Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d902cf49-74ab-3494-b375-291b886c245e.roa
File:                     d902cf49-74ab-3494-b375-291b886c245e.roa (raw, json)
Hash identifier:          hdF43cWowL8zTX8zD2F9ymdQLnC83k06LebrxBayXdk=
Subject key identifier:   E1:12:55:3D:DC:19:58:AE:C9:FB:D2:C6:53:BA:E9:23:84:FA:1E:C5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86097FAAEB8590B894BBA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d902cf49-74ab-3494-b375-291b886c245e.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     7016
IP address blocks:        2001:559:84f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:09:7f:aa:eb:85:90:b8:94:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=eeb53f1f-878d-4d4e-b1d6-921180a87778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:64:ae:1d:0b:d3:ad:9a:60:d2:44:94:5e:
                    7d:24:0e:21:61:33:02:b0:45:a0:32:d4:03:56:5b:
                    a9:f7:84:a7:d4:02:4c:65:68:5b:07:1b:be:4b:c0:
                    59:f7:4f:3a:a9:88:2b:92:99:6e:c7:92:07:70:f3:
                    df:05:56:3f:96:57:d8:7c:bd:91:46:97:31:5e:cb:
                    1c:71:44:7a:83:9e:65:e6:23:14:44:5b:27:d8:6e:
                    27:d7:27:7d:ec:23:dd:76:0a:bd:90:4d:c7:40:cf:
                    f4:8d:17:be:3e:97:cb:57:fd:d5:51:a3:c5:04:4c:
                    e1:70:9e:2c:6a:1a:87:f7:aa:dd:0d:27:82:28:6b:
                    23:42:4b:90:bb:15:a7:f7:85:f0:13:9e:c6:1c:d8:
                    1e:97:e4:ea:fb:a6:da:03:f8:e7:4a:60:c2:7d:3f:
                    ac:0f:ee:dc:95:dd:cf:a5:ee:0c:38:c2:24:d0:5e:
                    41:bc:94:23:c6:ad:42:9a:d2:57:33:5d:43:cf:dd:
                    ce:6d:46:63:19:d7:3c:d7:42:02:55:07:96:8c:d9:
                    6f:44:ee:6f:43:7a:38:13:9a:45:4c:be:4a:62:7d:
                    5b:0c:cb:31:e2:1a:e9:c7:66:b4:fd:ae:cd:99:8d:
                    2e:c4:06:22:39:7e:23:2a:45:9d:01:c1:83:b6:bd:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:12:55:3D:DC:19:58:AE:C9:FB:D2:C6:53:BA:E9:23:84:FA:1E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d902cf49-74ab-3494-b375-291b886c245e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:84f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e1:ed:68:e0:c2:7c:29:80:bf:30:a2:4e:37:d4:67:d8:f1:
         1d:70:4a:16:1a:ff:35:42:81:0f:05:4a:84:e1:31:b2:fa:2f:
         8e:fa:14:02:e5:02:16:27:1a:83:12:d6:8d:d1:63:c3:8c:4c:
         2f:6a:76:7b:1a:c9:71:fc:25:ec:cb:b9:90:4a:7e:22:58:dd:
         72:89:82:32:6d:4a:ee:f0:05:9a:a6:bb:2a:35:2e:ec:ee:59:
         ef:b1:0c:f1:e8:d0:b0:0f:85:ca:0a:7d:a1:35:9f:af:83:31:
         b6:ec:86:c2:23:a3:a7:be:57:2b:ec:cc:1a:31:1e:2f:de:56:
         48:02:1d:3e:09:5f:f4:21:d5:61:bd:51:57:d5:ca:61:d5:da:
         11:90:3a:5f:c9:31:e5:98:cc:f9:e5:7b:dc:16:23:d6:da:c7:
         19:25:a8:c7:e2:e9:e4:75:49:40:cc:bd:39:49:a7:a4:4b:f1:
         d1:e1:5e:1c:63:1f:59:41:21:eb:c5:60:92:bf:4f:bf:42:92:
         fa:f4:b4:20:c3:20:cb:44:51:3a:02:9c:cf:ef:c7:19:ee:7a:
         9e:db:f8:31:89:da:55:f1:72:e8:eb:12:be:94:2e:d9:8c:28:
         73:6d:86:3a:05:e4:b7:88:6b:19:5a:e4:82:61:f2:11:e5:97:
         e1:21:78:67
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3ehgl/quuFkLiUu6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
ZWViNTNmMWYtODc4ZC00ZDRlLWIxZDYtOTIxMTgwYTg3Nzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Nkrh0L062aYNJElF59JA4hYTMCsEWgMtQD
Vlup94Sn1AJMZWhbBxu+S8BZ9086qYgrkplux5IHcPPfBVY/llfYfL2RRpcxXssc
cUR6g55l5iMURFsn2G4n1yd97CPddgq9kE3HQM/0jRe+PpfLV/3VUaPFBEzhcJ4s
ahqH96rdDSeCKGsjQkuQuxWn94XwE57GHNgel+Tq+6baA/jnSmDCfT+sD+7cld3P
pe4MOMIk0F5BvJQjxq1CmtJXM11Dz93ObUZjGdc810ICVQeWjNlvRO5vQ3o4E5pF
TL5KYn1bDMsx4hrpx2a0/a7NmY0uxAYiOX4jKkWdAcGDtr2TGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOESVT3cGViuyfvSxlO66SOE+h7FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDkwMmNmNDktNzRhYi0z
NDk0LWIzNzUtMjkxYjg4NmMyNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYTw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC7h7WjgwnwpgL8wok431GfY8R1wShYa/zVCgQ8FSoThMbL6L476
FALlAhYnGoMS1o3RY8OMTC9qdnsayXH8JezLuZBKfiJY3XKJgjJtSu7wBZqmuyo1
LuzuWe+xDPHo0LAPhcoKfaE1n6+DMbbshsIjo6e+VyvszBoxHi/eVkgCHT4JX/Qh
1WG9UVfVymHV2hGQOl/JMeWYzPnle9wWI9baxxklqMfi6eR1SUDMvTlJp6RL8dHh
XhxjH1lBIevFYJK/T79Ckvr0tCDDIMtEUToCnM/vxxnuep7b+DGJ2lXxcujrEr6U
LtmMKHNthjoF5LeIaxla5IJh8hHll+EheGc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:25:23 2026 by rpki-client