Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/386889dd-a5cf-3670-9e80-7424378fffb9.roa
File:                     386889dd-a5cf-3670-9e80-7424378fffb9.roa (raw, json)
Hash identifier:          WvSprvJJ5cFAPba3DNJFHhM94s7c5UrartJaIUsmuE8=
Subject key identifier:   58:E8:F2:97:88:B4:C1:63:C8:34:A5:88:D7:B5:3D:75:11:03:BA:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE869E36E55EB58AFCB166C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/386889dd-a5cf-3670-9e80-7424378fffb9.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33287
IP address blocks:        2001:559:5b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:9e:36:e5:5e:b5:8a:fc:b1:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=d180a988-3aec-4704-b12d-dd3520287382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:76:3f:d7:c1:b3:e8:66:7c:4c:72:0a:10:
                    f9:19:04:3f:20:f1:d9:f6:bb:15:50:d4:b1:e3:55:
                    ad:b6:7e:da:55:f1:4e:c6:80:64:37:9f:2e:da:6d:
                    f2:e0:eb:43:a8:4f:90:44:c8:29:ff:b2:d2:3a:03:
                    f8:d7:c1:91:26:2f:88:08:b9:f1:31:1c:39:3f:1c:
                    e6:76:b3:70:ab:09:2a:18:b0:a9:e9:f5:08:28:f2:
                    9f:3f:9e:df:a1:be:3a:e5:9b:c3:4d:ea:b2:fe:c1:
                    44:39:36:7e:25:ba:84:73:fb:f0:0b:7f:0b:bc:89:
                    4e:5c:49:92:6e:4f:c6:d4:af:58:fa:0c:88:71:33:
                    e1:58:a6:32:a3:58:5a:46:6d:29:81:67:c2:7e:3f:
                    f4:a3:26:5d:26:dd:9b:b0:cc:0b:11:ad:df:59:dd:
                    c7:0b:e7:be:ff:4b:35:9e:9b:5b:d8:b6:4f:0c:04:
                    44:ef:c6:99:dd:64:fe:03:f9:32:ba:23:7f:bf:24:
                    e9:18:71:3a:c1:d1:26:ba:9e:79:68:ad:60:4b:8f:
                    09:49:69:7b:62:d1:ea:c1:b8:a7:a3:6a:fa:3d:18:
                    53:5b:41:e6:0e:44:a6:75:84:d1:cd:44:74:fb:8d:
                    dc:a8:6f:34:ed:bc:86:1e:47:bf:50:33:4f:59:dd:
                    0f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:F2:97:88:B4:C1:63:C8:34:A5:88:D7:B5:3D:75:11:03:BA:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/386889dd-a5cf-3670-9e80-7424378fffb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:00:99:32:00:0e:7b:0d:ad:1f:ff:75:de:99:2f:00:40:01:
         25:81:04:ed:6c:aa:28:ba:03:42:99:c8:8e:15:67:74:cc:44:
         e0:58:28:6b:9d:ff:0c:72:0f:fd:51:8c:01:e4:f4:34:4d:66:
         59:96:54:94:59:b6:ab:16:7e:1d:de:0e:cc:ea:1e:73:f5:20:
         0e:70:d4:87:91:74:71:b1:08:a5:8f:d5:15:44:4f:43:4a:b1:
         53:09:c9:ea:f0:79:71:ad:6c:3c:e3:62:2c:a5:29:41:68:a8:
         01:d1:c7:c0:1b:8c:68:ce:43:0a:93:29:a2:b0:4c:c3:cb:60:
         72:16:6e:ff:c4:d8:14:17:21:2d:12:d6:fa:a6:f2:94:e2:a7:
         4f:2d:9c:23:75:54:d7:55:86:69:a8:de:5d:75:60:1e:b2:a2:
         65:a0:74:7e:db:e4:99:28:6d:d2:3d:94:67:12:39:8d:0e:e0:
         e4:64:07:f7:7b:76:cf:f2:c7:34:8b:09:43:8e:b1:61:10:a9:
         d5:74:80:5e:4c:10:3c:a9:e5:39:fc:c9:73:bb:17:5d:43:1c:
         4e:65:b4:09:e6:95:fc:df:9b:28:37:d3:06:16:13:0b:3c:92:
         1b:e1:df:3f:9b:7a:de:79:e9:2e:6c:c8:76:f7:0d:14:0e:73:
         9b:ef:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:11:45 2026 by rpki-client