Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c0be101-8b62-3a0b-9511-d1a13d050b28.roa
File:                     1c0be101-8b62-3a0b-9511-d1a13d050b28.roa (raw, json)
Hash identifier:          QxIarvpsni5ZkVxMXmIhwwcFeDVVJrxcHjme4brlOYQ=
Subject key identifier:   E9:BE:04:77:C9:77:31:47:C3:84:95:6E:8D:D6:64:BA:6A:EA:F5:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE876032A0C37EF7A3DB8E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c0be101-8b62-3a0b-9511-d1a13d050b28.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33651
IP address blocks:        2001:559:c47c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:60:32:a0:c3:7e:f7:a3:db:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=949b1c39-ebb2-450d-978c-0ea09b1daec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:d8:30:c7:99:cc:4a:dc:53:7f:54:30:3f:
                    23:6b:21:53:8c:8b:05:96:a1:26:4d:cd:83:14:95:
                    f4:93:0f:25:01:48:55:93:c8:35:d9:e5:d3:11:1e:
                    c6:dd:8f:5d:15:00:de:d1:b4:a3:62:4f:59:8d:3d:
                    7d:57:6c:89:0b:17:39:8b:c9:f8:aa:99:d9:d1:8f:
                    3d:bc:a0:33:47:17:6a:8d:9b:f7:dd:af:70:f6:0b:
                    75:6e:67:94:99:a6:53:5d:4a:17:32:69:f8:f5:69:
                    3c:68:ec:6b:27:ea:da:69:ff:53:a1:d9:c9:bb:d7:
                    6e:0a:d3:fc:9e:3a:05:f2:38:54:94:fb:9b:c5:ab:
                    d9:87:d4:d5:3c:d6:1d:b7:0b:24:a1:52:e3:29:b7:
                    c9:f2:b8:2a:bf:6e:92:d3:9a:40:51:56:bc:01:0c:
                    78:fb:1c:1f:72:7e:76:33:da:3c:ca:4c:7e:57:da:
                    6b:ba:63:35:8a:5f:a3:6f:d0:99:c9:18:6a:ff:57:
                    e5:e8:db:8c:aa:4a:5b:84:08:0a:9a:fa:e4:cc:cf:
                    8e:73:e5:b6:43:ae:f4:69:ed:3f:80:92:25:f4:c0:
                    b6:26:97:8e:33:46:37:78:92:68:7e:95:3b:37:b3:
                    8a:ec:e7:64:7e:b0:5d:8e:1c:9e:d0:7e:c8:17:8e:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:04:77:C9:77:31:47:C3:84:95:6E:8D:D6:64:BA:6A:EA:F5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c0be101-8b62-3a0b-9511-d1a13d050b28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c47c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:7d:e1:0e:d0:88:b3:6e:7e:bb:51:b2:a2:2b:9d:d2:45:b9:
         86:63:13:47:47:aa:db:9a:bb:73:dd:3a:af:4b:94:1e:42:f6:
         f6:e2:fc:68:8e:60:ad:54:6e:1a:27:82:a1:66:23:b8:25:bf:
         a8:8d:41:cf:4c:02:18:93:58:d1:ae:0d:73:f3:5c:98:18:48:
         71:36:56:a5:e0:b5:78:51:be:0b:8d:fc:de:e5:43:3e:c3:c8:
         b9:0a:56:37:65:50:0b:df:b0:74:cc:c1:b7:5c:8e:d3:62:ae:
         08:9a:b0:3a:05:e4:e2:19:c9:56:5b:f2:4e:3f:52:15:c4:3e:
         b5:82:42:de:4e:47:46:1b:50:68:ee:37:a8:57:ba:91:d9:be:
         38:7b:54:3e:0c:53:9f:fc:e9:ec:70:8a:22:dc:b8:ef:fa:71:
         87:99:db:cf:40:29:aa:67:d7:1e:24:85:fa:dc:1d:23:db:01:
         78:c8:c0:18:25:4c:45:59:68:44:1b:b5:ad:3c:0b:e2:1a:e9:
         41:29:ed:6b:2d:c0:44:17:f1:b6:a0:a4:45:2a:1f:38:a7:54:
         e5:b7:22:57:d7:c8:ba:88:d6:f9:e5:14:bf:ce:c2:c4:25:ea:
         31:d9:f1:61:4b:04:2d:df:e2:22:c4:69:a5:b5:cf:1b:c2:ac:
         7f:19:af:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:56:36 2026 by rpki-client