de:ce:50:3b:9c:eb:c0:e4:e5:
                    0f:c9:8a:72:8a:1d:99:23:2e:53:59:7f:64:d0:ce:
                    8f:38:b4:6e:da:11:58:41:02:df:60:14:01:66:48:
                    fc:a3:83:d4:03:fe:e0:df:b9:03:ca:92:25:5e:49:
                    fe:f5:57:48:f5:60:a3:75:10:cd:6c:d1:71:fe:8f:
                    0e:27:50:14:81:eb:eb:26:8d:91:bb:f7:67:ae:fe:
                    04:82:88:15:e2:2c:9c:41:0b:80:89:ee:3f:49:53:
                    b8:5b:3f:af:65:4e:bc:4d:5e:28:7a:85:3d:ed:c4:
                    39:1c:b0:99:34:fa:af:c7:71:12:76:ca:b6:05:5b:
                    39:31:9b:f5:0f:f7:9a:08:51:e8:ea:b1:93:df:d8:
                    24:ee:84:ca:a9:97:c5:24:1a:15:1d:d3:ae:c6:2a:
                    1c:0c:dd:4f:af:28:50:67:96:92:79:54:d3:dd:79:
                    e0:54:f0:8b:a3:f1:63:fc:6a:40:b1:e0:7c:70:29:
                    3c:e2:ac:dc:c5:f9:61:3c:f2:36:06:50:6e:a5:6b:
                    22:30:07:ec:4f:62:0a:f6:3d:07:00:65:5f:1a:4a:
                    7e:53:1c:a0:ab:07:bf:55:76:55:13:a6:71:7c:28:
                    79:17:f0:4a:22:14:79:d9:fe:04:f3:d8:f3:9d:c6:
                    c0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:75:41:40:6A:2A:47:59:E7:5C:DB:19:EA:8F:3B:65:5E:3E:E0:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad39f5e1-7b7a-33df-856d-696f8c15ca09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:851b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4e:d8:4f:b7:8a:3a:a4:f4:f0:51:c1:1a:6b:6b:6a:27:d1:
         7b:8d:08:46:1e:25:0e:ce:53:aa:3d:ac:91:af:9a:f5:91:34:
         76:dc:c8:75:1b:45:f7:8c:f7:b0:05:18:8b:fd:b0:8f:ed:a5:
         c8:2d:75:4f:fd:99:2a:25:fa:9d:89:be:14:c0:6d:70:46:30:
         61:c0:99:86:37:47:d6:a7:0f:f3:48:6b:54:85:5a:39:5c:a1:
         c8:2a:8b:49:89:65:ef:7f:45:ba:56:57:99:58:a6:24:ee:e8:
         fe:09:f3:81:b4:d2:7b:09:6a:81:2b:f1:60:5c:52:e1:ea:a0:
         a6:be:5a:89:52:8f:9b:3a:aa:bf:e3:c0:79:15:45:22:29:99:
         89:15:ce:d3:c4:61:80:98:11:a2:98:ac:28:7d:d0:f7:aa:7b:
         a8:e9:ff:86:f0:02:59:9f:d0:ea:1b:c5:d9:3c:91:59:2d:d5:
         e8:ca:8d:da:f6:06:a1:ea:55:e5:f8:5e:dc:7e:e5:1a:9e:4b:
         f4:c2:b8:16:3d:99:91:a5:b0:c9:c6:60:8e:c0:46:a0:3d:fa:
         0f:ea:e2:69:ae:5d:ef:38:69:bc:79:35:96:e6:cf:6b:7f:50:
         20:be:a3:43:33:1a:63:b9:f1:9b:37:17:53:3e:f3:9e:18:23:
         83:b9:ab:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:22:06 2026 by rpki-client