Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5f3fd5-03fc-3a7d-a461-e2b87b8cabbf.roa
File:                     df5f3fd5-03fc-3a7d-a461-e2b87b8cabbf.roa (raw, json)
Hash identifier:          6YtiMDni8n3XuzoSPWp6nFq7QO7E2+nbRcqbqujCLEY=
Subject key identifier:   DA:76:B7:2F:9F:DD:85:72:C1:F6:4A:7A:93:70:B2:45:E7:67:13:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE869F62A83A2DE1B5869FD0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5f3fd5-03fc-3a7d-a461-e2b87b8cabbf.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33287
IP address blocks:        2001:559:76e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:9f:62:a8:3a:2d:e1:b5:86:9f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=bb9d1bde-3605-4cf1-be2b-30dda5c0a9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:1d:68:e4:77:bb:76:cd:4a:7d:b5:74:84:
                    d6:b1:4c:43:0e:c5:dd:bf:fb:0f:da:73:00:c6:d2:
                    25:30:67:6d:7d:18:8e:56:55:1f:54:16:3b:3d:1a:
                    16:19:87:bb:76:c6:7f:55:0a:7b:37:dd:4c:8f:50:
                    a2:49:6d:35:ba:fb:37:91:31:ed:3f:3c:07:c8:3a:
                    87:58:8e:d2:86:d1:ab:79:12:06:3e:b8:12:ea:00:
                    0b:9f:e4:89:00:7e:ed:35:0c:27:92:df:b4:58:67:
                    39:49:4c:ee:7a:ce:52:ae:f4:3f:f8:05:50:cb:03:
                    04:1b:32:66:fa:bf:99:65:ad:a8:32:de:d2:6b:cc:
                    12:7d:d4:9a:8d:d4:42:6d:79:28:c6:87:b0:5f:4c:
                    de:68:e1:36:39:ea:80:14:36:35:c6:53:49:15:04:
                    7c:02:18:d2:01:b6:f1:9d:a2:16:00:a9:3d:d0:06:
                    ce:52:64:a4:ba:95:1c:3b:8c:3a:2d:73:e0:24:10:
                    64:7c:c7:f1:20:50:da:e9:6f:07:5a:cd:e6:a9:00:
                    fc:48:2f:48:73:9b:d6:a0:5f:78:ab:82:1a:31:8e:
                    e0:82:b8:50:75:d8:c7:3d:64:f4:97:5a:f4:da:95:
                    c7:df:99:3e:cb:8d:38:13:47:40:87:14:2b:46:16:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:B7:2F:9F:DD:85:72:C1:F6:4A:7A:93:70:B2:45:E7:67:13:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5f3fd5-03fc-3a7d-a461-e2b87b8cabbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:76e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:52:c1:e1:6e:02:46:82:1a:f3:12:0e:2f:83:04:52:52:20:
         39:be:50:86:3f:98:a9:21:97:b9:61:29:d8:bc:48:f3:5a:08:
         14:23:7b:63:6d:35:32:8d:87:15:f6:b4:6d:4d:3c:a9:68:07:
         9e:1d:a2:f7:12:32:56:9f:0d:04:48:be:b8:f8:1a:3a:cc:51:
         a6:39:73:df:40:ea:c3:2a:ed:82:d8:77:38:84:23:6b:44:f1:
         c8:2b:08:90:8f:94:03:2c:a5:8f:a6:94:f8:a8:da:a3:24:6e:
         8e:fc:a1:b7:4b:96:3b:c6:22:30:96:92:cb:60:07:20:6a:a8:
         6f:54:84:43:e8:d4:dd:11:c4:d6:8e:ab:c4:05:b4:6a:d8:b2:
         ec:0c:3e:5c:63:15:bc:f4:75:0b:1c:46:1b:d8:71:42:2b:52:
         e8:f3:94:b5:b1:02:30:64:45:aa:b4:c4:38:ae:6a:07:72:0d:
         e8:6a:a4:00:6c:9c:e6:03:60:6a:05:0c:22:68:14:e9:d5:1f:
         8b:fa:69:4b:fa:30:8b:89:9c:b2:3c:3e:88:85:f6:ca:2c:52:
         a9:6b:06:87:18:bb:a8:9c:ae:12:7f:b7:6f:f0:63:9e:16:8b:
         40:80:a0:88:af:61:44:12:a1:84:8a:5e:96:e2:fb:8c:e8:ac:
         cc:67:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:20:51 2026 by rpki-client