Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aec9b1f-ba9b-3fe9-b323-cf5c16775da9.roa
File:                     0aec9b1f-ba9b-3fe9-b323-cf5c16775da9.roa (raw, json)
Hash identifier:          KKqFQBIKFkZl11IrOSbMnnDkr7hS2FI0oMvhwPJ8InI=
Subject key identifier:   AD:42:F3:0C:8D:82:89:B9:33:B1:89:E5:A6:4D:7B:83:A2:31:6F:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86902DDDE74834E285EB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aec9b1f-ba9b-3fe9-b323-cf5c16775da9.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     13367
IP address blocks:        2001:559:c102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:90:2d:dd:e7:48:34:e2:85:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=33a18720-c24e-4c14-afa4-dc618e24b51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:63:ac:87:d8:09:6c:7a:28:08:55:e9:7a:
                    88:af:b9:4c:25:64:e1:a2:c3:22:aa:a8:2b:eb:bb:
                    bc:8b:76:b1:d9:67:84:0b:ed:50:c6:4a:22:f8:6f:
                    58:8a:fc:10:d1:94:48:d2:14:4f:90:89:ee:67:92:
                    dc:0d:22:14:89:1b:28:f2:5d:2b:e8:42:c4:42:a0:
                    14:dc:93:19:1f:36:4d:4a:3b:36:0c:b5:a0:64:2b:
                    ba:92:a2:69:6c:42:6f:0e:0c:d7:f8:57:d5:8f:a5:
                    72:5c:f5:7d:5f:e9:29:98:2e:0c:85:90:ce:d6:8c:
                    7e:7a:77:40:b8:2c:a4:66:67:7e:06:17:76:c7:19:
                    8b:27:6f:2b:81:bc:f5:71:0b:7a:cf:75:31:a7:5c:
                    72:1b:48:d6:9e:a7:5d:d2:20:91:c6:c6:26:5e:04:
                    6f:26:ba:3d:a4:6f:95:86:09:a8:2e:a8:a2:cf:1e:
                    68:07:31:93:c6:0b:b2:cc:81:a3:9e:5b:f1:97:5e:
                    13:a6:60:47:ee:de:4e:25:6a:4a:f2:f1:3f:44:64:
                    a1:8a:dc:0e:6e:dc:88:df:74:db:35:35:af:5d:c9:
                    39:6d:a0:0f:35:32:92:5a:0e:f7:99:ab:59:b1:73:
                    e9:d1:46:a8:a6:bc:f9:51:cf:94:8d:f4:b0:d0:80:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:42:F3:0C:8D:82:89:B9:33:B1:89:E5:A6:4D:7B:83:A2:31:6F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aec9b1f-ba9b-3fe9-b323-cf5c16775da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:04:64:40:3b:6b:df:eb:17:58:fc:15:e1:57:ef:35:8a:fe:
         bb:5f:b2:ca:0e:8e:bf:af:71:d4:19:f2:52:03:55:69:29:e5:
         30:d8:ab:27:cd:e4:70:c6:72:1e:08:8e:30:7b:d4:58:25:28:
         cb:fb:fc:3e:cd:2a:11:97:c4:76:28:bd:fd:3b:54:fe:e8:97:
         70:b0:e0:6b:b7:a0:9b:be:3d:4a:43:e8:f6:22:b8:33:70:a9:
         7f:ef:f2:86:56:3d:12:ec:b2:c2:eb:84:34:32:19:9d:82:4a:
         1a:9a:f6:06:8a:3f:45:4e:f5:57:06:49:66:a1:21:97:f7:3f:
         40:6a:92:a5:6d:64:11:f6:1b:7d:64:ad:70:e7:a1:9c:7f:e6:
         5a:1e:7e:ef:a9:1d:89:a5:52:ac:b8:b5:49:ec:98:0c:27:d2:
         81:ca:24:86:23:e7:4c:3f:0d:07:8a:12:19:15:ad:92:6a:22:
         7e:d6:35:cb:28:c5:dc:19:39:40:b8:f9:92:3c:cc:1e:c7:42:
         34:42:72:6e:5a:6f:32:d5:19:a8:cf:ed:f5:44:d5:6a:c6:e7:
         ca:ab:b1:02:ee:cc:74:88:75:0b:88:40:ad:99:41:85:c9:89:
         e3:1e:81:7b:ba:58:be:e2:cd:75:92:4e:d7:95:04:10:20:aa:
         33:7e:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:18:23 2026 by rpki-client