Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e8d0b4-984c-3998-9b45-152c049aa0b8.roa
File:                     29e8d0b4-984c-3998-9b45-152c049aa0b8.roa (raw, json)
Hash identifier:          4W7J254E2ncmuqdVQaiqgD1ReFQRvXGmT3/Hk9bPQ4s=
Subject key identifier:   64:98:81:BD:68:70:07:CC:18:FA:9B:38:EA:27:46:9E:3F:83:5E:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F498284A09A0F7F753C8BE480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e8d0b4-984c-3998-9b45-152c049aa0b8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33657
IP address blocks:        2001:559:85cd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:82:84:a0:9a:0f:7f:75:3c:8b:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6b8401b8-3647-45a9-83d6-86209ae83a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:e9:ad:fb:cf:0f:4a:dc:ba:7c:a4:19:5a:
                    43:e9:c5:62:8b:f8:5b:b4:c1:59:55:06:01:4c:ec:
                    c8:d0:ce:89:73:2a:37:fd:12:60:b0:d8:ad:8e:1d:
                    b0:d4:c0:ef:7b:36:54:34:0d:78:3a:81:74:10:38:
                    21:f6:51:af:8d:74:ca:01:86:56:42:7b:0c:59:da:
                    14:21:21:c7:e5:52:5d:14:b5:8c:02:b2:52:42:9b:
                    de:b7:29:57:75:d5:8b:18:9b:1f:b2:66:ef:b3:ab:
                    ba:06:8a:aa:38:0d:8a:6c:d3:a2:1b:27:2d:ef:b4:
                    6b:09:06:3a:75:e2:65:ff:59:fb:52:06:6d:fc:31:
                    0c:d9:43:9d:fa:1a:95:a1:92:59:d1:3c:32:89:72:
                    fb:48:ff:a0:45:86:15:b7:02:85:7b:53:32:38:11:
                    02:ab:2f:9f:99:68:da:5c:51:53:20:40:84:37:3a:
                    1f:16:82:2f:c2:1f:5a:30:3b:3d:98:9a:7d:e2:3b:
                    51:5b:bb:ea:0e:61:75:be:01:c8:8a:a2:81:12:a2:
                    79:bd:a9:78:95:3b:97:42:20:5d:77:3a:1e:78:4a:
                    c8:b1:0b:c8:f0:95:88:b4:d7:9a:09:d8:7f:19:d9:
                    0d:bc:de:fd:3d:a6:89:bf:ad:70:7b:7a:17:01:b2:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:98:81:BD:68:70:07:CC:18:FA:9B:38:EA:27:46:9E:3F:83:5E:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29e8d0b4-984c-3998-9b45-152c049aa0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85cd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:aa:7d:59:ad:ba:17:83:81:49:8e:41:66:ed:60:d4:a5:4e:
         d2:27:0b:73:be:3e:b2:30:1e:ce:18:f8:d4:9d:37:27:d6:d3:
         43:90:6d:05:dd:48:21:a4:d3:56:65:3a:52:d0:ce:39:cd:54:
         df:e3:a7:93:1f:28:b9:77:4f:2b:92:c8:90:87:ca:8e:91:16:
         bd:8b:c3:0c:cb:46:3f:d8:4d:aa:2b:bf:87:c7:af:1e:29:70:
         61:8e:cd:bc:44:ac:fc:32:a7:bb:9e:0c:77:4b:46:b1:e2:71:
         6c:8e:8b:6b:cd:96:7a:0f:82:63:c7:d2:fc:ba:85:52:2f:9b:
         d1:9f:65:47:ff:4d:0d:7d:e9:86:18:d3:f6:e9:b1:8f:c2:dd:
         8f:c7:e2:dd:78:f6:73:c5:f6:10:77:18:2c:92:f0:f4:65:41:
         32:f0:37:16:3d:75:be:6b:5f:6c:30:a4:c5:bc:78:5f:58:a1:
         ce:ad:fa:11:3c:0c:21:42:c4:2a:a9:0d:fe:05:bf:67:6b:40:
         d8:fd:29:e9:98:97:4d:45:df:11:1a:7d:8b:f6:f7:60:ea:fe:
         84:eb:10:d4:f6:e0:bc:94:d4:2b:c5:64:44:75:07:35:67:96:
         57:a5:a4:9f:a0:71:c0:42:4e:e7:8f:9b:f1:5b:9f:11:d3:eb:
         c0:59:db:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgoSgmg9/dTyL5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmI4NDAxYjgtMzY0Ny00NWE5LTgzZDYtODYyMDlhZTgzYTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypbprfvPD0rcunykGVpD6cVii/hbtMFZVQYB
TOzI0M6Jcyo3/RJgsNitjh2w1MDvezZUNA14OoF0EDgh9lGvjXTKAYZWQnsMWdoU
ISHH5VJdFLWMArJSQpvetylXddWLGJsfsmbvs6u6BoqqOA2KbNOiGyct77RrCQY6
deJl/1n7UgZt/DEM2UOd+hqVoZJZ0TwyiXL7SP+gRYYVtwKFe1MyOBECqy+fmWja
XFFTIECENzofFoIvwh9aMDs9mJp94jtRW7vqDmF1vgHIiqKBEqJ5val4lTuXQiBd
dzoeeErIsQvI8JWItNeaCdh/GdkNvN79PaaJv61we3oXAbIeRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGSYgb1ocAfMGPqbOOonRp4/g179MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjllOGQwYjQtOTg0Yy0z
OTk4LTliNDUtMTUyYzA0OWFhMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYXN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI6qfVmtuheDgUmOQWbtYNSlTtInC3O+PrIwHs4Y+NSdNyfW00OQ
bQXdSCGk01ZlOlLQzjnNVN/jp5MfKLl3TyuSyJCHyo6RFr2LwwzLRj/YTaorv4fH
rx4pcGGOzbxErPwyp7ueDHdLRrHicWyOi2vNlnoPgmPH0vy6hVIvm9GfZUf/TQ19
6YYY0/bpsY/C3Y/H4t149nPF9hB3GCyS8PRlQTLwNxY9db5rX2wwpMW8eF9Yoc6t
+hE8DCFCxCqpDf4Fv2drQNj9KemYl01F3xEafYv292Dq/oTrENT24LyU1CvFZER1
BzVnllelpJ+gccBCTuePm/FbnxHT68BZ27U=
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:16:17 2026 by rpki-client