Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a142c6f-e9ad-3c42-8aac-45eb61862677.roa
File:                     0a142c6f-e9ad-3c42-8aac-45eb61862677.roa (raw, json)
Hash identifier:          +1iT3H5iIBwGyK5Xqu7ZnfFI/9wDA+pIlIu9QSgz5hg=
Subject key identifier:   8E:3A:22:5C:BD:E2:9D:D2:86:50:4E:F8:40:6A:3F:1D:34:51:DC:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE869DDA2F11278D119B2260
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a142c6f-e9ad-3c42-8aac-45eb61862677.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33287
IP address blocks:        2001:559:58f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:9d:da:2f:11:27:8d:11:9b:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=bf57c7b1-b290-45b0-99bf-79c7784e8fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:8e:fa:7a:9e:83:a2:61:a5:58:ee:10:3e:
                    db:8a:21:b5:82:21:90:66:f7:f9:e2:95:ed:10:95:
                    f8:df:d9:6f:a6:7b:9a:62:05:11:77:1b:56:3f:e8:
                    b2:f0:e2:e5:b5:be:35:63:b1:0d:2a:49:3a:32:cb:
                    f0:ea:7d:84:03:78:83:7f:50:af:13:74:e3:48:3d:
                    e4:e6:46:59:d4:d2:08:11:8d:78:7d:9c:14:8d:49:
                    fd:d8:23:58:36:a6:1a:33:3a:ff:80:2c:e7:a6:56:
                    8a:c7:a7:48:10:1a:01:09:d3:8e:21:ff:6e:c7:b7:
                    72:6d:fa:53:75:e1:73:bd:c6:78:ef:a4:cb:0b:96:
                    e0:c7:fb:3d:a5:ce:f0:d6:98:2e:66:c1:dc:b4:bc:
                    8b:23:1f:5f:8e:c5:f6:f6:a4:5c:40:92:69:f0:cb:
                    d1:ad:88:00:ad:cd:13:0b:92:39:3a:c6:0a:7b:9f:
                    8e:9d:bc:48:f1:37:32:b3:8a:ee:65:68:ee:b3:87:
                    7a:ff:7b:20:b0:88:07:b2:e6:28:f9:8b:21:68:80:
                    0b:be:5f:47:89:02:55:d1:d4:44:29:7d:a9:c1:04:
                    19:bd:7c:54:fd:06:f2:62:1f:5e:1a:a8:85:7f:18:
                    83:7c:b2:80:58:85:47:55:8f:de:9f:f5:1e:05:de:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3A:22:5C:BD:E2:9D:D2:86:50:4E:F8:40:6A:3F:1D:34:51:DC:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a142c6f-e9ad-3c42-8aac-45eb61862677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:58f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:83:f0:f4:67:f4:24:19:6c:5a:34:dc:5b:26:e4:21:05:e9:
         bb:03:83:e5:61:9e:20:ce:9e:4d:01:e7:90:d8:38:a4:41:5f:
         f5:4f:72:ea:c8:de:5a:d6:90:82:bd:bc:f2:b0:79:17:2c:11:
         56:aa:4f:62:ea:57:6c:40:0e:bf:ef:09:1f:7c:35:c9:27:aa:
         d4:d7:df:22:2b:96:42:6f:67:2e:0e:3a:7f:e8:3a:c2:7c:7f:
         c8:a7:a0:b9:55:81:4a:8a:f2:19:99:e1:8a:63:a6:ba:e5:ce:
         48:3e:a5:fe:30:02:71:36:43:c6:77:5e:c9:a3:62:aa:a0:99:
         32:39:bb:25:76:ed:d6:82:a1:ed:ee:7f:15:45:a8:97:97:1a:
         ae:f6:ae:63:12:fe:ce:86:f7:f1:c8:ca:e0:0b:27:2e:9d:00:
         f5:02:64:02:ad:f0:70:3d:8c:cb:fd:84:19:65:eb:0d:a6:63:
         3f:20:6a:d1:2c:16:3d:68:4c:64:af:09:de:a5:8a:ac:78:14:
         c3:60:28:bb:55:bd:da:63:0b:13:4d:d7:e3:dc:a9:52:ee:6d:
         cb:55:f5:37:31:cf:4d:6d:70:df:7a:67:6c:af:18:cf:73:ff:
         ac:5e:55:b9:06:fd:65:8b:43:75:69:3c:86:1c:7f:c0:13:d6:
         79:ce:e0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:09:33 2026 by rpki-client