Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a42a8d-9145-3831-b804-d501ba2a0f93.roa
File:                     13a42a8d-9145-3831-b804-d501ba2a0f93.roa (raw, json)
Hash identifier:          YuomaZ1lbxCj2lRy8sasFu7j5xo/qQZbioT9rS9tdHg=
Subject key identifier:   91:13:51:26:86:48:97:52:DA:45:24:89:62:DC:02:9E:EC:37:B6:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980FABD6C88C1001AD780DC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a42a8d-9145-3831-b804-d501ba2a0f93.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        2001:559:833c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:fa:bd:6c:88:c1:00:1a:d7:80:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=96e713db-1861-4eec-9491-3a521b2072b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fb:32:3e:68:58:8e:61:02:52:f3:1e:90:fe:
                    e5:93:3a:bb:84:c7:d2:cc:c3:5a:9b:28:2d:85:ed:
                    b6:61:c7:51:e5:ef:41:83:40:24:15:0c:8d:0c:d5:
                    ea:f9:85:84:a1:11:3d:69:91:43:0e:56:7f:18:f2:
                    eb:0d:40:7b:08:16:d7:c1:41:32:55:31:31:69:27:
                    fe:2d:88:dd:6c:c4:be:5b:40:bc:92:c8:fc:e8:7e:
                    8a:84:41:4a:f1:d9:6f:49:e4:32:62:f2:06:d0:9e:
                    56:60:6f:e0:3f:49:57:43:0a:e2:b5:4d:67:81:70:
                    94:3e:57:97:34:ea:a9:6e:6d:18:e9:0e:d3:1d:5e:
                    cd:63:09:4b:9e:cf:b5:8a:0a:58:30:de:a6:62:ce:
                    41:76:8f:35:d3:2f:d0:ea:84:1a:ce:34:a5:b7:13:
                    bf:dd:fc:59:f5:b5:07:c2:03:17:89:be:6e:ca:4b:
                    87:d1:d9:df:35:22:d9:7a:0b:16:42:44:8a:8f:a2:
                    9e:c8:1a:1e:cb:6d:60:05:7c:69:78:f6:f5:c6:73:
                    85:36:07:81:f7:bb:01:f6:ab:8a:1c:a4:a4:fd:b7:
                    6f:ef:b7:23:4c:ff:85:04:06:cb:9a:4b:17:79:2f:
                    c3:7f:cb:5e:94:c2:5a:c6:c4:45:ff:90:8a:cc:8f:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:13:51:26:86:48:97:52:DA:45:24:89:62:DC:02:9E:EC:37:B6:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13a42a8d-9145-3831-b804-d501ba2a0f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:833c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:3c:e0:11:27:35:6e:5c:a4:8a:15:0c:0a:a3:a6:f1:b4:
         a7:33:8d:c3:e1:be:b8:87:8b:e6:79:47:22:15:61:b7:58:2f:
         62:20:7b:d6:32:32:7b:85:2c:ff:49:13:0d:ee:0e:71:29:42:
         09:78:4d:52:db:ff:45:55:4c:87:71:3e:e8:6a:90:e2:14:a4:
         22:dc:8e:83:7e:30:aa:f6:6c:6e:0e:a4:88:35:7c:55:10:0b:
         35:1c:7e:af:a5:67:e3:28:57:6f:42:8c:b2:90:87:21:40:3c:
         b8:5c:6e:3b:a0:c3:56:1a:a0:55:f9:f5:75:73:78:5c:36:43:
         9c:d5:0e:91:7d:f2:b6:6f:43:f7:19:1c:44:33:64:7b:a9:93:
         b3:b5:e5:c4:44:6b:04:5f:0b:cd:51:e3:67:ad:96:d1:1f:b2:
         9a:3c:75:75:21:1e:4b:dc:ad:41:8b:c1:31:55:7b:ec:1c:fe:
         6e:f5:3b:a7:02:d5:8a:0d:bd:0f:d7:d7:5e:f5:c2:bf:e8:6a:
         79:d2:c7:ad:be:cf:88:48:fb:f9:9d:1e:d2:e4:71:b6:b6:52:
         65:88:a1:b4:fc:f4:3f:39:b8:a9:9f:4a:d4:5c:c5:80:12:a6:
         83:b9:16:58:00:12:db:a4:1a:fd:fb:57:d5:16:63:70:7a:4e:
         cb:b2:ac:dd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgPq9bIjBABrXgNwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTZlNzEzZGItMTg2MS00ZWVjLTk0OTEtM2E1MjFiMjA3MmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/syPmhYjmECUvMekP7lkzq7hMfSzMNamygt
he22YcdR5e9Bg0AkFQyNDNXq+YWEoRE9aZFDDlZ/GPLrDUB7CBbXwUEyVTExaSf+
LYjdbMS+W0C8ksj86H6KhEFK8dlvSeQyYvIG0J5WYG/gP0lXQwritU1ngXCUPleX
NOqpbm0Y6Q7THV7NYwlLns+1igpYMN6mYs5Bdo810y/Q6oQazjSltxO/3fxZ9bUH
wgMXib5uykuH0dnfNSLZegsWQkSKj6KeyBoey21gBXxpePb1xnOFNgeB97sB9quK
HKSk/bdv77cjTP+FBAbLmksXeS/Df8telMJaxsRF/5CKzI/DZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJETUSaGSJdS2kUkiWLcAp7sN7YNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTNhNDJhOGQtOTE0NS0z
ODMxLWI4MDQtZDUwMWJhMmEwZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYM8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKEnPOARJzVuXKSKFQwKo6bxtKczjcPhvriHi+Z5RyIVYbdYL2Ig
e9YyMnuFLP9JEw3uDnEpQgl4TVLb/0VVTIdxPuhqkOIUpCLcjoN+MKr2bG4OpIg1
fFUQCzUcfq+lZ+MoV29CjLKQhyFAPLhcbjugw1YaoFX59XVzeFw2Q5zVDpF98rZv
Q/cZHEQzZHupk7O15cREawRfC81R42etltEfspo8dXUhHkvcrUGLwTFVe+wc/m71
O6cC1YoNvQ/X1171wr/oannSx62+z4hI+/mdHtLkcba2UmWIobT89D85uKmfStRc
xYASpoO5FlgAEtukGv37V9UWY3B6TsuyrN0=
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:08:23 2026 by rpki-client