Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de3b678a-46b9-3da8-b909-19b6613072ae.roa
File:                     de3b678a-46b9-3da8-b909-19b6613072ae.roa (raw, json)
Hash identifier:          yOPqyQLWNz45RnbHgTaetXmmK4qclPIQ9c8EGPa8xlI=
Subject key identifier:   CA:5C:5F:03:C9:A0:A9:CA:CF:D1:83:7E:C1:A2:FE:7E:6E:AF:4E:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE87267B9E30258CD7C7E801
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de3b678a-46b9-3da8-b909-19b6613072ae.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     7016
IP address blocks:        2001:559:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:26:7b:9e:30:25:8c:d7:c7:e8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=3350ae7e-09e4-4df6-b48a-5f8c543cdad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2a:0d:f2:ad:35:8e:b6:2e:1d:c0:73:d4:fe:
                    78:36:f2:aa:9b:d2:78:7c:92:46:d4:46:1c:7e:bb:
                    b8:62:f9:aa:1f:f9:b9:18:dd:52:f6:eb:33:8f:61:
                    30:60:d2:7d:d5:43:fd:77:71:39:2f:b7:74:0f:4d:
                    41:f6:a5:72:c7:99:af:40:8a:d7:56:f9:3f:5b:bb:
                    e4:ef:bc:af:f6:1f:31:fa:d2:8c:e5:6a:01:84:9c:
                    d4:ce:5d:ed:fe:75:db:bd:7c:16:ce:e0:8f:21:26:
                    a2:7b:c6:4a:35:a4:65:15:86:a2:2f:4d:60:62:90:
                    02:cf:2f:27:f7:b6:5f:f5:9f:fd:d2:96:69:7f:cd:
                    45:f0:a4:4b:1d:cc:99:0e:c4:eb:42:3c:c0:fd:e5:
                    21:3d:4c:d1:18:b3:76:ef:c5:22:8f:c0:19:d3:ed:
                    5e:41:7a:b6:33:40:b5:df:39:8a:56:47:84:c4:0c:
                    64:7a:db:76:00:1b:c5:f5:8e:f2:21:42:11:47:6c:
                    7f:cb:da:f7:1d:61:2d:fa:f2:88:bf:cc:90:51:f3:
                    1e:3e:a6:78:a6:ce:ed:46:3c:1f:19:ac:5e:55:a0:
                    80:c5:aa:80:58:e2:91:48:d0:e4:08:0d:63:91:60:
                    52:28:88:ac:1c:93:d3:6b:f7:4a:a4:46:00:c0:8b:
                    35:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5C:5F:03:C9:A0:A9:CA:CF:D1:83:7E:C1:A2:FE:7E:6E:AF:4E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de3b678a-46b9-3da8-b909-19b6613072ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a9:8f:7b:b0:c5:c7:13:22:13:74:66:2f:ab:84:f1:7e:56:
         53:38:2f:f0:29:55:b7:17:71:73:35:43:ea:8a:6a:98:e2:53:
         06:13:3b:04:36:e6:ef:25:90:8d:d6:2d:7d:a2:38:95:3a:34:
         57:fe:cb:27:8f:53:e3:7c:4c:34:5c:6c:66:b7:d7:59:b7:e0:
         f0:71:20:0d:61:45:54:fb:4b:ff:d8:f9:9b:68:aa:fe:3e:fd:
         9b:60:53:0f:88:69:7d:dc:3b:44:86:5f:bf:74:47:e8:15:00:
         b8:d7:70:fc:52:f4:ea:f9:cd:4d:a5:2c:bf:49:ca:c0:a0:00:
         01:03:92:ce:3e:4a:b2:4a:37:f6:8b:85:14:fd:1b:18:9c:49:
         45:dd:88:e0:94:13:7b:4c:61:b4:aa:63:ad:bc:6d:6f:8b:8d:
         fd:c3:08:f9:37:2a:2c:d6:c0:1f:e9:31:84:ec:b6:9e:3f:89:
         14:24:fa:1a:b7:6b:27:a2:db:07:86:38:6e:73:40:52:e9:5b:
         0b:b9:ee:d3:95:3b:c9:7c:e6:0a:6a:5b:3e:7e:57:d2:8a:ad:
         87:59:e1:c1:67:c9:b0:f2:74:00:99:b2:76:c4:17:38:2c:46:
         c0:e4:12:16:e4:83:f6:49:42:fe:36:f5:00:48:37:a7:15:47:
         66:e7:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:39:09 2026 by rpki-client