Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49add006-70b0-34a1-8b50-0a5ff970bb64.roa
File:                     49add006-70b0-34a1-8b50-0a5ff970bb64.roa (raw, json)
Hash identifier:          3aNgPzfBaSaJqvgf0XRjfqugKx51BWMBIBftOPiUrAw=
Subject key identifier:   A9:24:83:1F:F3:AF:42:89:61:32:7F:3C:86:33:A2:C1:D7:2D:DC:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F498189D5EE5ACE0081BF6540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49add006-70b0-34a1-8b50-0a5ff970bb64.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7015
IP address blocks:        2001:559:8315::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:89:d5:ee:5a:ce:00:81:bf:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a53afd31-166d-44aa-acb6-2154780904f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:52:8c:9f:b7:50:23:8b:61:5a:e5:89:fd:
                    05:f3:30:fa:a0:bd:fc:61:5b:06:c4:1b:63:b3:70:
                    71:02:4e:0e:d4:f4:ab:93:92:dc:2d:4e:b1:7c:77:
                    08:fa:21:b8:f2:78:3c:28:2b:ea:8f:79:f4:10:b2:
                    80:47:92:a6:a6:77:fe:62:08:b1:7b:cc:68:6a:d4:
                    bf:c9:2b:df:95:41:07:1d:13:95:46:4d:49:70:2a:
                    a7:76:ec:09:36:6f:58:53:35:a9:98:ba:df:0e:7e:
                    bc:89:8a:27:54:cb:dd:88:d8:c9:2b:f5:e8:cb:e2:
                    57:84:9d:00:66:4a:54:7d:7e:3e:35:79:38:89:b1:
                    bd:bb:2f:ea:a8:ca:43:f4:53:8d:5f:90:e8:e2:73:
                    3b:97:a2:1c:13:79:13:82:8b:e8:67:33:a0:f2:65:
                    e0:97:2c:f0:88:aa:e8:e5:c1:ff:86:5c:0c:d9:1d:
                    73:0e:69:f7:f8:fd:1a:07:5b:7d:f9:07:de:fc:1a:
                    da:66:61:4c:a5:83:b3:26:7b:d1:16:ca:a3:63:ef:
                    c7:b4:3a:a5:bd:9c:9c:cd:63:db:dc:0f:b7:b5:55:
                    7b:35:e2:1c:53:38:76:21:48:c9:85:67:0a:d3:a1:
                    e3:61:88:f7:f2:09:d7:71:1c:63:7e:36:cc:be:63:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:24:83:1F:F3:AF:42:89:61:32:7F:3C:86:33:A2:C1:D7:2D:DC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49add006-70b0-34a1-8b50-0a5ff970bb64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8315::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:21:61:ea:18:62:59:c9:f9:4b:58:88:09:1c:ee:4f:fc:87:
         b0:dd:73:85:66:b8:7d:d0:69:82:a5:27:23:bf:16:5d:4d:f3:
         82:e2:98:5c:81:d8:92:2c:c2:0b:9b:68:1e:99:52:f4:04:2a:
         ba:f8:9f:92:3f:86:56:19:d7:2a:8f:77:bc:94:a1:52:3c:d7:
         75:5c:df:d5:55:64:02:26:3a:fa:97:ea:dc:ef:98:d2:c5:67:
         e9:fa:14:19:26:91:c8:a8:bc:70:e2:60:d7:aa:84:2b:25:f0:
         51:d4:65:2b:ee:65:f8:01:1c:65:eb:e2:94:4b:8e:70:dd:53:
         fa:8b:7f:e3:3f:fc:2a:c5:b0:37:76:37:43:02:10:25:b1:30:
         7a:a9:1d:5f:40:b7:d7:82:7b:9a:5a:16:7d:78:94:11:39:11:
         93:9a:90:36:71:17:db:27:56:26:65:34:d3:86:c4:3c:61:78:
         3e:41:98:1a:05:c0:e3:5e:77:2a:a2:ff:f1:ed:05:7c:fe:49:
         07:26:b3:1b:33:3a:72:89:f2:5b:da:6a:85:86:92:26:16:b7:
         fa:ea:48:66:cf:e4:07:6e:06:ac:c3:f8:7c:99:6c:d5:e1:7a:
         6f:96:d0:95:9e:61:cf:10:d7:2a:6c:a3:f6:aa:dc:5a:e3:a4:
         c8:4c:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:05:41 2026 by rpki-client