Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2f0dd1-fb42-3f0d-afe4-d83f7e63e724.roa
File:                     4a2f0dd1-fb42-3f0d-afe4-d83f7e63e724.roa (raw, json)
Hash identifier:          KJzHlAob5KDhQLtGlSxcpsj0UQGcJvA0hUgqRp7SZUM=
Subject key identifier:   AB:E5:9F:0E:3E:4D:BC:2B:99:BC:2C:35:E9:F2:FD:76:60:78:09:1B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E376480F685C4A43C800F6080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2f0dd1-fb42-3f0d-afe4-d83f7e63e724.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     7015
IP address blocks:        2001:559:e02b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:80:f6:85:c4:a4:3c:80:0f:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=ac21d33b-04a6-423b-8133-f5b7ec5da569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:97:50:02:c8:7b:83:d8:4f:35:c7:f8:6e:
                    18:13:b7:f8:87:e3:d4:3a:d2:ed:ab:89:89:3f:65:
                    d1:03:26:e2:ab:01:82:9a:c7:d3:7b:d1:3c:bd:05:
                    28:e2:09:14:83:22:b5:1d:e5:42:76:00:e5:bf:79:
                    da:93:19:39:c7:4a:ea:c0:04:c4:3d:ed:6a:ae:2b:
                    77:ad:ae:f1:c4:cb:c5:4f:d2:45:03:20:a0:4d:f7:
                    cf:d4:69:f4:c2:1d:56:e6:48:b7:e9:5c:59:68:e7:
                    16:3f:09:77:d4:8b:d2:e7:a8:30:a5:16:01:51:e7:
                    86:bb:eb:57:87:47:cd:df:28:0a:ae:9f:12:8b:72:
                    87:95:55:29:58:0a:ef:4c:d5:3f:ce:c8:06:ca:11:
                    bd:6a:75:99:3d:e9:d1:09:c1:1d:90:1a:e3:7c:46:
                    a0:fd:b8:1b:67:64:08:df:d5:67:52:7d:fb:ae:9f:
                    9a:b0:de:ef:a3:c2:89:ab:a8:7b:89:02:2a:f0:1f:
                    d7:8a:93:0b:a9:2b:bb:85:e5:51:6b:e3:a7:70:fd:
                    d4:dd:30:db:25:7a:8b:4c:92:23:40:e5:59:80:dc:
                    bd:c7:6d:53:8c:74:ed:e1:b8:54:63:53:98:af:fc:
                    18:8f:10:87:09:31:6d:39:86:2c:d4:da:3a:0a:3b:
                    86:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E5:9F:0E:3E:4D:BC:2B:99:BC:2C:35:E9:F2:FD:76:60:78:09:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a2f0dd1-fb42-3f0d-afe4-d83f7e63e724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e02b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:34:cd:92:e0:ab:5e:e6:60:33:99:d2:10:5a:bb:7e:90:92:
         e3:ec:7a:6d:ae:e1:af:49:bf:06:7e:cd:56:37:c6:dd:64:b0:
         16:5a:1d:f2:d5:13:75:e1:41:3f:91:a5:61:eb:17:88:83:e7:
         b8:cd:22:ae:0d:6d:4c:2a:05:58:75:f5:25:57:7a:bf:2b:05:
         d6:81:44:42:d5:0b:54:df:f9:2e:db:b2:58:67:e6:7e:52:15:
         27:a7:b8:bd:b2:c6:84:45:8d:b6:9a:cc:a0:db:e6:4e:ce:ed:
         78:76:11:3f:93:54:a9:10:0d:d8:f4:f5:8e:2c:42:5e:e2:28:
         1d:99:b3:91:51:bb:a4:13:0e:d8:2b:d6:9e:e9:b4:2b:a2:b2:
         a6:4c:5a:a1:6e:a2:fc:4f:1f:de:6e:d6:09:da:d5:97:aa:7d:
         b3:65:bb:2b:71:31:89:72:9a:88:d2:14:31:57:28:03:ae:df:
         d5:a0:b7:63:3e:f3:33:10:0e:8f:2d:b1:d8:83:87:6a:d4:ad:
         be:1e:c9:9a:49:8e:35:54:70:26:44:2e:64:91:b1:1a:fc:41:
         62:00:b4:3a:a1:f8:af:70:b6:9f:ca:d8:09:48:d7:f9:ec:70:
         56:7f:fd:32:2c:83:8a:66:f4:1b:7a:9e:45:83:fd:4a:d0:34:
         f2:43:30:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE43ZID2hcSkPIAPYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
YWMyMWQzM2ItMDRhNi00MjNiLTgxMzMtZjViN2VjNWRhNTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD6XUALIe4PYTzXH+G4YE7f4h+PUOtLtq4mJ
P2XRAybiqwGCmsfTe9E8vQUo4gkUgyK1HeVCdgDlv3nakxk5x0rqwATEPe1qrit3
ra7xxMvFT9JFAyCgTffP1Gn0wh1W5ki36VxZaOcWPwl31IvS56gwpRYBUeeGu+tX
h0fN3ygKrp8Si3KHlVUpWArvTNU/zsgGyhG9anWZPenRCcEdkBrjfEag/bgbZ2QI
39VnUn37rp+asN7vo8KJq6h7iQIq8B/XipMLqSu7heVRa+OncP3U3TDbJXqLTJIj
QOVZgNy9x21TjHTt4bhUY1OYr/wYjxCHCTFtOYYs1No6CjuG3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKvlnw4+TbwrmbwsNeny/XZgeAkbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGEyZjBkZDEtZmI0Mi0z
ZjBkLWFmZTQtZDgzZjdlNjNlNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeAr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEk0zZLgq17mYDOZ0hBau36QkuPsem2u4a9JvwZ+zVY3xt1ksBZa
HfLVE3XhQT+RpWHrF4iD57jNIq4NbUwqBVh19SVXer8rBdaBRELVC1Tf+S7bslhn
5n5SFSenuL2yxoRFjbaazKDb5k7O7Xh2ET+TVKkQDdj09Y4sQl7iKB2Zs5FRu6QT
Dtgr1p7ptCuisqZMWqFuovxPH95u1gna1ZeqfbNluytxMYlymojSFDFXKAOu39Wg
t2M+8zMQDo8tsdiDh2rUrb4eyZpJjjVUcCZELmSRsRr8QWIAtDqh+K9wtp/K2AlI
1/nscFZ//TIsg4pm9Bt6nkWD/UrQNPJDMJM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:47 2026 by rpki-client