Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab9dd4f-494a-346e-83ca-b2c50c86b411.roa
File:                     aab9dd4f-494a-346e-83ca-b2c50c86b411.roa (raw, json)
Hash identifier:          fmL0qlSA7OB11mp72emQlDFBFUk3Rrbb59GXws4VoQI=
Subject key identifier:   0D:F9:F9:86:23:27:BD:5A:EC:DA:D1:EE:37:B3:AE:8D:7E:73:C6:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49792DAAC7D66102F7F601C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab9dd4f-494a-346e-83ca-b2c50c86b411.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7015
IP address blocks:        2001:559:87bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:79:2d:aa:c7:d6:61:02:f7:f6:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fd52d2ab-633f-4b65-a8f9-4923677febc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ef:b1:53:bf:ec:b7:35:8b:fb:e1:43:62:87:
                    9d:3e:4e:5e:7a:2b:41:3a:7e:c3:27:c4:52:ae:7a:
                    5f:06:ac:5d:6c:44:8c:dd:f1:69:55:df:70:ad:b6:
                    94:0d:d1:cd:62:9b:bb:de:e8:69:9d:34:77:bf:98:
                    d2:58:21:c7:bd:c2:b9:ee:24:7f:8d:42:83:6e:2a:
                    39:e2:0b:3c:3e:79:06:e5:fa:49:23:a0:85:bf:1a:
                    59:1d:ae:93:97:46:3a:49:63:d4:05:3b:c7:e1:5c:
                    a7:b7:2c:7d:56:18:9e:5e:c2:aa:7b:ef:3a:92:d7:
                    75:81:8f:98:27:9f:d7:78:2b:ac:aa:38:ca:c8:02:
                    df:1e:aa:aa:49:fb:ac:db:43:59:70:06:31:8c:a3:
                    1d:55:07:86:21:7b:ba:43:56:e6:3f:96:2d:f5:62:
                    81:76:28:5d:27:79:e4:20:c6:b6:af:48:7b:68:7d:
                    ab:62:15:01:63:37:32:0e:7e:4b:12:91:8c:58:8c:
                    bf:b4:ba:e4:7a:c1:ed:88:8e:02:86:e3:36:29:b5:
                    34:de:0a:fa:79:35:22:98:0f:7d:07:c3:32:99:9d:
                    b6:9e:1e:1b:7f:2b:d6:25:78:ae:54:47:76:c0:6a:
                    a9:2b:92:f9:c1:c6:cb:f6:de:37:01:fa:fb:ee:1f:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F9:F9:86:23:27:BD:5A:EC:DA:D1:EE:37:B3:AE:8D:7E:73:C6:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab9dd4f-494a-346e-83ca-b2c50c86b411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:87bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:92:37:4e:9d:aa:fd:47:5c:50:a5:4b:08:53:c1:cb:17:30:
         71:63:25:0c:a1:cb:8b:cb:77:07:8c:af:ee:d3:cc:50:d8:af:
         3a:a1:8a:3e:5c:1c:19:4f:3c:f7:df:15:bf:a2:c1:3b:14:90:
         81:b8:08:ca:ce:73:9b:2d:18:9e:76:98:ed:57:9b:c9:6a:03:
         c0:0b:e2:a8:49:dd:8c:a9:e9:d2:9c:fd:88:af:28:39:82:9b:
         07:b3:2a:20:ec:44:70:67:d1:d1:c3:58:95:06:d8:d0:8d:3e:
         b5:fc:40:9b:01:8c:b3:59:0e:9b:46:8a:90:7d:52:92:6c:a7:
         2c:96:bb:0e:e5:aa:04:c7:9d:f9:e3:a1:b3:28:99:05:05:74:
         d4:93:e6:f1:df:b4:c5:be:03:c7:bd:21:c4:73:90:89:08:40:
         60:db:ea:b9:90:45:39:32:a8:59:5e:d0:ec:4f:a5:2e:ff:a5:
         6f:a8:5d:84:6d:f1:a6:41:64:d7:96:54:86:d4:b8:5d:be:18:
         cb:6b:14:b3:31:93:2d:f7:a0:68:05:65:40:56:0f:4f:98:88:
         7d:ef:27:5e:db:ac:f7:11:70:f1:25:f0:0d:f2:ab:2f:56:63:
         b5:61:ec:aa:ea:72:36:9f:b9:4e:94:f8:b6:ee:3e:6a:f0:70:
         65:73:1e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:01:27 2026 by rpki-client