Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc1e4b7a-afdb-3ef9-8e99-e4640395b95f.roa
File:                     fc1e4b7a-afdb-3ef9-8e99-e4640395b95f.roa (raw, json)
Hash identifier:          FRTVjbgPXJ2VTtS7CIoZznBst7EhXqo5kqGQ8qHATXE=
Subject key identifier:   67:4E:61:63:7F:3E:57:D7:72:7F:2F:86:3F:55:26:62:56:F2:7A:88
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86B99505B6B8065C310F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc1e4b7a-afdb-3ef9-8e99-e4640395b95f.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33657
IP address blocks:        2001:559:8041::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:b9:95:05:b6:b8:06:5c:31:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=fcd7f471-3f69-4ce8-b212-03b0334fb77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:ff:af:9c:e6:d2:61:ad:37:5b:f2:b5:51:
                    b0:0a:15:96:ab:fe:dc:2e:5d:95:a0:22:a2:15:f5:
                    a2:d4:a0:5c:39:8c:b2:82:c1:aa:01:68:2d:6b:9b:
                    2c:b0:82:fe:6f:a0:a0:b3:0e:87:a0:6f:50:f8:f2:
                    86:19:4d:d6:55:21:25:8c:f6:fd:f4:bf:7b:17:ca:
                    32:05:94:ac:4d:40:8a:70:46:f6:ba:00:81:0f:c4:
                    db:67:f5:8f:c6:a9:0f:b2:ea:de:63:f7:97:e3:10:
                    30:7d:3d:f7:be:83:02:d2:81:f8:fd:4c:ee:de:91:
                    c7:ec:29:c7:d3:a8:08:b2:f5:e5:af:0b:47:dd:de:
                    2b:26:53:85:c7:2e:14:a5:b6:d2:48:6d:15:4c:95:
                    bd:82:0a:d7:c2:ad:2a:4d:a0:67:38:cd:ba:01:be:
                    84:66:0e:d2:0b:7b:6b:a4:e6:00:38:98:16:49:09:
                    37:51:87:df:19:25:c6:4c:23:64:eb:ad:a2:57:d3:
                    96:88:13:0a:2e:9c:bc:28:45:e7:ff:6d:a3:34:a8:
                    04:27:4f:41:e5:40:7c:45:ce:1b:cd:64:5b:89:93:
                    1b:eb:6a:d5:47:6f:55:1b:b8:d3:8f:35:9c:3e:c1:
                    9d:9d:10:a7:7f:84:0c:70:11:92:a5:28:fc:d8:33:
                    5a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4E:61:63:7F:3E:57:D7:72:7F:2F:86:3F:55:26:62:56:F2:7A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc1e4b7a-afdb-3ef9-8e99-e4640395b95f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8041::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1f:5b:06:73:0e:54:f7:21:4a:09:7a:50:b0:bc:b8:9f:74:
         18:fd:cd:79:1a:c6:69:04:21:c5:4e:50:5e:81:34:42:71:b3:
         6d:af:5d:21:96:d7:8d:d7:2e:3b:18:e2:e7:75:5a:75:31:6d:
         c0:7b:82:a3:40:e4:82:89:d1:c2:7a:4d:90:1b:de:29:45:12:
         1a:e0:00:ea:19:e2:ef:13:be:51:c8:e3:d3:1b:63:b9:fb:ef:
         c4:99:d1:02:d6:27:b0:ed:36:4c:66:17:d5:7b:ca:37:74:d0:
         87:6c:03:ed:32:a1:9f:2a:9c:98:8b:f5:f8:93:e1:f0:91:cc:
         ad:e1:fc:50:ff:7d:49:ca:6d:85:eb:ab:a9:9c:8a:15:ce:57:
         20:3b:ee:56:80:92:4b:29:1b:89:d1:ac:1c:51:03:d9:1c:3f:
         1c:c8:ee:f2:42:38:98:77:72:17:00:f6:bf:7e:de:ff:42:24:
         cb:a7:82:0e:15:a4:71:d6:13:68:ff:7e:fc:27:31:e6:53:a1:
         97:85:01:a3:af:f6:c0:29:d8:c2:d9:1a:ba:e0:39:ba:9c:d7:
         2a:04:ba:28:6b:51:30:73:67:b5:20:bf:b2:db:37:d0:5a:f6:
         2f:9b:0b:4a:46:53:e7:95:88:f0:0a:06:a1:69:e1:ae:0f:a2:
         bf:ef:af:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:09:14 2026 by rpki-client