Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1f3f558-898d-30d9-afa9-54c2773d5516.roa
File:                     d1f3f558-898d-30d9-afa9-54c2773d5516.roa (raw, json)
Hash identifier:          v7d0pAYweoTCtWwVxe+bBSHn1HffUB5cmPBclZoNfLQ=
Subject key identifier:   6A:53:82:04:38:8C:61:F3:F5:89:B0:F5:2E:A5:00:BB:77:88:83:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497A3B8F38B79E55384D4F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1f3f558-898d-30d9-afa9-54c2773d5516.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33657
IP address blocks:        2001:559:c142::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7a:3b:8f:38:b7:9e:55:38:4d:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9ea8d090-b3f3-4f35-9e34-f5d7e2cfd910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:95:9e:72:df:6e:79:77:69:96:64:67:aa:
                    75:73:c2:59:de:2d:f5:51:ef:28:35:28:1e:38:fc:
                    66:03:bc:54:3d:24:5b:e8:11:e9:2c:74:47:6f:de:
                    9c:ad:c6:52:1c:ce:36:5b:0d:82:a7:48:62:ad:1a:
                    6f:79:62:29:f5:0d:8a:e4:94:13:d1:09:18:a9:16:
                    24:11:e1:41:6e:2b:99:95:85:c1:45:53:53:ab:4a:
                    7d:88:76:d8:05:49:3e:8a:b9:69:73:51:d5:01:5c:
                    00:53:5e:02:d5:43:67:67:ae:ea:fa:1a:a6:76:4d:
                    91:04:4e:ae:ef:66:12:8f:21:5c:25:48:8e:1e:83:
                    04:1f:f9:06:e3:08:59:c8:01:89:4b:45:33:66:13:
                    7c:fc:e0:d7:20:a6:b3:a8:72:95:12:22:7a:74:75:
                    ea:a7:af:eb:4f:ca:ff:8c:62:a8:b3:a7:40:cf:95:
                    b2:d1:06:89:d4:d3:45:56:40:e7:aa:9c:44:c0:6c:
                    9d:a0:f9:e4:ac:99:62:64:3b:1e:93:46:56:b0:49:
                    cb:f0:9b:e8:55:28:48:6d:af:7a:48:7a:1b:af:f2:
                    ef:d7:ce:b4:3c:d1:b2:bd:29:a5:c6:69:62:b8:9c:
                    e9:cc:8d:ff:6b:90:f1:0e:fc:1d:19:ff:8b:a1:e8:
                    6e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:82:04:38:8C:61:F3:F5:89:B0:F5:2E:A5:00:BB:77:88:83:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1f3f558-898d-30d9-afa9-54c2773d5516.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c142::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:f2:9e:cb:0a:ef:fe:91:ad:66:60:51:74:82:20:ce:92:de:
         56:5a:1e:6f:6d:1b:c5:fb:44:3e:63:59:03:a3:1a:1b:b5:57:
         5a:74:ef:50:d1:60:ca:b8:8c:2c:66:81:33:61:f9:d7:d7:a9:
         3e:ce:11:4f:43:90:a3:1b:dd:b7:70:49:3d:cf:9e:4b:94:cb:
         21:5e:47:04:2e:19:38:bd:dd:2c:79:3c:64:dd:45:49:f7:8a:
         98:e7:18:62:d2:9d:5c:15:42:ee:71:91:f0:7d:5a:8d:5d:1e:
         5c:20:98:08:3b:c2:c5:f3:e7:f1:61:48:52:25:d8:85:16:ef:
         bc:fa:f1:08:8d:03:b1:9f:89:0f:a0:f6:5f:84:f1:78:5c:16:
         09:7a:c0:e2:73:0a:72:f3:66:a1:5e:ee:e0:19:97:77:32:73:
         44:de:a1:5f:d5:00:17:35:1d:cb:99:35:6d:c2:c8:01:e6:20:
         fe:1c:0b:e8:45:4f:c4:d3:88:eb:62:f1:9a:8a:df:9e:5c:68:
         c6:2d:3c:b6:33:36:30:9f:5c:96:99:ec:b9:f2:82:e5:24:e4:
         ca:3a:cb:93:ff:aa:ad:5d:b2:96:f1:92:54:ba:e1:c4:73:f4:
         12:6c:4f:d6:64:6d:53:0a:9b:ba:3b:64:14:97:c0:ed:87:58:
         18:d6:f9:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JejuPOLeeVThNTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWVhOGQwOTAtYjNmMy00ZjM1LTllMzQtZjVkN2UyY2ZkOTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPqVnnLfbnl3aZZkZ6p1c8JZ3i31Ue8oNSge
OPxmA7xUPSRb6BHpLHRHb96crcZSHM42Ww2Cp0hirRpveWIp9Q2K5JQT0QkYqRYk
EeFBbiuZlYXBRVNTq0p9iHbYBUk+irlpc1HVAVwAU14C1UNnZ67q+hqmdk2RBE6u
72YSjyFcJUiOHoMEH/kG4whZyAGJS0UzZhN8/ODXIKazqHKVEiJ6dHXqp6/rT8r/
jGKos6dAz5Wy0QaJ1NNFVkDnqpxEwGydoPnkrJliZDsek0ZWsEnL8JvoVShIba96
SHobr/Lv1860PNGyvSmlxmliuJzpzI3/a5DxDvwdGf+LoehugQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGpTggQ4jGHz9Ymw9S6lALt3iIODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFmM2Y1NTgtODk4ZC0z
MGQ5LWFmYTktNTRjMjc3M2Q1NTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcFC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMfynssK7/6RrWZgUXSCIM6S3lZaHm9tG8X7RD5jWQOjGhu1V1p0
71DRYMq4jCxmgTNh+dfXqT7OEU9DkKMb3bdwST3PnkuUyyFeRwQuGTi93Sx5PGTd
RUn3ipjnGGLSnVwVQu5xkfB9Wo1dHlwgmAg7wsXz5/FhSFIl2IUW77z68QiNA7Gf
iQ+g9l+E8XhcFgl6wOJzCnLzZqFe7uAZl3cyc0TeoV/VABc1HcuZNW3CyAHmIP4c
C+hFT8TTiOti8ZqK355caMYtPLYzNjCfXJaZ7LnyguUk5Mo6y5P/qq1dspbxklS6
4cRz9BJsT9ZkbVMKm7o7ZBSXwO2HWBjW+TM=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:05:59 2026 by rpki-client