Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d46ff06d-bb2f-34d7-b3cf-cbc49337055d.roa
File:                     d46ff06d-bb2f-34d7-b3cf-cbc49337055d.roa (raw, json)
Hash identifier:          CL1KltANun4asAB+J36E7PeqIzeucwLqmmpkjbHiIK8=
Subject key identifier:   45:3D:8E:C3:CF:F8:61:95:1F:89:15:BA:AF:5D:B1:C1:DA:A5:3D:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E66DA278FAB37F03CD22D2380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d46ff06d-bb2f-34d7-b3cf-cbc49337055d.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     33657
IP address blocks:        2001:559:a026::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:27:8f:ab:37:f0:3c:d2:2d:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=7cc7d260-8b9e-499b-9221-d5e3ccc8962d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a8:62:c7:91:28:a8:ff:50:26:70:46:16:8d:
                    24:e4:82:38:04:8f:31:1e:ef:f7:f2:6d:0b:60:ae:
                    3b:e5:28:bc:3a:95:9d:b9:1a:7e:81:07:81:ac:02:
                    94:13:22:f7:47:be:14:ff:3c:e2:34:4b:fc:73:54:
                    3e:65:6b:d1:c2:3b:62:6e:81:22:5e:c3:b7:69:a5:
                    8a:66:77:b9:1a:fd:1a:8f:c0:28:14:70:2e:b5:ba:
                    e0:83:8f:3d:bf:11:36:12:06:8b:e5:4b:41:ee:2e:
                    ee:b9:0d:c1:f8:e5:16:a2:c9:7e:25:32:cd:a9:3a:
                    5f:f0:90:71:c8:ad:c3:52:c6:23:2d:c3:a0:89:90:
                    ec:68:31:1f:c5:f4:7e:78:d5:cb:c6:4c:0d:be:fe:
                    d5:b9:8c:89:85:e4:c9:55:16:63:03:58:c0:19:0b:
                    ec:c1:41:03:7b:45:63:2c:8d:7d:6b:e0:1d:32:33:
                    d1:a9:8b:47:ad:f3:a7:22:4a:e2:76:db:2e:11:63:
                    a6:2f:a9:d1:f9:8f:5d:93:dd:d0:89:df:02:cb:07:
                    e2:b5:a3:b5:b8:d5:91:0c:0c:55:b4:fe:29:35:4e:
                    6b:bf:00:c3:72:b0:55:c9:fe:c5:e7:24:89:18:00:
                    b9:23:64:8a:f8:33:be:a8:d7:26:e1:3e:a8:ea:53:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3D:8E:C3:CF:F8:61:95:1F:89:15:BA:AF:5D:B1:C1:DA:A5:3D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d46ff06d-bb2f-34d7-b3cf-cbc49337055d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:a026::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:ca:d5:08:91:cc:4a:84:39:ba:9e:4c:df:18:3f:80:a2:
         70:58:34:2c:06:dc:0a:4d:0d:73:56:17:ad:06:31:30:71:9f:
         de:b3:40:7b:fe:c8:fb:57:57:5a:92:bc:bb:f3:b0:4d:89:3f:
         19:ac:28:1e:87:a6:20:cc:d4:fb:c0:2a:76:1c:4f:8b:7f:27:
         ee:20:20:11:84:74:e6:50:fc:25:27:60:47:df:9e:c4:cc:a9:
         9a:4e:c5:e0:3b:64:a1:56:02:24:8e:f8:e5:af:15:c3:3f:5b:
         66:f9:94:75:2e:14:6a:aa:7d:81:3c:98:2a:7e:77:a0:db:79:
         6a:08:94:b0:f0:09:94:1e:63:60:b1:34:a4:a5:9f:c2:c6:52:
         28:85:6d:63:21:55:4e:15:98:ca:c6:68:90:43:78:27:fd:c5:
         ae:37:ad:82:bd:25:6b:5f:e1:fe:8c:33:f4:7f:46:c7:04:0f:
         2c:0b:2c:22:d6:c6:5a:ea:58:27:5d:42:b9:bd:d7:33:5e:73:
         d7:14:a4:7a:fb:90:b3:39:95:58:7f:a0:d5:d6:36:50:d2:4b:
         5a:be:15:23:63:6f:64:a9:d0:66:7d:b1:1c:53:1f:c3:6d:c5:
         91:af:6f:d6:02:2e:52:d4:d9:55:6f:10:cc:04:5d:f4:a8:b1:
         55:77:b6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:03:23 2026 by rpki-client