Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/241e290f-ae6b-3648-beca-e84d834276ee.roa
File:                     241e290f-ae6b-3648-beca-e84d834276ee.roa (raw, json)
Hash identifier:          JfCogKZ2ueDqPrqs8BeYiozDnMyfJOpOoLUgwKIhIDQ=
Subject key identifier:   A4:66:31:F4:D7:68:C2:FA:FD:94:16:EC:96:6A:D2:54:F4:B0:1F:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE875FBE9711C8D6691EC800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/241e290f-ae6b-3648-beca-e84d834276ee.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33651
IP address blocks:        2001:559:c2f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:5f:be:97:11:c8:d6:69:1e:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=df6fa919-88f9-48d8-b67b-a341d82f02d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:65:16:aa:58:eb:82:50:ec:12:de:45:3b:
                    be:b3:62:40:e3:b8:08:69:de:99:36:15:7e:e8:d6:
                    db:1e:0b:3d:f5:73:d7:37:5e:a7:75:9e:76:de:16:
                    d4:a5:64:65:c3:4c:40:f0:3b:ab:6d:21:58:4f:15:
                    e7:e6:f4:47:81:23:d3:cf:e4:e1:c3:c6:bc:3f:93:
                    53:c5:89:24:38:79:ab:0b:fe:21:d2:39:cc:06:1d:
                    c4:0e:7a:47:9d:ce:79:68:c6:d5:75:db:f4:ac:16:
                    d5:6f:f5:93:a1:12:3b:f2:bf:21:dc:8b:f6:4b:04:
                    21:54:ea:77:5a:3b:19:7c:a8:55:09:66:42:5e:46:
                    ae:66:b3:d4:3d:f9:51:b1:98:93:8c:e7:3a:63:ce:
                    88:6b:94:7f:6b:bf:37:c3:85:72:d3:36:ad:27:40:
                    6c:f5:0e:17:8f:20:0e:2a:87:50:32:2e:81:fb:9d:
                    e1:2e:6c:4e:89:c3:50:2b:12:c5:18:0f:a9:90:e4:
                    18:b5:e6:17:24:66:46:dc:66:5b:b8:b7:79:83:f2:
                    2d:7b:c3:94:1b:09:da:56:f2:d5:7b:4b:06:3b:c1:
                    bf:ad:1c:7a:50:d2:26:de:23:d7:b9:8d:73:23:be:
                    cb:57:03:34:da:83:cf:1b:10:95:de:97:3c:54:5b:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:66:31:F4:D7:68:C2:FA:FD:94:16:EC:96:6A:D2:54:F4:B0:1F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/241e290f-ae6b-3648-beca-e84d834276ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c2f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:75:ff:86:5c:53:e8:41:68:ef:11:2f:90:0f:69:6e:ac:
         ce:58:f3:d3:41:e7:c3:59:df:91:89:a5:79:d3:d6:56:25:e6:
         55:64:d4:5f:65:98:32:71:d6:1a:db:ab:67:59:da:89:38:41:
         6c:1b:1a:2b:0b:88:aa:49:89:e6:c5:07:95:7b:82:8d:11:17:
         04:b1:a5:95:cb:e7:ee:16:dd:56:aa:11:fe:b1:e9:55:85:24:
         58:f7:0f:3b:8b:41:91:21:d9:37:a5:dd:8b:77:22:fb:dd:b7:
         5c:83:83:63:d6:13:f6:97:cf:4b:2d:13:3a:82:0d:ac:c7:75:
         2a:06:88:c2:f4:73:39:fb:82:05:bd:a6:2c:0e:08:4f:67:a0:
         01:60:91:c8:e9:71:82:8f:09:e5:36:ad:ef:15:8c:c9:16:1e:
         25:ad:fc:39:76:bc:a9:96:25:0c:87:5e:e8:17:ed:28:07:08:
         f9:16:7d:4f:bd:65:23:0d:5d:b3:b3:bc:74:54:3a:b5:f4:7b:
         22:3a:ea:8f:20:a5:da:38:0a:7b:c6:ae:4b:f8:d3:a6:05:b8:
         24:2a:84:5e:20:51:2c:35:7e:9d:e8:cf:0a:4d:fa:2b:21:18:
         9e:1f:14:9a:5f:44:a8:8b:af:0e:55:e3:10:62:8b:35:67:57:
         a8:b4:f0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:54:01 2026 by rpki-client