Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/855331cb-429b-3eb6-8d07-b39e082397c7.roa
File:                     855331cb-429b-3eb6-8d07-b39e082397c7.roa (raw, json)
Hash identifier:          rXiZf0C/4hg2qtrG+CodC/eoOp6hUjXl0XnEBva+KKw=
Subject key identifier:   BA:07:68:45:DA:3F:41:C9:DD:4C:88:8F:16:F5:20:95:9F:16:4D:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3A2F42FA15BEAE81988B1D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/855331cb-429b-3eb6-8d07-b39e082397c7.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     36040
IP address blocks:        2001:559:0:21::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:42:fa:15:be:ae:81:98:8b:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=3e56e2d0-c270-4a7d-b4eb-6d0a7490ebcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:31:14:8c:b2:15:89:67:77:88:63:83:34:
                    83:de:ac:c0:7c:6b:71:7e:4d:e0:cd:5f:91:8f:79:
                    8c:3c:06:76:9c:a7:48:1e:eb:47:16:9f:7f:f8:92:
                    09:af:5a:7e:63:12:65:44:7b:a8:77:b3:f0:36:86:
                    44:0f:6c:b8:6e:63:cb:f4:87:92:c2:b6:33:a8:09:
                    c8:4e:6e:2e:02:c4:9e:35:6e:53:47:48:b5:9e:a6:
                    9e:77:c6:4f:4f:31:ef:c1:93:c3:bf:fd:f1:61:a1:
                    c5:96:af:39:2c:1a:f9:7d:d3:ba:c1:b8:c8:ff:e1:
                    70:94:fc:8d:65:b7:3f:12:eb:42:eb:4f:8d:4f:ba:
                    f5:5e:79:e4:23:a7:da:ec:21:92:87:6b:49:4f:e6:
                    ea:a2:b6:ba:7b:e7:f2:db:f3:0a:65:3c:4d:eb:27:
                    5b:05:b3:56:7b:c3:8d:d9:56:f3:fc:1f:cd:ce:9e:
                    11:6b:f5:0d:97:24:75:be:33:d9:0c:cc:97:d9:77:
                    97:61:7d:e4:ac:7c:c7:cc:50:ae:21:eb:69:3a:11:
                    3d:11:e4:dc:90:36:4c:25:bd:a9:2e:a5:22:ef:60:
                    af:7e:31:60:68:5d:af:87:48:60:75:32:5f:53:9f:
                    ce:6b:48:15:89:41:28:aa:cf:59:00:78:e5:c2:5d:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:07:68:45:DA:3F:41:C9:DD:4C:88:8F:16:F5:20:95:9F:16:4D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/855331cb-429b-3eb6-8d07-b39e082397c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:21::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:10:31:0a:a7:05:ac:91:3f:36:c9:78:7e:9f:33:f9:fe:a1:
         27:a6:cf:8e:08:5a:ee:e4:4e:82:79:64:d2:4c:e8:cd:4e:68:
         bb:15:d1:94:b9:4f:3d:48:4c:62:8e:ba:6f:f1:f5:30:1c:42:
         67:b5:9a:91:74:dc:74:b9:1c:99:98:64:ff:0e:7f:fb:7e:cf:
         ae:f9:d2:8e:6e:11:2b:68:64:1e:4b:1f:68:6c:53:d9:5b:cf:
         28:de:33:27:c4:67:62:26:89:cc:b8:b6:7c:f3:0e:a8:92:6f:
         5c:3d:19:92:78:56:5a:f0:36:5f:b4:d0:73:f4:c6:81:5f:8d:
         f8:f0:d9:02:80:ba:65:96:33:fd:27:26:b6:2c:70:00:51:01:
         d5:a3:21:50:79:dc:67:c8:16:68:fe:70:67:63:8f:2d:9e:26:
         d5:07:3c:c4:39:eb:52:6e:82:a0:b3:50:f3:79:c5:58:e4:35:
         0a:c3:70:59:f4:37:2c:84:fe:f8:6a:18:01:59:9b:41:2e:81:
         53:69:85:f6:45:84:13:de:5c:39:2d:f4:b2:a0:a2:33:16:fc:
         cd:40:51:8d:4c:af:37:8d:f2:a9:80:28:e0:4a:c7:d2:18:7c:
         9c:17:90:9c:b1:10:32:90:72:dd:eb:1b:b9:3e:8c:60:1c:57:
         c1:00:4b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:22:06 2026 by rpki-client