Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/157f54c2-63ef-35c5-ac69-fb05b5878700.roa
File:                     157f54c2-63ef-35c5-ac69-fb05b5878700.roa (raw, json)
Hash identifier:          7UVF2jVzBitI7cOd2ulZigfawR1x7haeiVs9N488gxY=
Subject key identifier:   71:D0:3A:2B:9A:C3:5F:B9:42:E7:7A:CB:86:B4:A0:A6:9C:9E:70:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D143D400519BAEE7E176A4E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/157f54c2-63ef-35c5-ac69-fb05b5878700.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     33651
IP address blocks:        2001:55d:9024::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:40:05:19:ba:ee:7e:17:6a:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=84f82ea5-0978-4b5e-b50d-802fbf817fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:cb:e6:c4:59:ea:d0:01:94:f8:c0:79:41:
                    68:ed:63:dd:b4:85:d2:a3:c0:fe:5d:a4:99:61:e8:
                    9a:d3:9b:27:80:19:36:76:ec:69:81:69:e1:7e:65:
                    b6:30:bc:ee:47:d0:c9:73:02:c4:5b:93:a2:6b:02:
                    76:92:c2:26:df:83:dc:3a:17:68:67:77:9e:6d:ee:
                    2a:51:73:f4:76:e1:03:79:4b:04:02:33:68:ba:16:
                    8d:f7:fa:8e:d1:98:94:b1:e6:00:1b:34:6f:67:61:
                    d0:07:f6:25:a0:02:39:a8:5c:3f:b4:26:e3:b1:00:
                    21:12:77:12:8d:00:86:e2:8d:1c:38:a2:fc:4b:43:
                    1c:58:e2:af:56:87:ec:7b:44:11:bb:67:a3:d5:9f:
                    ee:04:e8:1a:45:bd:59:c4:aa:f5:72:3f:ba:ea:3f:
                    c1:31:3f:6c:18:76:d5:9e:5a:09:37:d9:d6:59:1e:
                    5d:d9:00:2a:ea:a7:e5:b3:0e:89:23:f6:69:58:da:
                    a6:c0:70:29:a0:62:28:47:62:6b:e4:b0:df:2f:37:
                    5b:85:7f:68:24:d4:95:fb:60:a1:22:0c:e9:0c:bf:
                    f3:b6:9a:d9:59:ce:8b:ae:e9:c9:3f:a2:48:97:2e:
                    34:6c:c5:59:8e:ce:03:db:dc:64:47:40:b8:b2:61:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D0:3A:2B:9A:C3:5F:B9:42:E7:7A:CB:86:B4:A0:A6:9C:9E:70:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/157f54c2-63ef-35c5-ac69-fb05b5878700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:55d:9024::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:05:3d:8e:18:bf:7c:34:dd:ff:08:10:0e:14:3e:b2:4d:e9:
         15:55:28:7c:86:d4:7b:cc:f3:b8:4f:bb:bd:3f:ec:d2:42:d1:
         0a:15:ec:a2:5b:90:4f:51:d5:a5:e0:a5:55:fc:de:39:42:b6:
         d7:e1:8f:86:eb:4d:e3:74:1e:6e:f3:97:86:23:f7:db:0b:a0:
         d8:cb:a5:d8:65:1d:ce:2f:5c:83:cb:73:b9:57:ba:ea:19:9c:
         a6:37:ff:04:88:eb:f7:6c:41:d2:31:30:75:cb:26:08:83:2c:
         21:dc:a9:90:02:48:56:88:d1:2b:2d:3b:46:21:d5:c0:ac:f3:
         94:e4:0f:de:dc:70:24:fa:6e:3b:36:ad:16:4f:20:e3:22:2c:
         fd:15:36:a0:61:69:59:c1:67:8a:f0:24:47:68:aa:db:40:88:
         cb:a4:73:66:f0:94:2c:6b:67:7a:e5:46:6c:65:cc:27:de:09:
         3e:c1:83:f3:d5:4d:90:95:e8:8f:98:c5:74:2c:79:64:b0:7e:
         ff:01:a8:6c:63:08:ec:ac:b5:73:d8:da:8e:57:73:a4:4e:88:
         eb:cd:95:7f:93:10:c9:d5:30:fc:8b:57:c7:a3:a8:1e:04:52:
         8c:3c:05:2d:2b:14:ca:e1:8b:b6:b7:9f:eb:11:63:b0:64:42:
         b6:29:83:a9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPUAFGbrufhdqTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
ODRmODJlYTUtMDk3OC00YjVlLWI1MGQtODAyZmJmODE3ZmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncrL5sRZ6tABlPjAeUFo7WPdtIXSo8D+XaSZ
Yeia05sngBk2duxpgWnhfmW2MLzuR9DJcwLEW5OiawJ2ksIm34PcOhdoZ3eebe4q
UXP0duEDeUsEAjNouhaN9/qO0ZiUseYAGzRvZ2HQB/YloAI5qFw/tCbjsQAhEncS
jQCG4o0cOKL8S0McWOKvVofse0QRu2ej1Z/uBOgaRb1ZxKr1cj+66j/BMT9sGHbV
nloJN9nWWR5d2QAq6qflsw6JI/ZpWNqmwHApoGIoR2Jr5LDfLzdbhX9oJNSV+2Ch
IgzpDL/ztprZWc6LrunJP6JIly40bMVZjs4D29xkR0C4smHZuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHHQOiuaw1+5Qud6y4a0oKacnnC5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTU3ZjU0YzItNjNlZi0z
NWM1LWFjNjktZmIwNWI1ODc4NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFXZAk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFIFPY4Yv3w03f8IEA4UPrJN6RVVKHyG1HvM87hPu70/7NJC0QoV
7KJbkE9R1aXgpVX83jlCttfhj4brTeN0Hm7zl4Yj99sLoNjLpdhlHc4vXIPLc7lX
uuoZnKY3/wSI6/dsQdIxMHXLJgiDLCHcqZACSFaI0SstO0Yh1cCs85TkD97ccCT6
bjs2rRZPIOMiLP0VNqBhaVnBZ4rwJEdoqttAiMukc2bwlCxrZ3rlRmxlzCfeCT7B
g/PVTZCV6I+YxXQseWSwfv8BqGxjCOystXPY2o5Xc6ROiOvNlX+TEMnVMPyLV8ej
qB4EUow8BS0rFMrhi7a3n+sRY7BkQrYpg6k=
-----END CERTIFICATE-----
Generated at Sat Mar 7 10:35:22 2026 by rpki-client