Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/157f54c2-63ef-35c5-ac69-fb05b5878700.roa
File:                     157f54c2-63ef-35c5-ac69-fb05b5878700.roa (raw, json)
Hash identifier:          Msoxu9oo+gy8QoSbXJ3AdJHrPL6SOXei8T0IOs7jTuc=
Subject key identifier:   2D:FA:FD:44:D1:59:95:6E:43:01:5C:3B:CB:80:1D:08:05:6E:50:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DF4DB569AA11EDD7AFBCC2980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/157f54c2-63ef-35c5-ac69-fb05b5878700.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     33651
IP address blocks:        2001:55d:9024::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:56:9a:a1:1e:dd:7a:fb:cc:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=85322679-a5c2-4503-9f0c-8f9e1f8b265b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:03:ed:e3:f2:4a:68:a5:f6:f3:12:da:82:
                    1c:94:3c:dd:6b:97:35:d4:4c:34:dc:f0:a4:74:db:
                    0f:65:69:40:0b:9d:af:31:45:6b:d5:d5:4e:76:ec:
                    f4:af:7a:5f:5b:b8:13:dd:e9:3d:e1:3c:55:6d:e0:
                    f6:58:18:7b:26:cd:11:cf:e6:28:00:20:e4:4f:5e:
                    84:ca:21:87:3a:9c:9f:fd:a1:a3:19:42:d5:da:ba:
                    fa:1a:ce:29:88:ff:e8:13:cc:03:ee:e3:1f:d2:d3:
                    8b:53:b8:a1:28:b1:45:b5:3c:e9:07:fd:23:2e:f6:
                    ee:c1:c2:4d:43:79:b9:84:9d:08:7a:c9:2e:18:67:
                    40:5f:2d:47:ad:24:0d:de:04:9a:ff:1a:04:2c:fe:
                    a5:14:50:1e:05:75:96:13:e8:89:0e:94:39:a5:21:
                    ee:1e:a6:d4:03:87:a0:d2:92:91:b0:26:75:6d:32:
                    15:8a:de:f1:a9:1b:c9:a7:a9:22:b8:c8:77:81:9e:
                    13:61:60:9c:1c:d2:f4:f3:4f:6c:ba:ca:df:01:2f:
                    6d:e8:25:47:c0:34:93:36:9f:3b:ee:6c:26:08:24:
                    82:42:bd:45:01:2f:c4:92:dd:0b:15:51:6f:74:5f:
                    fd:64:0f:d4:45:ea:1c:de:bf:6b:99:1a:e7:33:8e:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FA:FD:44:D1:59:95:6E:43:01:5C:3B:CB:80:1D:08:05:6E:50:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/157f54c2-63ef-35c5-ac69-fb05b5878700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:55d:9024::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:dc:10:83:4d:97:24:7d:9e:f9:a3:fe:e6:25:f7:fc:3f:7c:
         96:79:de:0b:c1:b2:6c:05:cf:bc:f3:ad:db:65:7d:54:ab:62:
         16:36:6d:0f:23:04:89:7e:95:ac:8c:57:72:f6:a8:18:5b:ef:
         c4:43:6b:96:ac:4f:20:80:34:e5:56:1d:aa:73:2e:03:b1:a5:
         21:1a:7b:cb:45:8a:ee:e6:60:8a:21:55:9d:c2:10:c0:e8:a7:
         bc:e2:4a:28:c1:72:0a:0f:34:1b:e5:4c:27:78:f5:06:10:f8:
         b5:8d:9d:af:6e:d1:5a:dc:52:3c:23:e5:c4:4f:5c:e3:e9:8d:
         95:0c:57:61:35:24:e6:36:b4:32:02:c5:40:a9:eb:05:21:a1:
         1b:67:e2:34:a1:2d:08:87:05:79:e8:04:61:d8:5d:2c:f9:cf:
         2a:f6:24:35:da:00:6a:74:ea:f6:47:57:e8:0b:7b:8a:da:16:
         95:55:72:78:59:63:48:04:3c:5d:e3:77:65:2b:7f:77:f6:4e:
         79:2e:9f:18:13:1a:4d:a6:d9:11:55:99:8b:36:75:7f:db:0b:
         c1:74:dc:cc:d5:ab:67:30:25:b9:7d:8e:b0:f1:7c:ad:c2:68:
         f8:37:3a:57:fb:34:a0:c3:29:35:de:92:ab:ef:b3:f6:bf:45:
         93:a4:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:14:45 2026 by rpki-client