Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7b645c6-3efa-35a3-b92a-d3bc16c89593.roa
File:                     b7b645c6-3efa-35a3-b92a-d3bc16c89593.roa (raw, json)
Hash identifier:          7QbOJHZErzBayN+5NpMz7/YflncAgLgyqMLNuhToeaA=
Subject key identifier:   59:00:70:A9:CC:EF:69:50:74:68:5D:FB:78:4A:6F:0A:22:69:4C:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE86B5D64DFD86AC2808D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7b645c6-3efa-35a3-b92a-d3bc16c89593.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33668
IP address blocks:        2001:559:15c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:6b:5d:64:df:d8:6a:c2:80:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=cd8001d9-147f-44b4-b0f6-4738f8e74c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:19:be:fc:34:27:98:55:96:dc:40:7d:8a:
                    d5:47:72:fa:d7:85:2b:8c:10:65:61:c6:1f:bc:a8:
                    3d:01:e1:c1:71:ca:21:66:ff:a3:02:a4:3d:66:73:
                    42:4e:e1:60:d5:85:ad:46:ed:9a:f4:42:46:c1:cf:
                    8d:d0:67:91:ec:47:9d:13:e5:b6:21:83:95:73:f2:
                    e9:07:3f:1d:e0:2e:e6:4d:fb:77:15:e2:41:cd:d4:
                    95:fa:76:ad:fb:f1:86:1f:00:18:98:1e:c3:13:c5:
                    c6:c6:a8:87:57:10:c3:15:35:b8:92:4c:f7:51:ed:
                    64:0b:1d:b4:f3:e0:97:b9:29:24:ad:dc:c5:ef:34:
                    ac:a6:4b:10:e5:88:64:90:23:63:76:8d:29:b7:d7:
                    3e:69:e3:34:1c:94:f4:09:34:15:c8:35:89:06:c2:
                    c4:ac:b3:36:ed:67:2a:aa:dd:f3:19:4a:66:21:d2:
                    35:11:40:89:ee:3f:65:b7:9d:ff:44:56:fe:d7:08:
                    79:49:b1:f7:be:3a:4b:8a:25:0d:88:8a:61:13:5d:
                    da:89:e4:af:63:af:9f:82:d4:35:26:aa:49:fd:33:
                    08:a7:d2:2f:be:ad:70:54:ea:62:26:18:52:f2:17:
                    f7:ef:4c:a3:a5:4e:75:a7:d0:2b:4c:43:ec:a9:8f:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:00:70:A9:CC:EF:69:50:74:68:5D:FB:78:4A:6F:0A:22:69:4C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7b645c6-3efa-35a3-b92a-d3bc16c89593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:15c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:98:77:4a:7a:39:ec:a3:60:4c:f4:83:49:6d:f0:9a:6a:
         71:63:b5:8b:e4:be:19:d4:eb:f6:98:fc:75:ed:20:cc:80:20:
         8a:6f:db:c8:f7:76:31:1e:22:07:34:ce:4f:0d:fa:bc:6b:85:
         a7:96:28:d5:1e:73:ab:eb:74:b1:4f:3f:40:62:a2:c5:c0:ab:
         ba:33:0a:b3:4a:eb:dd:3a:c2:81:df:fd:65:b0:71:88:1c:66:
         14:c5:2c:75:3e:94:5b:89:df:c4:00:3d:1f:7d:82:84:67:70:
         72:0a:d5:ec:c3:b7:39:4d:78:b3:83:a2:d4:c3:a0:78:7d:84:
         c9:12:8f:51:5c:98:5d:24:e6:50:ba:a8:02:59:87:e4:a4:9a:
         18:e8:64:5f:87:03:89:1c:1d:f9:e7:c0:71:0e:c5:8e:bd:7e:
         eb:20:17:f0:8b:4a:e2:2a:98:17:e1:b3:24:7f:90:cd:b1:01:
         20:62:1b:55:dc:24:fc:27:03:d6:b5:43:10:1f:80:f9:da:9a:
         ee:28:f1:f5:fe:33:0a:28:9e:d5:1b:72:05:17:23:d6:8f:11:
         2a:17:0e:59:8f:81:4d:31:90:cf:ba:31:0e:1d:1b:50:9b:ca:
         bd:21:87:be:d6:04:4c:32:bd:f1:4d:8b:96:e2:0f:ae:7d:21:
         78:b1:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:22 2026 by rpki-client