Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5f813c6-08ba-3947-a112-32e6b8748428.roa
File:                     f5f813c6-08ba-3947-a112-32e6b8748428.roa (raw, json)
Hash identifier:          ME3UaykyieGtgwKERjsZln1D0Sbu7KyLZVJcGkujioM=
Subject key identifier:   CB:5E:EE:68:BD:E1:F2:78:D1:D9:BA:72:99:13:A8:2D:46:E7:60:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE86CED6993FD9B893DA3E78
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5f813c6-08ba-3947-a112-32e6b8748428.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33659
IP address blocks:        2001:559:c3ba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:ce:d6:99:3f:d9:b8:93:da:3e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=b23f4d5f-1089-429b-a774-8e19ad7ce253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:03:3b:03:ab:aa:5c:71:99:54:9c:d0:68:
                    ef:02:23:48:75:2b:68:a8:fe:f3:4e:f1:ac:30:9b:
                    43:0c:6e:d6:a2:83:b4:ba:5b:44:ee:a9:ec:46:f7:
                    84:5a:92:cd:59:bf:29:1e:80:9b:53:45:dc:57:2a:
                    1b:86:a9:f7:fa:37:c6:48:c7:9d:39:92:b7:f4:38:
                    1e:a4:e7:81:9d:74:a4:d0:a3:74:82:97:6b:3b:56:
                    e9:53:06:08:ef:65:74:39:06:fd:56:fc:28:cb:82:
                    0a:a6:c4:d9:69:7e:e7:bc:97:eb:2f:54:01:c2:7a:
                    80:ca:51:f2:96:48:ab:01:47:eb:37:dc:f7:89:a7:
                    99:e4:57:91:a2:af:9a:8c:98:74:57:02:7f:ba:72:
                    59:b2:1e:6c:fb:20:e1:19:7e:13:4b:3f:c8:0c:28:
                    ec:04:a8:f2:31:87:81:d4:c7:dc:39:f5:d8:3c:29:
                    0c:c9:a5:e1:a8:f7:26:61:fa:a6:02:6b:e9:ba:3c:
                    83:33:17:94:0e:89:6e:18:da:47:79:9f:40:ea:80:
                    95:86:ef:e1:20:b6:79:92:db:96:6e:29:7f:ed:d0:
                    d9:48:f3:18:c4:2f:f6:83:42:34:f6:42:ae:6b:2b:
                    2b:3a:78:0e:4a:08:d5:b3:40:e0:a3:77:db:7b:6b:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5E:EE:68:BD:E1:F2:78:D1:D9:BA:72:99:13:A8:2D:46:E7:60:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5f813c6-08ba-3947-a112-32e6b8748428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c3ba::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:67:20:2d:2b:eb:0f:83:d9:44:5b:03:ee:33:bd:a9:33:5d:
         ce:55:8d:b4:b5:8f:67:8a:80:84:a3:bf:cb:5d:d5:49:1c:9c:
         88:8a:6a:e9:8d:be:d0:94:54:12:db:5f:63:89:48:63:e0:54:
         54:a4:5e:03:11:7d:50:85:2d:35:c1:1a:bf:16:89:a6:9e:76:
         71:c6:58:41:f2:2d:8e:6c:0d:7c:65:9e:4a:48:21:d9:51:0f:
         aa:28:e6:5b:fb:ee:6a:5b:df:e4:ee:ca:c1:e0:da:b4:ba:cf:
         75:20:b7:92:77:44:68:94:a9:7d:87:f9:a7:14:63:51:ab:df:
         8f:b5:98:3e:89:47:92:77:75:1a:a0:1c:e2:aa:4a:86:fa:f0:
         df:03:c1:2e:3f:25:1a:fb:c6:f8:bf:74:4d:b0:32:da:45:a9:
         98:1a:ea:16:1d:a7:4c:83:d4:cc:46:0e:4a:03:b7:ec:45:e6:
         40:79:72:7a:67:79:06:5a:d3:99:3b:b2:42:9e:a9:46:a2:b1:
         c5:87:cf:41:b1:a1:f3:33:8a:72:54:12:52:6f:09:51:8c:ac:
         0a:88:5e:3c:e8:c8:90:4e:ab:9a:f3:9d:29:12:67:8d:8e:8b:
         e7:b9:9b:87:07:64:a2:50:f6:a6:a3:1f:51:f6:2c:58:e5:02:
         77:80:59:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:13:41 2026 by rpki-client