Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b803f7fe-ed9f-3ff3-8083-d35728473022.roa
File:                     b803f7fe-ed9f-3ff3-8083-d35728473022.roa (raw, json)
Hash identifier:          ZlpPHW5lCCOx5jqkAIEr1tctJggsaAoXiCC4ANK7vbc=
Subject key identifier:   7C:D0:5E:46:F8:1E:FD:6C:14:C6:89:6D:20:B5:03:72:71:AD:3B:0E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78EAB1B26BE2592B11C1D70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b803f7fe-ed9f-3ff3-8083-d35728473022.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33659
IP address blocks:        2001:559:1c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8e:ab:1b:26:be:25:92:b1:1c:1d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=52715b0b-0370-43e0-a785-941cbf74efb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:ef:5a:23:44:1e:6e:43:11:9f:9d:10:2a:
                    88:bf:04:cd:26:84:35:4d:64:e6:39:ea:d6:c3:c6:
                    a7:fe:cb:84:3a:a8:4d:08:d2:d5:9f:f3:d3:66:a7:
                    b7:07:d2:7b:41:2c:cd:b1:02:2a:aa:dd:82:5b:96:
                    9f:21:0d:5d:3c:bf:26:94:9e:77:c1:9e:1a:6f:35:
                    e6:ad:69:cd:8e:97:eb:85:a4:b2:92:af:e6:99:13:
                    13:0e:68:d2:77:82:a4:55:7d:f2:c2:d0:a3:7a:b4:
                    27:65:32:32:90:5f:7b:15:32:ae:22:8f:3f:9f:2c:
                    68:8c:cf:fa:92:d2:92:4e:3b:82:38:ac:7e:e2:d9:
                    c7:4e:c6:6f:0b:77:3f:ac:74:81:d2:c7:12:a2:91:
                    77:40:c3:71:64:78:9f:fe:d2:fe:1f:1c:98:00:40:
                    7a:c7:1a:ce:0e:08:bd:5c:ef:3b:28:34:c5:a4:71:
                    c1:0c:68:95:c5:7d:b3:01:ec:32:6d:5f:a7:5a:4d:
                    72:7b:19:b1:15:47:44:d8:73:bb:db:8f:54:a8:29:
                    6b:a9:c4:ec:3f:9a:5e:2a:b3:26:5f:92:af:ed:84:
                    a2:7b:c0:ed:f8:8d:d3:b5:41:3e:a9:8c:5e:15:3e:
                    f6:1b:23:c7:7c:bc:9f:1d:8e:bd:3c:72:ec:3d:a1:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D0:5E:46:F8:1E:FD:6C:14:C6:89:6D:20:B5:03:72:71:AD:3B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b803f7fe-ed9f-3ff3-8083-d35728473022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:1c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:6b:0a:5d:54:04:62:31:b7:1c:18:38:b8:25:67:5f:fe:73:
         ff:75:f6:fa:ce:19:68:ff:0c:9e:e5:67:a2:e1:d3:f2:60:9d:
         7e:c7:29:64:9f:c3:1c:53:be:15:29:5a:67:65:1b:9c:0a:30:
         cf:c0:e3:b5:c0:2e:11:ab:5a:99:8c:6f:88:83:3b:df:db:04:
         1d:77:8b:e2:9e:1d:1c:37:55:47:57:bd:1d:1b:83:c6:4e:fc:
         d6:64:d3:5d:e1:b0:2d:46:31:2f:ee:47:d9:23:8a:5e:fc:e6:
         76:bc:d1:f3:36:15:90:50:67:8b:b0:01:85:33:82:ed:e1:34:
         fe:03:17:38:42:eb:ad:92:9b:90:16:20:ce:61:26:23:e2:db:
         71:d5:76:fc:85:ad:b3:f8:bf:ef:11:f1:ac:1d:7d:3d:70:e6:
         ee:61:b4:9b:3e:f4:1f:93:8b:74:e2:07:3d:72:43:15:b7:e5:
         11:74:ed:12:b5:cb:ea:19:54:5b:08:b4:be:13:79:00:7a:09:
         8f:37:bf:9f:99:bc:37:b9:2b:8a:23:7e:51:7e:4b:4a:90:c5:
         82:4f:18:2e:15:3a:ff:c4:45:16:14:f3:73:36:43:6e:2a:b0:
         f9:c1:fc:51:f2:16:a9:c4:c3:10:7c:4b:4d:4a:df:0f:3a:4c:
         a5:4d:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:23:49 2026 by rpki-client