Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/367e0f04-c152-3ec7-ac1d-01da64b313ac.roa
File:                     367e0f04-c152-3ec7-ac1d-01da64b313ac.roa (raw, json)
Hash identifier:          LoM6yTbuIz8meaNW/KhHnJWGThEp+F4y7MFi3mbQg0E=
Subject key identifier:   CD:0E:F3:95:94:17:AE:E6:52:09:5B:CF:F7:D9:6C:9E:E1:91:B8:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3D7DDC329FA61B20194A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/367e0f04-c152-3ec7-ac1d-01da64b313ac.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        2001:55d:9006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3d:7d:dc:32:9f:a6:1b:20:19:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=3b0aa808-b099-417e-8f1e-01ff92ffd37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:03:94:3b:a9:d4:2e:61:a7:4f:41:78:33:
                    f6:1b:e3:81:10:d0:b3:1f:be:c7:6d:bb:1a:05:33:
                    5f:82:72:32:8b:8a:01:bb:b9:c7:2f:d2:01:48:c8:
                    50:64:78:87:cc:da:ec:aa:e4:ac:94:42:95:7e:75:
                    9d:16:57:63:9b:39:53:84:70:46:da:ba:6f:95:54:
                    e4:d3:99:f2:c7:09:e5:5a:06:0c:8c:73:99:f0:38:
                    b9:3b:0e:df:8b:ea:ec:d0:59:e1:47:73:09:5c:76:
                    f4:d7:8f:fa:41:44:f0:cd:88:5a:53:98:c1:e4:c6:
                    57:3a:ff:fb:24:87:6e:ed:fe:a9:b7:46:37:5a:3b:
                    81:1b:91:2d:98:11:a3:72:72:49:27:5d:3e:66:fa:
                    18:12:ba:f4:a8:1d:43:dc:8b:a9:b3:b6:6b:3d:24:
                    3d:3f:eb:01:1b:74:51:55:3b:10:bb:6b:2d:70:fc:
                    e9:12:19:f4:71:d8:9f:47:9c:7f:d5:b8:66:6d:9b:
                    41:ad:81:4d:19:44:0d:63:bc:ba:89:f6:54:64:89:
                    f0:f0:63:71:0a:49:46:0c:e8:50:c4:cc:5c:4a:08:
                    88:62:bb:5c:9f:90:8b:e8:21:0b:11:ab:c3:17:00:
                    a7:fb:43:60:c4:3e:b3:d1:ee:7e:11:c2:5d:ae:c6:
                    5b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0E:F3:95:94:17:AE:E6:52:09:5B:CF:F7:D9:6C:9E:E1:91:B8:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/367e0f04-c152-3ec7-ac1d-01da64b313ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:55d:9006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:32:16:72:25:f6:0f:f4:8c:3b:5d:48:30:af:d3:7b:85:e2:
         97:b4:10:e7:b0:24:25:5a:8c:82:7f:6b:9e:ed:02:f0:25:fa:
         09:02:40:57:bf:c1:9f:6b:80:67:61:63:f6:3a:4d:0b:a9:9c:
         ff:0d:ff:94:4b:2a:7d:a9:c0:ec:56:8d:86:8a:76:2f:23:a6:
         42:78:2c:2c:ec:93:6b:9d:06:d4:01:c1:28:8f:da:ed:43:eb:
         95:b5:9d:b7:2e:5b:14:45:68:80:3e:df:a9:62:66:e9:b4:43:
         41:64:19:0a:03:0d:e9:4e:0d:ad:88:38:71:06:01:40:46:17:
         db:27:33:5a:35:c7:ca:b1:93:92:14:35:83:80:87:0e:b0:b9:
         05:d5:47:2d:88:ef:8b:a6:eb:01:01:e0:f9:3d:9f:84:eb:5e:
         65:a0:e9:81:ed:49:1a:c7:a5:ef:a7:45:ab:76:59:05:c5:7f:
         cf:8e:da:79:84:d4:4e:39:c9:56:ce:a3:d2:1c:8b:ec:bb:2a:
         86:0c:73:a1:29:d1:18:56:af:8f:7b:9e:03:69:83:01:8f:f5:
         97:b1:29:59:51:a9:6a:4a:ed:80:ef:61:25:15:d1:84:bb:76:
         bc:d1:5f:61:de:e3:d1:5c:1c:26:13:d7:36:8b:d4:57:4a:5f:
         31:5b:f0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:08:36 2026 by rpki-client