Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85ca1e84-1f41-3812-8877-e69e0e57e49e.roa
File:                     85ca1e84-1f41-3812-8877-e69e0e57e49e.roa (raw, json)
Hash identifier:          NZC8DZhcEGaDbhLs1wG6LHcleYgHR/fPgGoFAvaH/zM=
Subject key identifier:   B2:9F:E8:05:A2:9A:E0:F7:A2:EA:C8:6F:9A:97:E3:7E:DF:06:EE:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86C8CB70FBACD289B164C8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85ca1e84-1f41-3812-8877-e69e0e57e49e.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33659
IP address blocks:        2001:559:5dd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:c8:cb:70:fb:ac:d2:89:b1:64:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=732a06e8-3ba0-43c0-81ce-70c2a094b7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:03:7c:1f:95:0a:19:c0:b5:c6:80:3c:34:ec:
                    99:aa:dd:ee:0e:47:32:a2:7c:27:9d:fb:c5:53:a5:
                    5e:72:15:1b:5d:26:fc:b8:d0:04:94:1c:ff:d0:43:
                    c0:40:c1:23:39:1d:50:03:11:30:ed:83:5f:1a:a2:
                    74:1e:34:4d:94:b2:aa:dc:00:a3:5e:a6:fd:d8:92:
                    f7:47:bd:a2:8b:29:55:92:c8:27:23:bf:1c:e4:6d:
                    d6:d3:b0:20:50:db:23:d3:08:37:58:6f:2b:89:09:
                    8d:0b:c3:1c:f4:10:ad:8a:14:21:cc:7b:c3:bf:a5:
                    33:eb:14:59:19:27:fd:0a:5d:36:dc:f6:56:d5:36:
                    bb:60:08:7b:af:25:08:b0:e3:fa:26:4c:9b:01:61:
                    4c:f0:26:36:1b:19:42:71:2c:15:30:e8:93:49:c7:
                    0a:07:ab:23:58:52:1f:03:a4:f2:b3:00:8b:ba:29:
                    81:f5:92:ff:2d:a6:80:3b:14:5a:f8:b1:9b:84:d3:
                    94:08:c4:b6:b8:85:9b:d1:31:03:0d:14:2a:2f:27:
                    08:36:bc:d0:63:e9:67:af:f4:1f:86:bb:4b:9a:25:
                    12:ce:8b:3c:89:b9:51:a0:71:fd:83:f2:a0:c1:d8:
                    5c:fa:87:46:62:a3:50:54:7c:65:21:09:bf:70:95:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9F:E8:05:A2:9A:E0:F7:A2:EA:C8:6F:9A:97:E3:7E:DF:06:EE:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85ca1e84-1f41-3812-8877-e69e0e57e49e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5dd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:60:ab:ba:f3:6f:32:16:2a:26:95:f1:5e:6d:9a:16:5f:9b:
         2b:83:65:07:d5:bb:0b:aa:09:b6:6a:0d:1a:38:b5:e5:24:17:
         30:73:5b:9a:19:49:71:66:52:81:de:6e:9a:2a:8a:6d:f7:9b:
         0c:11:5c:a5:a2:40:d3:e7:e8:c5:fd:3a:28:f0:08:c5:ac:8f:
         a8:db:52:61:55:d2:7a:04:58:5f:bf:5b:00:76:21:59:12:e8:
         bf:b6:b0:a1:03:8c:9c:8f:21:e1:a9:ac:83:da:0a:63:e3:78:
         eb:b5:34:74:e3:8c:5a:28:9f:8f:90:c7:2d:7c:16:22:bf:07:
         2a:0f:38:24:56:80:dc:12:2b:04:c1:09:36:a5:cc:64:41:87:
         31:7a:f9:30:8d:d0:bd:42:26:91:f1:b3:4c:56:57:c1:91:6f:
         39:4e:8a:93:5b:30:4c:7d:7f:4e:68:ac:79:2c:f7:25:2a:21:
         12:3a:f5:91:eb:79:13:b3:2e:4c:91:87:75:83:34:ac:2b:59:
         21:88:56:a1:1d:1e:d4:70:d4:59:25:51:4c:28:34:57:07:cd:
         e2:41:3b:51:24:4b:11:b5:27:99:45:c7:d1:58:d4:96:97:f6:
         36:4b:d0:cc:34:e1:c9:2a:2f:2b:fc:ec:d2:59:45:8e:fd:9c:
         64:05:cb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:07:07 2026 by rpki-client