Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4398989-846d-32f9-b669-2cf9ad9dc38d.roa
File:                     c4398989-846d-32f9-b669-2cf9ad9dc38d.roa (raw, json)
Hash identifier:          x8gIJKX50HvqjJAdTC5xl3rkncphK16A5GdtFoMrxzE=
Subject key identifier:   01:2E:15:4A:6B:3D:C1:CF:87:44:28:8C:80:EB:6C:EE:77:09:25:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDEA88905949491FC7015E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4398989-846d-32f9-b669-2cf9ad9dc38d.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     33659
IP address blocks:        2001:559:40d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:88:90:59:49:49:1f:c7:01:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=26e4d161-041c-4c2b-9a76-53c0a1a19255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:90:44:99:b2:c8:8d:ed:6f:6b:2a:51:69:
                    17:77:74:3b:03:fe:38:0a:13:2c:63:76:58:67:e6:
                    af:6b:bf:1c:78:7e:0d:af:a4:53:bf:77:1e:4e:75:
                    c5:cf:79:83:20:d0:67:c1:29:18:dc:f9:bd:04:99:
                    67:d9:7a:2c:ef:31:f8:94:fd:21:23:9b:93:20:c0:
                    77:dd:8c:93:1d:e8:22:47:2f:13:fb:04:53:1a:a5:
                    5b:0a:37:98:1a:d2:01:10:eb:b9:64:a5:40:b6:3f:
                    86:2a:65:68:30:90:eb:d7:8f:c8:f4:87:41:16:71:
                    db:7f:9c:95:8e:e1:21:cd:28:09:30:c2:62:58:fa:
                    6e:b7:c6:70:fa:f2:6b:44:7e:27:02:7e:4a:68:a9:
                    ed:49:0e:91:14:d2:d8:f6:03:ae:18:ff:c7:a8:88:
                    2c:ff:05:5a:da:8c:1a:d3:6d:32:86:f4:d5:f8:a3:
                    1d:ae:86:aa:60:a2:ae:2e:c2:85:34:bc:52:42:8d:
                    c0:b1:9e:8e:11:ac:33:fd:60:0a:dc:a6:38:dd:04:
                    b1:af:bf:d1:e2:6e:26:2c:78:85:a8:2b:73:a3:8f:
                    84:e3:74:24:8e:88:66:f8:30:9f:46:d2:e2:60:93:
                    8c:5e:45:b7:01:4d:bb:94:23:d4:b3:50:e4:49:b8:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2E:15:4A:6B:3D:C1:CF:87:44:28:8C:80:EB:6C:EE:77:09:25:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4398989-846d-32f9-b669-2cf9ad9dc38d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:40d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:59:05:76:39:e7:c6:31:15:a2:14:89:13:03:a3:44:a0:65:
         cf:89:b3:b2:e1:9b:f3:92:5a:a5:c9:a5:1e:34:dd:8d:09:34:
         53:da:a2:3c:f1:85:18:f2:a5:f2:1d:ad:b8:6e:be:02:69:50:
         9a:cc:1e:f5:8b:4b:f5:8c:c2:d5:18:fd:f6:dd:92:be:9c:1e:
         2e:44:b6:b2:83:5c:5e:7e:28:53:2d:78:69:50:9b:6b:eb:37:
         54:e2:a8:cd:e2:80:b6:7c:55:47:63:ae:df:dc:65:44:7d:37:
         31:3e:c2:b5:07:4b:d5:ce:20:ae:5a:ee:d1:c3:35:c3:1e:3b:
         e4:2e:0c:db:3c:ae:ac:6d:51:ff:2e:1a:e2:1a:da:b9:77:6f:
         a6:f0:24:d7:24:12:d9:da:50:7c:7b:25:30:35:2a:f8:40:ea:
         42:52:0a:83:4a:1c:21:1d:e5:3f:9a:da:a2:3f:48:61:e6:bf:
         73:d1:37:df:d1:33:cd:4e:95:2b:0b:cc:cc:14:d8:e0:14:be:
         f5:c2:de:68:f9:fb:7e:56:26:ee:35:be:61:99:df:8f:af:00:
         80:9e:8a:fa:a2:dc:61:f6:4a:2e:fa:f7:73:a0:47:13:91:22:
         61:e8:f0:49:55:65:11:d8:a2:73:c0:41:bc:fb:fd:34:5a:8f:
         c3:ee:14:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:46:39 2026 by rpki-client