Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed4b8f47-9286-3828-99d7-1e3230769866.roa
File:                     ed4b8f47-9286-3828-99d7-1e3230769866.roa (raw, json)
Hash identifier:          FF6YF5/L57e2XClPPAJa/e98iQB/uYZggI1UY5f/g4Q=
Subject key identifier:   48:44:1F:FB:9C:CC:AF:78:AB:47:61:EC:0E:90:15:82:F5:07:0C:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE8758A359ADBDF53396C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed4b8f47-9286-3828-99d7-1e3230769866.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7015
IP address blocks:        2001:559:337::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:75:8a:35:9a:db:df:53:39:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=d600ce72-6d71-4df2-b9c5-cb8db60dc878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:57:bd:d4:46:a6:fd:5a:8f:c4:7c:27:da:
                    07:ef:f4:b2:7b:7e:5d:59:45:6f:b0:f9:26:9b:c8:
                    f5:a0:d7:8a:ef:fc:50:66:25:8e:13:5d:7d:06:4e:
                    50:74:9c:97:5d:65:aa:95:bf:bf:eb:fd:39:fe:58:
                    88:b4:16:3e:39:ea:e1:af:6d:41:9f:76:de:88:21:
                    2f:d3:69:85:f9:6b:14:c7:0f:a6:90:6f:61:c2:5c:
                    5e:30:17:f1:cf:fe:d3:65:e6:47:b1:ea:bc:b0:bc:
                    a1:40:3c:28:58:1a:89:62:e8:6f:71:ba:cc:46:12:
                    07:e9:0d:ed:e5:26:2b:cd:ca:a6:f2:45:61:98:97:
                    0e:12:6f:a2:43:bd:5e:89:27:63:4b:c0:d6:42:00:
                    87:a0:7e:e0:98:e6:6e:45:ba:05:a9:37:bd:1d:88:
                    4d:18:91:5e:ad:aa:ac:c9:a4:2a:c3:97:7e:6b:b0:
                    a6:7f:2a:84:10:cd:44:9b:e5:62:17:71:5a:8e:42:
                    90:c5:65:c8:9d:a5:71:09:01:08:bd:42:be:ea:1a:
                    84:d9:3f:d3:e7:b9:aa:12:82:6f:f4:95:bc:d4:20:
                    5d:94:54:d6:81:9e:a0:5c:a7:18:d3:44:4e:b2:c7:
                    c7:19:b9:33:a5:40:71:a7:30:8a:8f:21:ac:d0:31:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:44:1F:FB:9C:CC:AF:78:AB:47:61:EC:0E:90:15:82:F5:07:0C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed4b8f47-9286-3828-99d7-1e3230769866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:337::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1d:63:ca:d6:61:f1:1e:c2:1c:49:45:9c:15:0e:78:34:0c:
         08:71:5b:51:26:7a:f5:44:7f:c5:2f:3f:88:08:1f:5a:95:25:
         26:6d:61:3a:7f:42:56:da:a5:d2:e0:8c:2c:9b:1a:cc:b7:53:
         f9:ac:84:3f:0a:97:23:5c:87:5b:4c:aa:e9:57:52:66:28:af:
         d0:0a:b1:99:b2:19:1d:2b:66:fc:5a:a1:f1:e2:cd:df:9f:86:
         28:16:7a:61:c4:45:4b:90:5b:a0:b6:8e:0e:47:85:df:9d:9e:
         02:82:b5:51:18:1e:d2:ee:aa:70:a8:d1:b0:de:3a:a9:9f:7b:
         20:00:1f:c4:5e:73:b8:4c:b4:4a:95:48:9e:fa:e9:51:2b:fb:
         d1:9b:ae:39:90:49:9c:a9:e3:d6:88:ed:cc:9a:32:4f:a1:04:
         24:b0:6e:c2:a2:16:ef:27:e2:24:d9:3a:84:f2:2f:5f:e3:ee:
         86:61:d6:e5:3e:33:49:58:21:b8:57:b9:12:a8:4a:76:df:46:
         5d:18:c7:24:51:7a:50:b0:ca:02:6b:cb:38:da:99:3e:dc:47:
         56:69:ac:27:ea:b8:09:9b:3f:f2:b9:f4:3c:84:c7:6b:4a:49:
         08:39:25:2d:90:12:af:bd:c1:a2:42:04:32:92:1d:3d:cd:f5:
         08:8e:fd:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96HWKNZrb31M5bAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
ZDYwMGNlNzItNmQ3MS00ZGYyLWI5YzUtY2I4ZGI2MGRjODc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlZXvdRGpv1aj8R8J9oH7/Sye35dWUVvsPkm
m8j1oNeK7/xQZiWOE119Bk5QdJyXXWWqlb+/6/05/liItBY+Oerhr21Bn3beiCEv
02mF+WsUxw+mkG9hwlxeMBfxz/7TZeZHseq8sLyhQDwoWBqJYuhvcbrMRhIH6Q3t
5SYrzcqm8kVhmJcOEm+iQ71eiSdjS8DWQgCHoH7gmOZuRboFqTe9HYhNGJFeraqs
yaQqw5d+a7CmfyqEEM1Em+ViF3FajkKQxWXInaVxCQEIvUK+6hqE2T/T57mqEoJv
9JW81CBdlFTWgZ6gXKcY00ROssfHGbkzpUBxpzCKjyGs0DHRTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEhEH/uczK94q0dh7A6QFYL1BwwLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWQ0YjhmNDctOTI4Ni0z
ODI4LTk5ZDctMWUzMjMwNzY5ODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQM3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH4dY8rWYfEewhxJRZwVDng0DAhxW1EmevVEf8UvP4gIH1qVJSZt
YTp/QlbapdLgjCybGsy3U/mshD8KlyNch1tMqulXUmYor9AKsZmyGR0rZvxaofHi
zd+fhigWemHERUuQW6C2jg5Hhd+dngKCtVEYHtLuqnCo0bDeOqmfeyAAH8Rec7hM
tEqVSJ766VEr+9GbrjmQSZyp49aI7cyaMk+hBCSwbsKiFu8n4iTZOoTyL1/j7oZh
1uU+M0lYIbhXuRKoSnbfRl0YxyRRelCwygJryzjamT7cR1ZprCfquAmbP/K59DyE
x2tKSQg5JS2QEq+9waJCBDKSHT3N9QiO/Sw=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:33 2026 by rpki-client