Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6cf49e2-b357-3405-8ebb-de203998a69b.roa
File:                     b6cf49e2-b357-3405-8ebb-de203998a69b.roa (raw, json)
Hash identifier:          tQby2o/Hgg8PY2e8/arS8J2BkKErcgTv4JG+eB3LCzQ=
Subject key identifier:   E3:0B:7E:B1:D8:33:B5:5E:34:30:8E:90:CB:61:B2:61:A9:04:D4:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86CE477BAF3D2D1054C4F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6cf49e2-b357-3405-8ebb-de203998a69b.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33659
IP address blocks:        2001:559:c30e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:ce:47:7b:af:3d:2d:10:54:c4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=e910555d-fe68-434d-865f-6558355e2530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:38:a3:1f:e7:8b:1e:8f:64:b2:49:18:60:
                    a6:fe:2a:95:27:7c:a5:4c:e7:45:78:54:23:5e:a6:
                    25:a6:3f:4c:83:d0:04:05:22:b1:b9:eb:7a:38:fa:
                    e6:66:85:f1:11:1a:8a:03:08:3b:bd:4c:b7:fa:be:
                    b8:ea:cf:f0:89:14:3e:90:04:9e:e8:8b:ab:5e:41:
                    68:7c:19:e8:fc:36:f0:05:4c:be:9a:23:84:8d:ba:
                    6e:6f:7d:c1:d9:1a:17:30:97:58:14:a4:48:32:f2:
                    d0:49:a0:8c:ce:65:8b:4e:98:35:01:f9:5c:66:24:
                    40:61:c7:44:d9:62:d3:43:31:4a:4d:f5:e4:01:25:
                    08:86:cf:7e:6e:e2:f1:08:4d:3d:9e:0c:17:c6:14:
                    84:ed:79:53:44:e9:81:27:0e:78:ac:fd:ce:4e:c3:
                    c7:4f:2b:c0:34:bf:b3:37:c9:34:92:b8:f5:6c:3c:
                    33:8d:fe:5a:47:d2:a7:a0:b0:5e:3c:d8:d1:5f:95:
                    68:0b:54:6f:54:ef:31:bd:c5:ef:4d:db:d9:9f:28:
                    8d:91:dc:e2:86:e0:ff:69:a3:47:67:3e:bc:53:f6:
                    c1:94:37:5b:c9:07:5a:25:8d:f9:8c:90:1b:ec:1f:
                    68:c3:85:ee:23:8b:9e:54:91:d2:51:e3:2e:d5:25:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0B:7E:B1:D8:33:B5:5E:34:30:8E:90:CB:61:B2:61:A9:04:D4:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6cf49e2-b357-3405-8ebb-de203998a69b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c30e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:30:e8:25:39:f3:f4:30:88:77:43:ea:8e:67:e0:3e:0d:10:
         17:af:66:26:c9:a4:a3:d9:95:71:b6:c4:2e:c1:48:1a:de:09:
         cb:88:d5:49:37:66:c2:8c:33:2d:d4:51:e7:d5:4f:fc:c5:69:
         c3:87:5f:44:96:59:e7:e6:11:47:82:fe:75:dd:1a:66:30:b8:
         8b:79:a9:21:82:a1:4b:9b:7a:96:c0:09:79:03:3d:af:db:1b:
         9a:54:c9:15:ab:a2:78:e2:53:36:b8:0c:aa:0b:68:41:82:a3:
         c1:3a:e2:2f:40:43:8d:f2:d2:34:fa:db:9d:16:d6:ac:5a:84:
         48:41:ae:27:72:30:05:80:9c:af:41:f2:cd:53:77:82:c9:87:
         ae:b3:04:4f:11:73:10:fb:86:5a:17:fd:9c:bf:ba:45:07:15:
         de:1f:a6:42:62:45:b1:73:b9:74:a6:6d:ed:88:e5:8a:10:cc:
         85:cd:ba:da:b0:2d:de:5f:b7:8b:69:8c:b5:af:e9:f3:35:b3:
         20:62:d7:71:a4:f5:25:29:cc:0e:66:3a:2b:40:e0:16:c6:1e:
         9b:47:e1:eb:ba:65:3f:eb:0f:62:d3:fd:f3:6e:4c:bf:1b:fe:
         5e:9d:40:3e:cf:43:48:40:a8:da:0f:ae:dc:00:ab:58:96:c9:
         ca:79:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:07:11 2026 by rpki-client