Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee7fe4bb-7be8-338a-80aa-32c81e2ec4c3.roa
File:                     ee7fe4bb-7be8-338a-80aa-32c81e2ec4c3.roa (raw, json)
Hash identifier:          ANwqdcJ+T09bB0QAaP36c0z/H3IYYeQ22hG7jeszqzU=
Subject key identifier:   7F:89:42:47:13:25:0C:07:D9:2D:63:99:83:12:4D:A6:8F:72:A6:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78E952C1A8C7AB48140D280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee7fe4bb-7be8-338a-80aa-32c81e2ec4c3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33657
IP address blocks:        2001:559:c06a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8e:95:2c:1a:8c:7a:b4:81:40:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a5f35031-8b53-40fd-86e0-d189dd247b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:e9:d2:a8:1d:5e:ef:67:dc:67:5c:15:8f:
                    0b:58:af:a1:96:7a:a2:30:17:95:84:f1:ab:3c:ec:
                    92:00:7d:d0:f7:d6:e4:06:ed:9b:11:07:50:20:7d:
                    44:a0:32:15:81:cb:0d:a3:b7:69:20:71:cc:c8:39:
                    72:eb:b7:b9:12:ee:7d:f1:be:3f:6c:26:e9:ba:7b:
                    b3:d7:66:7e:da:f8:cb:56:f4:1e:c8:8a:36:c2:a9:
                    79:02:09:42:23:2b:37:ac:ec:bc:68:d8:70:d7:89:
                    09:98:30:6a:a9:fa:ff:ee:e3:10:11:b5:44:9a:38:
                    db:15:bd:fe:85:e9:58:9a:29:4b:2e:a8:39:8a:81:
                    f7:67:27:02:d9:5d:5f:71:1e:06:a9:a1:18:15:1e:
                    a1:8e:e6:8f:2c:78:3a:aa:2f:ca:58:27:7f:e0:86:
                    9a:8a:34:7a:67:01:c2:d2:dc:d8:37:aa:87:35:79:
                    da:ef:51:10:9b:6f:71:39:8b:5d:5e:8b:52:52:6d:
                    fa:be:60:d6:ca:f3:6a:60:90:9a:65:f7:b1:00:de:
                    09:57:1b:df:dd:9e:00:1d:6d:09:b8:10:a1:30:3b:
                    fd:6e:07:bf:a2:ec:1a:3f:be:ab:43:ea:62:5b:d3:
                    6b:ee:a8:f3:89:99:db:df:97:ca:68:cc:dc:ca:e3:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:89:42:47:13:25:0C:07:D9:2D:63:99:83:12:4D:A6:8F:72:A6:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee7fe4bb-7be8-338a-80aa-32c81e2ec4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c06a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:6f:20:d7:81:77:c3:ed:ac:1c:12:04:b7:d4:3c:c7:8d:
         3d:c3:70:cc:de:56:34:56:92:91:c6:0f:1b:de:c8:99:81:a8:
         43:7c:22:d0:95:6c:b3:8e:b2:f9:1f:68:ff:3f:06:0e:47:90:
         7f:3f:c4:78:26:78:b2:01:e2:76:c0:b0:6a:d5:56:b1:e4:e5:
         9e:dd:8a:27:b6:f1:e6:96:90:07:dd:19:fb:da:c0:a1:ea:38:
         0e:af:b6:e8:00:84:12:8d:f5:91:ff:28:66:c6:54:ee:59:8c:
         be:cb:f8:4a:db:40:61:c7:e9:4d:c3:36:be:e7:52:02:17:33:
         86:10:11:45:4b:20:f5:da:62:87:39:ca:30:45:84:ee:2c:ac:
         66:19:e4:64:4e:21:4b:a7:80:fb:89:6d:7c:c0:d1:c3:cb:ac:
         84:45:d5:6f:ad:ea:37:75:98:96:a6:a3:98:d5:f7:4b:6c:23:
         9b:a3:6c:ff:bc:b5:98:c4:64:23:55:be:e6:ff:43:b4:44:ae:
         0e:4a:ed:72:de:b1:48:63:ca:fd:6f:ad:86:42:f6:d7:9d:ff:
         b6:a1:5c:db:d8:18:25:3c:16:ec:56:2c:70:4a:9e:f6:ec:3c:
         d7:8c:d4:34:71:45:cf:74:cc:5b:8b:4d:8a:23:ff:63:d5:c4:
         a7:fa:68:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:59 2026 by rpki-client