Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fbe6b2a-f331-35ad-bfbd-afa82001d999.roa
File:                     1fbe6b2a-f331-35ad-bfbd-afa82001d999.roa (raw, json)
Hash identifier:          8Fc8UcVK/s4USs+20O7fkBz4t5IPC4ppmOUaIb7F8lg=
Subject key identifier:   E6:7E:9E:8D:09:B8:6A:3D:D3:2D:50:0A:D9:65:C9:06:BB:E3:52:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4979E311DF292F6C82BC1CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fbe6b2a-f331-35ad-bfbd-afa82001d999.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33287
IP address blocks:        2001:559:8377::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:79:e3:11:df:29:2f:6c:82:bc:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=37c60fea-4e4d-4d43-b315-0e2ab10b3f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:33:89:eb:bd:67:d0:74:a7:c3:53:15:7c:
                    36:4c:7e:ac:c9:3e:f3:51:62:13:8e:08:c7:94:de:
                    a1:77:6c:72:ce:c7:d8:02:bf:b6:f4:03:c1:22:2a:
                    36:8c:4e:47:a1:2b:9b:0f:47:3b:66:2d:b7:19:9c:
                    0d:36:13:c0:ac:5b:4b:bb:5b:80:20:cd:14:11:42:
                    b9:ba:19:d8:dd:38:2f:26:a5:13:5e:ad:5c:db:b1:
                    48:5a:f2:b7:e3:49:3b:21:84:86:94:b0:a6:5d:be:
                    81:5d:48:a7:c8:8a:62:17:99:eb:c7:01:bd:78:f1:
                    ba:76:34:54:97:4c:93:a5:bd:63:13:4f:76:c3:42:
                    29:2c:ac:94:99:3c:5a:20:b2:ef:c1:8d:bf:e0:3c:
                    75:20:e1:c4:50:e7:65:8b:9a:2b:c2:98:75:bc:8f:
                    08:c6:c6:45:38:b2:19:fd:24:e0:9f:f0:cc:80:ae:
                    44:4b:15:0b:b1:65:cc:78:47:8c:71:46:6f:11:76:
                    28:d5:88:4a:b9:dc:ec:bb:3e:83:39:88:59:84:77:
                    ad:dc:c5:f2:87:89:d5:92:bc:b2:c3:47:c2:29:f1:
                    ec:eb:1a:cf:c7:6c:69:02:df:49:77:9d:af:8c:f8:
                    5f:58:ae:a2:27:f7:5a:45:76:8f:55:f6:88:ae:5f:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7E:9E:8D:09:B8:6A:3D:D3:2D:50:0A:D9:65:C9:06:BB:E3:52:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fbe6b2a-f331-35ad-bfbd-afa82001d999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8377::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:7e:02:6d:17:89:9e:ee:b7:3b:0d:5a:aa:ea:39:f9:35:34:
         7a:b6:72:78:df:69:20:ec:54:8b:19:c6:de:ac:c5:94:6a:12:
         23:8c:bb:18:28:dd:83:76:55:50:97:9a:aa:f0:1f:08:f6:6c:
         4e:79:7f:b9:1e:0e:1d:85:4f:a9:60:62:76:15:e0:6b:e1:cc:
         73:9b:ac:ff:bc:4f:7d:81:cc:76:ea:26:a1:f9:17:aa:90:0b:
         4f:54:97:15:eb:23:28:ed:2f:da:a8:c6:a5:fa:5d:47:19:08:
         b2:e7:96:eb:4b:d8:7a:77:fd:ae:22:8b:a9:d9:9f:47:f5:d3:
         e8:de:58:ca:05:12:6c:a4:1e:81:20:18:4e:c6:9a:36:3b:0b:
         f0:ea:a4:a9:50:46:2c:c5:fe:59:d5:ea:58:0c:bf:27:0d:06:
         cb:4a:ea:ac:f1:61:ca:91:27:7e:7a:ab:4e:81:0b:df:a8:b7:
         38:bc:3e:e5:fb:d5:af:11:f0:07:59:bb:37:37:50:05:eb:3c:
         06:48:41:a0:61:5e:81:a4:a3:7f:80:57:63:0d:08:aa:03:8d:
         45:8a:65:89:71:e0:d6:a7:02:5a:15:02:15:65:8c:3b:cd:be:
         b2:cb:34:6d:33:ed:cb:4b:4d:7e:e5:70:82:39:e8:3d:a9:a0:
         de:32:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:30:46 2026 by rpki-client