Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9d7123-f8f8-3356-82e7-12a1d23ef9c7.roa
File:                     3d9d7123-f8f8-3356-82e7-12a1d23ef9c7.roa (raw, json)
Hash identifier:          HHRpSG8ljmrxZS1KuY0ifnQkUwO3Y6FWsNzn4UE0WcQ=
Subject key identifier:   5F:7F:14:4E:2C:B1:07:58:26:6E:F6:91:3F:E5:C9:66:65:3E:38:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE85FDA35CB88F55E3833D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9d7123-f8f8-3356-82e7-12a1d23ef9c7.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     19047
IP address blocks:        2001:559:0:15::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:fd:a3:5c:b8:8f:55:e3:83:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=9b42d557-f21a-46e9-983c-537c1f817807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:62:44:a3:29:14:53:53:9d:c8:9d:0d:d1:
                    cc:ef:98:18:07:98:fa:bd:c4:cb:d9:a6:8e:97:55:
                    a9:ef:2a:a9:b6:ed:92:e1:2e:5b:52:48:80:b4:b6:
                    b7:8e:87:79:3b:90:bb:fe:45:03:aa:07:3d:fc:18:
                    27:5b:c9:38:dc:84:ec:ce:4e:fb:ff:27:b6:45:f2:
                    1c:1b:86:6f:fd:df:3e:fd:e9:69:53:ef:97:98:23:
                    f0:10:db:84:4b:b5:8d:c1:6b:f2:a6:65:2b:13:d0:
                    c6:ef:bf:93:d0:08:52:7b:3f:52:17:07:34:05:1f:
                    85:4f:77:ff:71:88:94:ac:eb:b2:96:9f:09:95:6f:
                    e1:9a:66:a5:4c:d9:9e:2f:84:b9:5b:c6:5c:26:0d:
                    62:f2:63:1f:b0:07:10:ae:28:f7:2c:dd:dc:a5:89:
                    72:9f:9b:1f:2e:bf:71:26:9c:f9:d5:66:0c:b9:b5:
                    d0:7e:80:ff:e7:20:20:37:cd:30:4b:26:04:6a:1f:
                    2a:1b:27:dc:f5:e6:0b:85:b2:86:42:c1:d8:fc:47:
                    2d:4c:59:c3:55:36:d5:8b:c0:e0:57:ab:17:f4:d8:
                    d6:c8:ac:31:35:d7:1c:f8:57:e6:3d:af:20:b9:57:
                    d0:cc:92:5b:b9:d2:9e:73:6c:73:87:89:78:54:df:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7F:14:4E:2C:B1:07:58:26:6E:F6:91:3F:E5:C9:66:65:3E:38:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d9d7123-f8f8-3356-82e7-12a1d23ef9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:15::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:52:a3:5c:70:85:eb:2c:36:53:4d:ce:db:52:61:35:e5:a2:
         30:3d:4c:b8:18:10:87:37:f7:6f:ff:c7:18:6c:31:35:88:8c:
         a5:73:f5:17:a7:4f:6f:3a:3a:51:58:a5:52:d6:c5:f8:15:8a:
         b1:b8:13:07:d8:ab:cc:ff:c9:ba:46:84:e4:0e:87:03:54:ba:
         9d:39:c9:07:79:6f:f7:d2:82:bf:ec:12:b1:7c:b5:bb:59:e4:
         a1:36:c7:bb:94:40:66:24:ad:fc:72:8d:a6:a1:d9:63:b3:fa:
         10:e3:22:fe:95:06:56:fd:7a:5c:01:1c:79:9d:e2:0c:6e:1d:
         3b:8f:60:a0:ba:5b:97:2c:53:f7:0e:52:87:71:02:54:cb:a8:
         00:9d:b0:ce:86:52:b1:85:9a:51:ed:37:0f:f5:f3:7a:cb:8e:
         22:8d:67:49:d2:e2:bf:fc:ca:a0:c9:e9:87:c1:dd:52:35:00:
         0e:28:eb:02:31:b9:13:a9:3f:99:d1:1e:66:3d:ab:b6:f5:b9:
         5a:b8:05:23:2b:6d:33:d7:dd:1a:47:ab:bc:0c:04:f5:96:20:
         c4:da:4f:94:de:1c:fe:1b:10:64:22:8f:8d:7b:eb:a9:e6:a6:
         60:45:fc:b8:40:42:81:f6:41:cf:f8:ad:b1:b8:c2:6b:c0:a3:
         1e:63:f9:ab
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3ehf2jXLiPVeODPYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
OWI0MmQ1NTctZjIxYS00NmU5LTk4M2MtNTM3YzFmODE3ODA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcBiRKMpFFNTncidDdHM75gYB5j6vcTL2aaO
l1Wp7yqptu2S4S5bUkiAtLa3jod5O5C7/kUDqgc9/BgnW8k43ITszk77/ye2RfIc
G4Zv/d8+/elpU++XmCPwENuES7WNwWvypmUrE9DG77+T0AhSez9SFwc0BR+FT3f/
cYiUrOuylp8JlW/hmmalTNmeL4S5W8ZcJg1i8mMfsAcQrij3LN3cpYlyn5sfLr9x
Jpz51WYMubXQfoD/5yAgN80wSyYEah8qGyfc9eYLhbKGQsHY/EctTFnDVTbVi8Dg
V6sX9NjWyKwxNdcc+FfmPa8guVfQzJJbudKec2xzh4l4VN+ISQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFF9/FE4ssQdYJm72kT/lyWZlPjimMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Q5ZDcxMjMtZjhmOC0z
MzU2LTgyZTctMTJhMWQyM2VmOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA
ABUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAuFKjXHCF6yw2U03O21JhNeWiMD1MuBgQhzf3b//HGGwxNYiM
pXP1F6dPbzo6UVilUtbF+BWKsbgTB9irzP/JukaE5A6HA1S6nTnJB3lv99KCv+wS
sXy1u1nkoTbHu5RAZiSt/HKNpqHZY7P6EOMi/pUGVv16XAEceZ3iDG4dO49goLpb
lyxT9w5Sh3ECVMuoAJ2wzoZSsYWaUe03D/XzesuOIo1nSdLiv/zKoMnph8HdUjUA
DijrAjG5E6k/mdEeZj2rtvW5WrgFIyttM9fdGkervAwE9ZYgxNpPlN4c/hsQZCKP
jXvrqeamYEX8uEBCgfZBz/itsbjCa8CjHmP5qw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:48:42 2026 by rpki-client