Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eba5a2c-d9ab-3b37-8402-fe58eb2cfbe5.roa
File:                     0eba5a2c-d9ab-3b37-8402-fe58eb2cfbe5.roa (raw, json)
Hash identifier:          7rfmTfbQbVuJ+xw4uuaY/7yyqi6nCTnUGYjEfuW0Zys=
Subject key identifier:   95:78:26:C9:DC:15:CF:64:93:19:51:92:DD:20:40:5E:E1:21:4F:BD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49805EE7AC578000591BCC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eba5a2c-d9ab-3b37-8402-fe58eb2cfbe5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7016
IP address blocks:        2001:559:707::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:5e:e7:ac:57:80:00:59:1b:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b3ddda77-e750-4fcb-a023-3508abb699bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:cb:e9:68:65:b6:96:36:5f:59:d5:76:85:
                    e6:45:a2:3f:54:ff:bc:37:66:6c:60:52:ab:91:f8:
                    d6:a5:4a:bc:df:ec:6e:f0:83:56:c1:8b:65:8a:1e:
                    27:c8:32:c6:20:3c:23:19:4a:63:5d:a4:6c:b9:80:
                    93:c8:74:ca:c3:54:c3:ff:95:cb:ee:ce:43:6f:89:
                    8c:85:86:52:d1:3a:01:ff:3b:d0:14:e1:61:7d:27:
                    f5:93:0f:30:f2:55:b0:c4:ae:97:9d:58:94:e2:5c:
                    76:a1:7e:ce:98:5d:dd:3b:97:bf:3b:75:c1:c1:55:
                    dd:a2:a8:c0:09:a2:47:e4:d8:c8:44:e8:98:49:92:
                    d5:dc:bb:67:1f:81:cf:61:bd:d3:ec:09:24:2a:49:
                    8c:f6:ab:dc:b3:2e:1e:6c:ff:a4:dc:b7:58:2d:7f:
                    e7:da:51:66:02:40:e3:63:7c:f3:99:be:45:3a:28:
                    b0:95:66:98:04:68:25:99:26:9f:31:dd:4b:30:2a:
                    14:bf:c5:8f:7a:14:bd:7c:41:17:db:6f:11:0c:8b:
                    15:4d:0b:b8:82:40:1b:be:05:77:6d:74:c8:ad:b3:
                    12:12:56:e0:a6:01:79:88:c2:ff:10:21:df:aa:7d:
                    b1:6e:f7:04:41:18:7b:cd:e9:00:50:3f:e7:92:53:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:78:26:C9:DC:15:CF:64:93:19:51:92:DD:20:40:5E:E1:21:4F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eba5a2c-d9ab-3b37-8402-fe58eb2cfbe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:707::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fc:e0:61:d7:1c:9c:7a:4e:3d:fd:38:52:55:2b:c1:a7:ad:
         34:35:ac:ce:1a:bf:66:3d:d1:96:97:2a:ce:08:5d:5a:5d:bd:
         49:1d:66:0d:26:3e:bd:cf:5b:03:f9:3f:0d:37:e7:20:fe:2c:
         df:2b:de:f9:a5:4c:9d:7d:73:4c:0f:54:09:ce:a4:a3:d2:e3:
         0b:18:36:47:fc:38:14:73:88:6a:47:fb:9b:37:10:e1:a5:7c:
         b1:88:2b:dd:82:e9:1d:be:f6:c5:25:03:92:62:ac:ed:42:62:
         db:8a:6d:43:64:12:10:c0:88:95:d3:ef:35:b3:c3:a8:2f:49:
         ad:73:82:b5:f3:17:be:9a:50:bb:11:6b:a5:26:78:c5:6c:78:
         0b:79:b3:17:77:62:8f:73:2a:e0:4a:f3:39:7c:92:d4:ed:14:
         b6:e0:39:89:18:a0:9b:15:3d:b7:70:10:35:73:d3:1d:28:82:
         f7:3c:48:8f:11:55:63:08:c3:76:49:77:62:cd:0c:ea:ce:78:
         ca:8a:aa:97:10:d8:40:94:15:da:1e:7b:f1:23:33:b8:f2:24:
         e3:3b:0c:74:05:15:a2:0b:c2:de:f1:66:a4:76:59:38:38:49:
         1c:d8:a3:34:9c:f1:ad:06:5b:d6:ce:b8:e1:db:ab:52:2a:8f:
         16:bf:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:57:24 2026 by rpki-client