Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2c05c6-201c-3df2-8986-481afccbcdb4.roa
File:                     ae2c05c6-201c-3df2-8986-481afccbcdb4.roa (raw, json)
Hash identifier:          zB8GiNs+Te7ChXO1eLcTIZWhLc5PYtGNfiVbRIiGQxE=
Subject key identifier:   FC:FE:A3:20:01:0C:C8:9C:3B:A4:4B:EC:69:4F:0F:95:28:24:9D:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8FFFB20400DCE6EB07440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2c05c6-201c-3df2-8986-481afccbcdb4.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33657
IP address blocks:        2001:559:c140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:ff:fb:20:40:0d:ce:6e:b0:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=46b6dc7a-c700-41cf-aa8c-cf32b599042d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:af:19:0b:17:4d:d4:41:89:99:50:a1:6b:
                    85:81:9f:f6:1b:62:65:d7:ee:a8:af:db:5a:bc:9b:
                    11:b4:d5:4b:23:30:13:9b:6e:1f:d9:e8:d0:92:f4:
                    7e:a9:c2:6b:f7:3c:1a:ce:bd:87:f8:50:48:aa:4d:
                    3d:3a:64:78:2a:cc:97:8d:75:fb:c2:97:95:d3:ab:
                    46:8d:7f:5b:a0:6f:ad:76:cc:fe:c6:53:bc:b3:6c:
                    b3:ea:9d:b4:fd:73:32:cd:f3:3f:81:f3:32:94:2e:
                    0a:d8:c6:62:3d:29:e8:3c:39:b9:10:28:34:12:79:
                    58:df:76:53:ec:d0:e4:58:ab:f4:c4:fd:de:ae:98:
                    83:57:eb:a7:af:83:40:93:aa:cf:cb:e2:73:c5:8f:
                    2f:4c:0a:57:9c:3a:4f:e9:dc:f6:48:e6:d5:15:62:
                    41:ec:e2:87:cc:bb:97:bb:f5:dd:d3:4b:ac:55:47:
                    16:bc:1b:9b:f4:a9:ca:ca:6b:12:23:7d:e6:a6:bb:
                    88:0b:d3:1c:2d:18:03:68:d0:96:c3:b4:10:da:42:
                    85:33:8f:34:4f:b1:f1:38:0f:14:c1:5b:59:96:73:
                    0d:e9:0e:69:1d:16:b0:fe:b9:e1:c8:bd:ed:48:50:
                    e8:fc:65:1f:d8:67:37:ef:2b:d9:4d:f2:a5:c9:36:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FE:A3:20:01:0C:C8:9C:3B:A4:4B:EC:69:4F:0F:95:28:24:9D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2c05c6-201c-3df2-8986-481afccbcdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:78:9e:f0:0e:4a:b9:7a:ab:d1:8c:14:ab:27:d5:fe:16:ba:
         e9:b7:31:10:88:bd:b5:58:a3:de:ef:f4:63:a5:20:6d:03:37:
         73:a1:77:b6:04:e0:c2:96:f7:1c:73:c8:b5:28:8c:7c:fc:96:
         b6:34:71:ea:8b:0a:a2:79:a1:6a:f5:17:7f:3c:25:5f:15:70:
         5a:0c:b1:d7:c4:87:db:3b:e4:dd:2e:bb:e4:37:22:b2:b2:8b:
         6d:54:27:ac:1c:de:f6:a7:2d:02:c3:93:33:d4:05:e5:d0:eb:
         bc:45:d0:e8:d8:2e:df:0a:52:27:39:fa:bb:41:0f:c8:7e:11:
         4b:6e:2d:e6:a6:c7:15:59:0a:9f:10:e8:00:de:28:4b:3f:63:
         a9:24:be:e3:91:b6:53:55:5d:fd:8e:af:ad:cd:d0:4a:1a:76:
         7a:f1:ed:93:7c:45:a7:50:e7:27:3d:86:ed:0a:fe:57:c9:d7:
         e0:94:c0:26:20:73:74:fe:8d:af:48:94:ce:30:bd:6b:24:0c:
         72:b0:b9:db:ab:db:1e:45:35:21:4c:15:c0:8e:8d:85:f5:7f:
         f2:b8:de:b8:b6:71:f6:a3:bf:86:08:50:d5:3a:e7:1a:ae:83:
         a1:86:7f:67:ed:44:26:45:43:bb:28:35:c9:ba:83:d2:4f:95:
         fd:eb:34:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:49:31 2026 by rpki-client