Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18f25075-d4fa-33dd-be3a-54c9b5808c0d.roa
File:                     18f25075-d4fa-33dd-be3a-54c9b5808c0d.roa (raw, json)
Hash identifier:          JFKow8/+BO3SzHaMXCFRpLUdN53LuAGYaU6mrBvMkAI=
Subject key identifier:   18:08:D4:0B:B1:86:96:AF:27:C7:6B:2D:97:0C:8F:1D:12:C8:8C:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE875E114741A9662F3F2A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18f25075-d4fa-33dd-be3a-54c9b5808c0d.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33651
IP address blocks:        2001:559:c008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:5e:11:47:41:a9:66:2f:3f:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=bad6cbd9-ac20-4694-8aa8-78e9c5024e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ee:fc:2a:af:51:aa:ad:01:07:55:1b:35:dc:
                    8e:b0:2e:5c:9d:5e:cc:30:40:77:ed:31:28:10:9b:
                    f9:05:13:a6:ba:0b:3e:3e:68:48:cf:66:fd:6f:da:
                    36:29:50:ca:57:5f:b2:62:b2:c7:74:5e:f1:e3:c7:
                    db:d8:b3:9b:12:7f:8a:cf:1f:ca:9c:ec:18:b1:99:
                    8e:a5:e2:d8:fd:47:d5:ec:5e:18:ad:68:23:23:6f:
                    7b:5b:60:22:96:79:ea:45:72:d0:ff:42:fc:1f:43:
                    02:e4:91:b2:86:39:88:f3:54:9a:40:21:3e:15:86:
                    1d:bc:8e:fc:f1:cd:e3:8d:b8:d2:96:ce:2e:5d:8a:
                    a0:7b:86:ac:33:46:30:4b:9b:db:0c:9a:08:a1:1c:
                    c7:ae:94:ca:3b:ce:41:e5:aa:a6:5d:f1:df:1a:bc:
                    92:05:0d:24:56:0c:54:2a:70:40:49:71:78:75:a9:
                    af:55:aa:14:a8:0c:16:58:34:63:f2:14:49:1d:c1:
                    93:fe:af:62:9d:49:21:94:d3:55:90:6c:7b:79:04:
                    74:5e:54:a5:1c:0b:5f:97:aa:d0:fa:e2:27:a4:8e:
                    78:f3:88:82:d3:46:4a:6e:27:ba:7d:c6:f8:02:d1:
                    f0:e4:c1:2c:58:19:b1:38:64:da:98:6d:20:cf:cc:
                    b2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:08:D4:0B:B1:86:96:AF:27:C7:6B:2D:97:0C:8F:1D:12:C8:8C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18f25075-d4fa-33dd-be3a-54c9b5808c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:1c:dc:f4:b4:31:43:cf:8c:2e:a8:8e:79:69:1d:e1:1e:ea:
         2d:ab:d2:45:24:2d:14:10:5d:71:65:e9:66:96:3a:85:bf:06:
         0f:82:d8:23:22:81:60:64:5f:01:ff:06:b0:6b:c9:0f:94:bb:
         8c:bc:b3:e9:25:50:f1:84:2c:f0:cc:e0:78:65:b1:0c:5e:3f:
         1c:2a:6e:92:4b:1a:0c:f2:8a:6f:17:40:2e:97:26:12:17:78:
         21:7c:de:2c:4d:73:f3:81:d8:62:86:ee:ad:82:e9:97:16:e9:
         84:c7:73:12:cd:ca:64:de:dd:0f:d6:4e:29:47:21:94:04:4b:
         60:c4:3a:de:79:07:b7:01:3a:15:44:07:3c:32:a8:97:46:0d:
         80:c3:2a:a0:a7:ad:9b:9a:31:67:fa:e6:c8:ec:1c:22:4d:68:
         9d:78:44:08:11:6f:b6:63:b6:14:c0:d0:a2:3f:ae:3b:4b:f2:
         06:50:34:cd:63:46:5f:f5:24:ec:cf:cd:66:3d:33:dc:34:ab:
         5a:bc:ab:b9:ff:98:79:1e:61:33:95:42:f2:0a:03:cb:66:77:
         94:5c:70:ac:50:bf:96:c7:c2:e0:89:96:35:d6:65:2c:fc:b7:
         4c:aa:93:a1:66:b4:c0:ec:66:1e:a3:23:32:7e:94:db:52:3c:
         df:5f:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:09:07 2026 by rpki-client