Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f667e87-9e07-3617-ba13-18724589df81.roa
File:                     7f667e87-9e07-3617-ba13-18724589df81.roa (raw, json)
Hash identifier:          KuYhb9hzO5gDdPSCIN7rBlgBQrQQMeJW1LLiDGWyuKM=
Subject key identifier:   EF:0B:49:50:A7:15:53:32:1B:38:07:9F:E7:01:84:25:98:1A:2E:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E736A29F9567D60B3C1F5E300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f667e87-9e07-3617-ba13-18724589df81.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     33657
IP address blocks:        2001:559:a020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:29:f9:56:7d:60:b3:c1:f5:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=9a9c51b0-6e58-4b37-81d3-a63f8e67d5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:50:54:cc:a2:c3:01:0e:19:b1:cb:2e:0b:3f:
                    54:e6:0b:12:e2:e4:c9:2b:63:25:f6:29:35:18:9d:
                    40:ca:7c:1d:de:1b:ed:76:c7:04:67:37:2e:04:2e:
                    99:50:ab:be:9b:7c:41:27:98:c7:0d:b8:6e:af:fe:
                    e4:13:e4:99:2a:d4:a3:7e:ec:2d:82:ab:cb:3e:c8:
                    01:33:2b:36:9d:f2:b4:a7:44:d5:19:72:4c:52:0d:
                    c3:f1:54:11:8c:28:19:0a:2c:b1:65:1b:cd:6f:4c:
                    cc:dd:98:dc:b5:1e:42:20:c6:4e:5f:dc:f0:fc:58:
                    08:22:74:68:57:1b:29:77:ba:f8:d9:45:bb:cb:c2:
                    a6:d9:0d:05:77:fd:9a:20:72:74:e6:69:1b:34:2d:
                    90:23:9d:d2:a7:53:d3:5e:c5:95:c9:d8:d0:c0:78:
                    2f:7b:4e:fd:f8:e9:cb:41:78:c3:e6:36:c5:5c:84:
                    25:c9:ee:00:04:d4:73:16:1d:9a:2d:9f:60:62:45:
                    d8:e1:d3:c8:76:1c:10:50:68:db:02:4e:d1:cf:aa:
                    37:fa:67:c0:d6:ad:80:88:dc:1d:8f:69:8a:e2:94:
                    ef:14:72:33:5b:fb:f3:a8:f8:70:8f:87:63:f9:85:
                    2c:6c:fc:14:10:68:a9:97:83:98:e1:91:ec:d2:6a:
                    aa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0B:49:50:A7:15:53:32:1B:38:07:9F:E7:01:84:25:98:1A:2E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f667e87-9e07-3617-ba13-18724589df81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:a020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:52:43:6f:55:8a:df:db:26:fa:97:1b:51:99:35:0b:8a:4f:
         ce:c5:a0:6f:ac:e9:14:94:c3:60:65:2c:da:92:db:e1:99:5b:
         bd:66:7c:80:54:e2:42:0a:19:ca:4d:ba:a1:b7:f7:25:20:fa:
         74:b3:4d:c3:18:1d:e3:6f:79:c0:af:ef:9f:cd:e5:73:33:77:
         eb:11:aa:ba:5b:fb:94:9e:4f:ca:ce:f5:7a:5e:37:91:45:3b:
         f3:ff:16:a7:da:76:ff:5a:65:15:ca:ee:7b:c4:be:bc:f6:22:
         55:17:c7:ef:0b:f4:93:8e:44:b3:39:52:0d:33:15:dc:1b:71:
         f2:f6:cd:ae:73:dc:d6:6f:45:75:82:41:66:8a:d8:d0:15:65:
         2e:2a:99:00:22:f7:cd:fe:ed:87:2c:aa:f9:0b:7a:1e:bb:f0:
         39:71:14:79:90:84:d9:0f:cb:f2:27:d3:37:93:08:1b:63:b0:
         a0:5c:67:50:28:84:71:bd:af:74:cc:2f:ac:af:41:3f:b8:c6:
         40:27:9c:63:f1:7d:43:54:78:02:a8:19:71:c8:f8:b8:7d:ca:
         eb:ea:88:6d:13:3c:63:e8:15:1d:e7:97:ad:bc:8a:83:6b:43:
         a9:95:b9:d9:43:cb:4e:e6:2f:06:32:4d:4d:17:1c:86:8b:11:
         85:0f:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:16:29 2026 by rpki-client