Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0456d018-9cb3-3c2e-a44f-ef1e52a09273.roa
File:                     0456d018-9cb3-3c2e-a44f-ef1e52a09273.roa (raw, json)
Hash identifier:          dl8M03TvZkBm/axL8/matd4qtQ9iOHhRs5gAogE7VcI=
Subject key identifier:   76:14:37:9E:17:24:1D:9D:17:39:11:03:47:AF:E5:1E:CB:1F:18:2F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8755DF50DF4A9A5230E0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0456d018-9cb3-3c2e-a44f-ef1e52a09273.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33651
IP address blocks:        2001:559:6e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:55:df:50:df:4a:9a:52:30:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=6a99cdec-aa21-46f8-8023-b57faf37284a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:43:cb:f7:8c:72:92:3f:1f:39:67:4f:0d:
                    84:e8:3a:8c:44:66:26:4b:1e:c5:b4:21:46:8e:d5:
                    46:7b:c8:ab:c8:7c:33:cc:9d:06:2d:b1:6f:c1:35:
                    b0:88:1e:83:3a:c5:52:2d:09:29:41:80:00:af:8f:
                    46:e9:bb:ee:2a:1b:73:83:20:1a:b0:2a:d0:96:e2:
                    21:99:c0:fa:1b:42:24:d5:86:c4:70:f0:19:8b:ac:
                    d1:65:9d:bd:11:a0:99:89:21:df:51:6c:96:50:dc:
                    c1:3d:c5:10:8a:b5:8e:61:1d:d4:a7:0e:a5:60:f0:
                    bd:b7:b7:05:d4:b6:42:3f:7d:c9:d4:11:a2:d8:71:
                    f1:62:c3:2c:35:0f:a2:22:11:83:eb:39:15:7e:7a:
                    f9:b9:44:e8:b1:19:9f:c6:42:53:31:e9:af:07:64:
                    45:0e:31:07:29:7c:02:2b:eb:33:69:50:cb:a9:c1:
                    37:c3:74:f0:fe:ff:c2:01:b2:76:78:95:ca:76:5d:
                    cd:32:7d:7f:74:7e:aa:de:9d:2f:78:a1:cc:08:ef:
                    72:d1:91:c4:fa:79:d6:93:f2:06:b5:b2:3e:7b:1a:
                    4e:c7:a3:af:a1:9e:8c:12:eb:2e:be:66:ca:8e:33:
                    0b:d9:7a:52:1f:54:1b:0f:84:d2:e5:07:85:2c:3c:
                    03:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:14:37:9E:17:24:1D:9D:17:39:11:03:47:AF:E5:1E:CB:1F:18:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0456d018-9cb3-3c2e-a44f-ef1e52a09273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:6e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:b7:c0:18:24:27:b9:74:53:4a:09:52:71:6c:3a:5a:f3:d2:
         a7:99:ad:63:3c:56:93:31:6f:90:04:f6:6f:6d:e9:55:fd:16:
         c8:c4:52:c8:80:4e:93:1e:04:97:db:81:1a:75:95:40:93:6b:
         33:07:84:8c:b5:3a:fc:fd:40:ec:a8:c7:14:be:2c:e7:f0:53:
         9b:3c:67:81:22:83:92:cc:05:28:ac:fe:82:40:35:fd:27:dd:
         04:77:df:d7:07:77:75:77:e8:db:ea:14:68:70:f0:89:dd:f8:
         7b:74:7e:0d:ce:78:8c:aa:8d:30:eb:de:1c:d3:08:2d:39:c8:
         af:95:fb:7f:12:8b:12:ca:1e:88:73:b4:1a:71:34:db:46:9b:
         95:5c:e9:87:d8:20:3b:7b:48:24:b2:3e:7c:da:bf:89:43:24:
         29:03:dc:ee:2d:04:0e:0c:30:01:cd:3b:ec:ea:66:78:13:d9:
         19:b9:e3:da:0b:27:1b:76:06:33:7f:1c:d5:fc:cc:45:0b:89:
         cc:d3:e4:58:09:c9:d3:68:16:2e:15:c1:26:6b:46:b8:0f:79:
         ba:7d:7f:25:b4:62:8d:f2:a7:5c:5d:22:33:1f:e3:8d:08:d8:
         7d:60:04:28:99:c6:31:a6:08:ba:bf:6b:76:91:f1:6b:52:65:
         98:2d:d0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:18:52 2026 by rpki-client