Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce510ce8-8976-3ca1-bfc7-ad015032cacc.roa
File:                     ce510ce8-8976-3ca1-bfc7-ad015032cacc.roa (raw, json)
Hash identifier:          p9sTEyMOhwMu0BxoenPliRtB4qDFkeZK1hSzsGOj0WA=
Subject key identifier:   8D:37:76:14:12:C4:A1:EB:80:E2:1A:7B:44:BB:2D:77:0F:89:0F:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86CBA3817D178A9DB3CF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce510ce8-8976-3ca1-bfc7-ad015032cacc.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33659
IP address blocks:        2001:559:85b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:cb:a3:81:7d:17:8a:9d:b3:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=f0913d13-b1ed-47f1-aa12-a62278ff1b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:db:48:cf:76:30:fe:3e:b4:3d:21:a3:19:
                    4b:bf:d5:54:1e:85:5c:1e:19:f1:bc:38:aa:ad:1d:
                    d3:40:26:4e:ae:03:ec:f3:71:4a:e5:a3:d8:31:4c:
                    b2:9d:76:07:19:e4:13:0b:96:e2:67:73:08:ef:4c:
                    45:a2:40:34:bb:5d:2e:1a:88:00:72:08:60:60:f6:
                    4f:54:fd:79:e1:28:1f:52:5d:68:6d:f4:4d:03:ca:
                    2b:e6:e4:2f:e2:2e:2e:54:92:87:d5:13:7b:e3:11:
                    5b:9e:8f:2c:17:21:4a:b5:c0:2e:df:72:1b:68:0e:
                    6c:dd:88:c5:a1:97:cd:50:d1:ec:49:ac:8e:b9:0a:
                    eb:8d:f9:e4:91:79:74:ba:15:85:e6:97:9f:90:e5:
                    8c:e1:37:45:ae:ea:90:3e:6c:71:0a:ab:73:4e:76:
                    00:6a:46:de:91:33:b3:6f:93:24:d5:44:66:02:c2:
                    bf:e9:0d:81:79:8d:f8:75:90:dd:7d:27:90:06:1a:
                    d5:e6:09:60:3b:8d:fa:82:92:8b:7e:64:b9:c0:4c:
                    a8:09:2c:de:c0:ac:ec:29:b7:46:fe:0e:6c:4d:42:
                    07:ac:d9:b2:18:9f:42:2c:1d:e8:4c:fa:3e:7b:f2:
                    97:c8:be:f2:64:8a:45:67:35:2e:8e:f5:3c:f8:24:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:37:76:14:12:C4:A1:EB:80:E2:1A:7B:44:BB:2D:77:0F:89:0F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce510ce8-8976-3ca1-bfc7-ad015032cacc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:8f:ae:4d:30:3b:d5:1e:91:b3:0c:29:cf:96:c5:36:ef:
         10:23:5b:bd:9c:d0:29:79:3a:5f:ae:88:d4:0f:70:d3:a5:e0:
         52:fa:00:2a:33:e4:f8:a0:ba:33:2a:2b:eb:68:fd:c1:3c:e9:
         1a:6c:e8:e6:d7:ee:2e:7f:7f:19:7c:80:be:1b:be:5a:00:56:
         2d:0a:c3:66:67:79:c6:47:64:e4:8d:b9:87:83:e1:d0:3e:1c:
         d7:35:e6:e7:b3:6f:04:ad:5b:ec:98:9c:fe:b8:dc:1d:9b:37:
         89:2c:26:80:48:b6:37:db:e1:91:d5:91:24:8a:90:20:d9:69:
         2f:c7:65:58:4a:f9:5d:9b:33:3f:bb:17:cf:f9:43:17:96:0a:
         c0:44:bf:f7:ab:b2:65:22:c8:90:d7:9c:1c:c1:6f:f2:b9:58:
         17:9f:22:d9:d8:86:2d:c8:ed:03:ea:de:ec:86:13:e3:fc:4a:
         e0:44:ab:59:d3:02:4f:21:e5:27:fa:10:6d:eb:6c:28:d2:f0:
         2a:d7:aa:eb:2b:11:15:c5:af:7b:fb:a5:a7:fc:ee:f0:b6:16:
         f2:26:af:13:e5:01:7a:95:70:e3:8f:62:7f:f1:5a:32:f2:bf:
         10:26:19:8a:e9:9a:90:e2:a7:e3:3b:35:4f:46:34:42:bc:1b:
         16:fc:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:11:01 2026 by rpki-client