Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8d80f5e-b0ed-3f39-b2d3-35f0fc9db962.roa
File:                     d8d80f5e-b0ed-3f39-b2d3-35f0fc9db962.roa (raw, json)
Hash identifier:          QE3OlNq3Po6vumViqSc9bZJMKWmkfbtx2NmopaE90is=
Subject key identifier:   BA:89:02:F5:E2:96:38:DF:D9:2A:12:50:8B:C1:99:C4:FE:E9:D8:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86B6781BCD80ED3F4E1180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8d80f5e-b0ed-3f39-b2d3-35f0fc9db962.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33657
IP address blocks:        2001:559:db::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:b6:78:1b:cd:80:ed:3f:4e:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=033ef815-a482-49c7-ae78-af6f0abc2f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:88:3b:f3:94:ff:ac:71:8b:80:cf:43:2e:
                    73:d9:24:0d:ec:6c:a7:b6:3a:9b:56:dd:6b:a0:31:
                    22:38:cf:24:d5:a7:80:f6:ec:54:eb:52:da:2f:ee:
                    21:78:51:f9:34:f5:6e:f5:f8:2a:7b:db:ef:22:e0:
                    05:0d:2a:cc:0e:8f:38:e6:ec:c3:81:fc:25:d4:4a:
                    f1:a9:fe:9b:54:bd:dc:14:3d:8d:cd:1a:fd:9c:7f:
                    5c:6c:0e:f4:e7:43:a4:ad:0c:bd:cb:79:0d:32:0b:
                    28:f6:5d:7f:df:b9:c0:53:25:41:84:93:44:eb:6d:
                    b6:ab:92:37:dd:0d:63:bd:d6:d7:b5:89:84:93:ee:
                    d7:7b:21:cc:f9:52:05:2c:82:d7:97:2a:ea:28:87:
                    65:1d:37:dd:f9:b2:90:ba:4e:96:ed:94:80:d7:b5:
                    01:45:cb:f7:f4:f6:b6:dc:29:00:30:e0:42:1c:01:
                    b6:18:ac:31:13:ef:71:63:44:e2:4e:b2:64:cb:69:
                    ea:4e:9c:e9:a8:16:a6:dc:4c:9e:1f:cd:48:5e:38:
                    f2:33:ba:7e:7b:cc:7d:27:03:bf:ab:f8:33:38:58:
                    0e:ab:bb:24:d8:a4:dd:66:ae:37:44:a0:84:5a:36:
                    9a:3f:88:cc:f2:88:5b:68:77:db:4d:6f:2b:fb:60:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:89:02:F5:E2:96:38:DF:D9:2A:12:50:8B:C1:99:C4:FE:E9:D8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8d80f5e-b0ed-3f39-b2d3-35f0fc9db962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:78:80:31:a7:54:17:3c:da:60:46:5a:d8:c1:31:5c:84:57:
         3c:b1:13:63:23:b6:a6:cb:77:b3:15:78:38:8e:6c:92:9f:9b:
         94:37:f6:67:c4:27:ba:5d:bb:00:e8:f7:bb:49:ce:bd:57:62:
         84:b6:07:d3:91:67:ec:bd:fb:5a:0f:a6:ae:ae:b9:44:eb:4c:
         f6:e6:26:98:c7:d6:e3:7f:1d:73:15:1c:dc:f8:20:8e:16:00:
         ff:b3:b5:db:32:c3:0a:5b:cf:e5:23:05:09:b0:2d:de:ad:25:
         04:ea:b6:b3:cb:26:e2:66:a0:7a:ea:ad:f3:81:f4:9b:3e:67:
         c9:16:3c:aa:69:96:2a:0d:8b:3f:01:c9:f5:d3:5d:bb:83:b1:
         fd:84:54:f8:88:01:35:2b:df:cb:21:b5:48:13:47:83:96:e2:
         36:19:4c:74:f4:88:fb:a7:34:0f:6d:dd:9b:78:53:45:9b:5d:
         9b:c1:81:a6:2f:cb:dc:6f:a1:46:a0:93:9f:71:bc:01:34:44:
         f0:d8:eb:05:f0:c0:2e:6e:6c:1c:96:f2:6c:a1:cc:27:56:b2:
         ae:de:22:80:e7:1a:af:7f:7f:5d:8d:b8:73:22:3b:05:3d:2e:
         b8:48:70:0e:44:86:fa:d3:f6:df:02:94:0f:c9:7f:25:af:0d:
         9f:fc:5f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:08:20 2026 by rpki-client