Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16db449e-5a91-3d62-8dd6-758bf7c4e8c4.roa
File:                     16db449e-5a91-3d62-8dd6-758bf7c4e8c4.roa (raw, json)
Hash identifier:          /9d3tc/93WYt6FSdNb9kAjTHD8K+4IE0lH+hjIacoZc=
Subject key identifier:   49:0C:CE:54:B0:8A:AB:57:0C:12:C5:F9:E1:5F:CA:D9:58:DD:8E:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DC6CB0D244B4BCBBCDCF78D64
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16db449e-5a91-3d62-8dd6-758bf7c4e8c4.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     36040
IP address blocks:        2001:559:0:78::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:0d:24:4b:4b:cb:bc:dc:f7:8d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=f58e3484-2566-4c57-b913-e0254f14be0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:6a:38:7b:14:37:9c:82:62:67:8b:26:fc:
                    c3:56:b7:17:ea:1e:dd:49:f8:52:2c:15:6e:ff:9a:
                    88:ba:c8:d2:ce:d0:a3:09:a4:b0:e9:18:2f:5d:9a:
                    cd:98:18:e8:1e:bb:0c:3d:c5:7c:60:0f:66:19:1b:
                    34:b2:a9:2b:28:53:d7:a8:ad:06:53:2a:06:4d:28:
                    e9:d6:9d:d2:d7:1e:fc:66:a8:fa:24:85:af:70:18:
                    a5:b5:45:2a:d6:8c:28:af:c2:51:56:cf:a7:92:86:
                    ba:68:57:1e:80:ad:1d:c9:2b:28:a6:5d:f4:91:50:
                    e8:5d:cd:c6:1a:72:5e:d7:f2:54:7a:2f:e4:94:49:
                    2c:91:ac:6e:d4:c5:13:fd:14:ed:83:80:ca:1b:24:
                    93:2c:da:26:b1:da:ec:41:46:f7:50:24:92:64:9b:
                    c9:84:92:45:92:c0:02:78:34:3d:2d:a1:e2:c5:d2:
                    02:65:70:56:d1:d8:8e:70:b7:2f:1d:48:46:10:23:
                    86:a7:78:ee:b7:91:6a:13:ae:53:bb:bf:99:11:48:
                    7f:b6:4d:45:f7:36:95:44:9c:49:b1:68:14:af:69:
                    26:66:86:40:40:5d:0e:2b:d6:fb:68:f1:d4:c4:b1:
                    e6:cb:59:62:45:aa:94:3e:1a:e0:6a:26:97:70:c9:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0C:CE:54:B0:8A:AB:57:0C:12:C5:F9:E1:5F:CA:D9:58:DD:8E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16db449e-5a91-3d62-8dd6-758bf7c4e8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:78::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f4:c6:89:d7:5f:ea:31:eb:36:63:52:39:81:05:c8:24:80:
         25:f5:5b:97:33:dc:c7:62:1b:e1:cf:06:5e:f7:3b:5c:e9:a2:
         fe:6e:2c:c9:85:dd:94:21:d7:c3:d6:fe:0c:2c:cd:f5:c1:a0:
         3b:8f:64:34:6c:a3:d8:0d:b5:0d:ce:dc:2c:7a:1f:6a:5d:64:
         e7:f3:49:4d:da:3c:35:ed:48:b3:3c:a5:b2:d4:0a:21:a6:2e:
         cc:5e:87:c0:9e:6e:8f:50:ee:10:ce:ff:3a:1b:24:87:02:2f:
         f1:bb:db:cd:0d:a6:47:ec:e4:e7:bd:24:d5:c5:d7:81:93:86:
         c4:c7:0c:42:ea:9f:9e:9a:a7:80:68:23:2a:f9:47:37:6f:4d:
         4d:12:b1:3e:66:71:37:9b:be:b2:85:80:8e:79:d7:40:a7:68:
         be:a1:23:95:81:08:0c:57:5a:1c:fa:ef:74:4c:3b:ab:0b:41:
         20:cb:b6:06:70:45:9c:60:e4:67:d1:dd:84:bb:6f:eb:cf:af:
         25:b1:a8:74:51:b7:0d:52:8c:92:5c:2c:ca:74:d6:e8:a8:95:
         16:0d:be:9e:10:4c:de:95:8b:03:36:5f:dd:2b:e0:08:99:8c:
         11:7c:87:ba:c9:2b:83:d3:58:53:9d:a0:1b:07:69:a5:32:dc:
         eb:49:cd:61
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3Gyw0kS0vLvNz3jWQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk
ZjU4ZTM0ODQtMjU2Ni00YzU3LWI5MTMtZTAyNTRmMTRiZTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvElqOHsUN5yCYmeLJvzDVrcX6h7dSfhSLBVu
/5qIusjSztCjCaSw6RgvXZrNmBjoHrsMPcV8YA9mGRs0sqkrKFPXqK0GUyoGTSjp
1p3S1x78Zqj6JIWvcBiltUUq1owor8JRVs+nkoa6aFcegK0dySsopl30kVDoXc3G
GnJe1/JUei/klEkskaxu1MUT/RTtg4DKGySTLNomsdrsQUb3UCSSZJvJhJJFksAC
eDQ9LaHixdICZXBW0diOcLcvHUhGECOGp3jut5FqE65Tu7+ZEUh/tk1F9zaVRJxJ
sWgUr2kmZoZAQF0OK9b7aPHUxLHmy1liRaqUPhrgaiaXcMn9TQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFEkMzlSwiqtXDBLF+eFfytlY3Y7aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTZkYjQ0OWUtNWE5MS0z
ZDYyLThkZDYtNzU4YmY3YzRlOGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA
AHgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAovTGiddf6jHrNmNSOYEFyCSAJfVblzPcx2Ib4c8GXvc7XOmi
/m4syYXdlCHXw9b+DCzN9cGgO49kNGyj2A21Dc7cLHofal1k5/NJTdo8Ne1Iszyl
stQKIaYuzF6HwJ5uj1DuEM7/OhskhwIv8bvbzQ2mR+zk570k1cXXgZOGxMcMQuqf
npqngGgjKvlHN29NTRKxPmZxN5u+soWAjnnXQKdovqEjlYEIDFdaHPrvdEw7qwtB
IMu2BnBFnGDkZ9HdhLtv68+vJbGodFG3DVKMklwsynTW6KiVFg2+nhBM3pWLAzZf
3SvgCJmMEXyHuskrg9NYU52gGwdppTLc60nNYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:04:27 2026 by rpki-client