Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/673a0fb2-c20e-3633-86f4-0bc6bce82c6f.roa
File:                     673a0fb2-c20e-3633-86f4-0bc6bce82c6f.roa (raw, json)
Hash identifier:          ygDW7dqc3NdwSyGGpr96Wibzm583duX7fX6DxptqSYw=
Subject key identifier:   D1:C7:05:39:54:16:86:7B:31:04:BF:59:12:1C:80:69:7C:89:A9:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4542934ABC88F00988F4CC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/673a0fb2-c20e-3633-86f4-0bc6bce82c6f.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        2001:559:e027::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:93:4a:bc:88:f0:09:88:f4:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=dc4a0c43-be05-4639-9d0b-cea95b99c237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0a:0e:3e:70:b5:c8:69:1a:28:8a:0b:6e:e6:
                    02:1e:a2:c2:43:ba:1e:61:d6:8b:00:33:d5:e7:12:
                    35:93:3f:ef:8f:8c:58:f4:5b:b9:a4:a5:9c:1a:fa:
                    a9:9f:62:fc:17:85:00:8c:ff:1b:98:58:65:b0:de:
                    64:0c:03:f5:ed:63:44:f6:26:06:c3:2f:6e:13:73:
                    76:c8:41:39:d0:62:04:2b:30:9a:fd:52:c9:1e:8f:
                    6f:7c:2e:24:10:93:04:31:39:04:54:d1:29:fb:5b:
                    14:4a:47:67:ee:c3:e8:3c:c6:e4:10:b9:c7:df:b9:
                    a7:7b:da:8d:41:3d:b4:4c:f0:64:e0:d1:89:cf:84:
                    cc:fa:12:22:27:e1:26:10:87:fb:a1:90:4c:54:35:
                    8d:ec:ea:e8:70:f9:d3:a8:35:5b:ef:a6:a2:67:29:
                    03:d3:94:04:84:bf:38:32:24:f6:f6:ee:a2:4f:af:
                    71:fc:cc:2b:60:5e:73:a1:65:02:c0:1d:88:bd:11:
                    58:7e:a3:f2:69:04:e9:1d:a5:8d:1f:5b:a3:37:64:
                    e8:47:8f:a7:ac:3c:e4:03:f6:b1:6e:a8:5d:50:36:
                    14:e6:e5:55:45:9f:6f:8d:e8:2a:3a:79:a7:21:cd:
                    40:6b:8c:37:b1:57:bf:d4:49:2f:88:89:46:31:b4:
                    ed:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C7:05:39:54:16:86:7B:31:04:BF:59:12:1C:80:69:7C:89:A9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/673a0fb2-c20e-3633-86f4-0bc6bce82c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e027::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:74:b9:97:b7:84:77:c4:58:de:14:d1:5b:a8:b7:6a:94:
         82:98:8f:6a:bd:38:0c:e6:e1:ca:d9:da:b5:53:ee:a3:6e:fd:
         30:49:78:d9:63:d4:46:c5:d5:b1:c7:19:66:69:19:b0:76:31:
         84:9c:96:25:77:58:a3:53:ac:d6:b9:66:c6:9a:5d:f1:ca:db:
         92:e1:56:64:37:f2:b1:48:84:b8:2d:dd:0e:13:42:45:09:40:
         31:aa:cc:e4:57:bf:4b:cd:92:1f:8a:00:b6:ad:28:8a:f1:80:
         72:9f:89:03:e8:96:12:7c:35:15:bf:ff:59:e7:88:07:16:60:
         99:30:a8:8d:e2:d6:21:ab:b4:23:f9:45:00:b6:04:e8:91:ca:
         e4:0d:9a:62:1f:2a:0a:04:82:7b:6e:29:ea:75:2d:ba:b7:2b:
         00:72:22:62:b3:75:82:72:b3:f6:7c:ce:37:5b:9f:ea:c1:3f:
         a5:f9:66:52:49:b1:71:67:7c:5e:76:a9:e5:76:a5:a9:10:18:
         08:1a:14:2c:3b:a8:13:23:f8:48:15:2a:94:c7:d8:24:a1:9c:
         14:0b:2f:e7:d1:b7:ed:1a:15:9d:d9:49:8c:7d:aa:f2:87:60:
         ad:51:d6:b8:76:2b:07:d4:93:78:7b:02:2d:22:a6:b8:e5:f9:
         eb:2a:72:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:13:16 2026 by rpki-client