Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee6a5fc0-9aab-3db1-81eb-fe25b51f17bc.roa
File:                     ee6a5fc0-9aab-3db1-81eb-fe25b51f17bc.roa (raw, json)
Hash identifier:          4OL2yEdGu2R37Nsj+yEURv+IgQuVe5PqLJAcKbUmEUY=
Subject key identifier:   91:0B:29:36:46:A5:10:00:FD:CC:C2:BD:CE:2E:8F:28:F8:59:72:88
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78AE1956BB0B4326A77E678
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee6a5fc0-9aab-3db1-81eb-fe25b51f17bc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33287
IP address blocks:        2001:559:81cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8a:e1:95:6b:b0:b4:32:6a:77:e6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0a081288-929a-4703-94c3-d55be6a4bc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:4f:3b:45:49:8a:13:9a:3c:cc:6a:c5:d0:
                    fb:47:9f:da:89:4f:82:db:13:b0:f4:f4:68:2d:78:
                    4e:74:40:71:55:7b:0b:4b:3f:26:55:79:5b:e7:a0:
                    36:50:ce:73:80:63:1f:6a:5e:bd:61:08:52:13:87:
                    00:99:3d:d2:7e:d5:56:13:69:d3:67:c4:33:8a:f1:
                    76:9a:d2:59:9c:8b:43:83:e6:6d:81:57:77:37:fe:
                    37:9b:96:fe:91:af:24:ae:2d:b3:80:6f:e8:58:bf:
                    44:9c:a6:9a:3f:58:6e:61:82:da:6b:43:cf:94:e3:
                    b2:a8:16:3a:32:35:d0:62:f5:14:ba:23:29:be:e1:
                    96:ee:36:53:ff:67:19:25:3c:67:43:2c:0e:35:1d:
                    43:1e:85:e5:2a:ea:88:9d:ac:3d:92:e7:da:f7:25:
                    26:bb:c5:b7:36:e3:9e:b8:8a:4a:d8:cd:39:82:3e:
                    33:40:b3:00:f9:06:82:c0:15:f5:b0:5b:f2:28:7a:
                    ab:84:6e:7e:09:dc:43:e2:82:7b:fd:1d:28:36:ed:
                    c2:57:4b:cd:95:d2:89:bc:3b:2b:ca:31:a0:e2:4c:
                    a7:35:a9:79:cc:ec:32:94:16:e2:1e:f5:7a:4d:9e:
                    15:b2:9b:ec:03:70:94:92:29:f3:7d:84:bf:07:df:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0B:29:36:46:A5:10:00:FD:CC:C2:BD:CE:2E:8F:28:F8:59:72:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee6a5fc0-9aab-3db1-81eb-fe25b51f17bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:81cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b9:2e:ee:b2:95:a7:58:93:14:31:10:c3:9d:0f:fb:2e:18:
         41:72:60:bf:0f:de:97:f2:ca:42:f0:e3:6d:aa:a8:e7:4a:b0:
         7f:74:15:67:f8:20:d5:8a:06:c5:7d:f5:f5:58:4e:dc:2d:23:
         60:22:f0:e3:55:3c:2a:90:95:ea:c2:e6:0c:db:e5:6b:14:59:
         d8:3b:be:3f:55:f6:7e:33:1f:4e:91:ec:35:2f:44:c9:49:ad:
         71:66:57:28:62:45:67:a8:cc:95:88:ec:46:47:df:aa:ad:96:
         5a:ef:fc:2e:4a:b9:38:fe:fc:13:fc:c6:f7:39:bd:4d:f5:93:
         e0:ad:fa:58:70:56:9e:67:a2:45:30:78:54:14:44:ad:2d:d5:
         69:c1:6c:97:34:5d:de:5a:94:00:df:8e:4e:81:4b:57:bb:49:
         d7:54:ba:ce:4d:36:cc:08:8c:b7:92:46:9a:af:ad:00:83:62:
         59:bf:d0:27:6d:4c:39:05:98:01:1e:38:71:db:a9:74:ad:db:
         d2:78:ba:f1:02:9b:d0:fe:d9:c1:4c:b3:6b:92:58:ec:25:9c:
         58:b0:77:c3:32:6d:26:83:95:9c:c7:ad:bb:f0:8b:13:43:e6:
         e5:34:4b:c1:ed:26:2e:e0:77:d5:f5:ec:e9:eb:65:4a:91:b7:
         01:c8:f0:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niuGVa7C0Mmp35ngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MGEwODEyODgtOTI5YS00NzAzLTk0YzMtZDU1YmU2YTRiYzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/NPO0VJihOaPMxqxdD7R5/aiU+C2xOw9PRo
LXhOdEBxVXsLSz8mVXlb56A2UM5zgGMfal69YQhSE4cAmT3SftVWE2nTZ8QzivF2
mtJZnItDg+ZtgVd3N/43m5b+ka8kri2zgG/oWL9EnKaaP1huYYLaa0PPlOOyqBY6
MjXQYvUUuiMpvuGW7jZT/2cZJTxnQywONR1DHoXlKuqInaw9kufa9yUmu8W3NuOe
uIpK2M05gj4zQLMA+QaCwBX1sFvyKHqrhG5+CdxD4oJ7/R0oNu3CV0vNldKJvDsr
yjGg4kynNal5zOwylBbiHvV6TZ4VspvsA3CUkinzfYS/B9/vlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJELKTZGpRAA/czCvc4ujyj4WXKIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWU2YTVmYzAtOWFhYi0z
ZGIxLTgxZWItZmUyNWI1MWYxN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYHM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJO5Lu6yladYkxQxEMOdD/suGEFyYL8P3pfyykLw422qqOdKsH90
FWf4INWKBsV99fVYTtwtI2Ai8ONVPCqQlerC5gzb5WsUWdg7vj9V9n4zH06R7DUv
RMlJrXFmVyhiRWeozJWI7EZH36qtllrv/C5KuTj+/BP8xvc5vU31k+Ct+lhwVp5n
okUweFQURK0t1WnBbJc0Xd5alADfjk6BS1e7SddUus5NNswIjLeSRpqvrQCDYlm/
0CdtTDkFmAEeOHHbqXSt29J4uvECm9D+2cFMs2uSWOwlnFiwd8MybSaDlZzHrbvw
ixND5uU0S8HtJi7gd9X17OnrZUqRtwHI8Ew=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:26:50 2026 by rpki-client