Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7959b765-124f-30c7-84cd-daf8e5c92518.roa
File:                     7959b765-124f-30c7-84cd-daf8e5c92518.roa (raw, json)
Hash identifier:          tNBo06dDHhxMaRWlu2/yTWC0YMKuPRrzKj80lKgI9r0=
Subject key identifier:   EF:E3:C1:7E:31:17:63:D1:52:58:91:04:D8:18:AA:40:6F:9C:64:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49829B7B7B9589B9B6723B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7959b765-124f-30c7-84cd-daf8e5c92518.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        2001:559:3b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:82:9b:7b:7b:95:89:b9:b6:72:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f9eda27f-4a7b-41bd-8856-d2c698d4c567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:52:bd:e7:a8:58:fd:15:57:0c:54:4a:4c:af:
                    7d:f8:a5:7b:64:1f:7b:84:29:42:e1:ce:7f:7c:d1:
                    97:7b:8d:54:41:68:6b:89:54:5e:94:07:2c:30:80:
                    0d:05:61:72:9d:31:ec:b3:6b:04:7b:2c:1d:9f:04:
                    39:02:65:2c:e6:fb:58:6d:9d:bd:f8:45:21:26:4a:
                    cd:27:4f:c7:fb:16:34:88:dd:09:05:e1:ea:2d:07:
                    00:7a:47:5d:40:6e:f0:f4:93:12:da:34:1c:92:42:
                    20:cd:03:59:8c:d9:87:b3:65:ae:b6:e5:36:ff:1e:
                    1c:9d:67:a8:aa:78:07:6b:6b:d5:6b:94:b6:82:17:
                    6f:bf:4e:11:50:37:4d:3d:84:a4:3b:2e:fd:e3:74:
                    5d:9e:1c:f2:79:0f:ab:95:14:2f:1b:0c:4a:ff:02:
                    22:f6:14:4a:76:4b:8c:44:7e:9b:47:59:8b:22:24:
                    f9:7d:a9:9d:79:17:27:5d:68:11:41:d7:d1:8e:e5:
                    df:fd:da:53:b7:ab:b6:ee:5e:ae:c8:47:27:d3:36:
                    8b:32:7a:83:1a:08:0d:06:56:88:4a:97:8d:1b:31:
                    cb:4d:f7:31:c7:fe:70:09:44:87:64:54:d4:80:68:
                    d8:ca:46:1c:7e:57:32:9a:e7:bc:9d:dc:04:04:6e:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E3:C1:7E:31:17:63:D1:52:58:91:04:D8:18:AA:40:6F:9C:64:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7959b765-124f-30c7-84cd-daf8e5c92518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7e:91:72:eb:be:69:aa:d0:1b:cd:37:53:1b:30:23:1c:aa:
         aa:91:fa:0c:66:79:26:e2:d0:3b:f7:a0:e9:db:bc:6f:11:96:
         28:29:5b:a3:cd:c8:88:e9:48:22:23:43:d0:bb:2e:dc:25:13:
         94:aa:d2:14:b8:2e:24:9a:e3:90:b7:1c:56:db:5d:89:89:9b:
         38:e7:c0:69:8b:4d:52:71:b7:19:a5:27:42:d6:3f:f5:42:82:
         bc:61:e7:91:9c:4a:4e:7d:61:b7:19:f2:45:1f:e5:b5:92:84:
         c0:68:e5:58:53:4a:60:ff:fe:f5:b2:ad:6c:20:79:e1:b2:a5:
         85:f7:52:a1:bb:70:b4:70:d1:59:69:9a:44:e8:25:16:f3:a9:
         fb:48:f2:ea:55:b9:0e:2f:fd:96:ca:dd:ed:82:c8:c6:96:84:
         9c:87:a7:c7:a1:5e:a9:54:09:fe:98:54:c9:38:fa:45:1f:75:
         61:5b:b4:18:04:6e:51:7e:41:f5:c8:1b:c1:04:ae:90:4e:ec:
         96:76:81:eb:23:4e:06:c5:75:99:3b:2a:36:86:ef:ea:53:c5:
         b4:b5:08:6c:bf:d5:f5:78:3c:f1:dd:3a:6d:11:35:4b:f8:2e:
         b7:33:a8:9d:62:97:73:22:91:d9:ab:b5:32:b5:1d:5b:e2:6d:
         a0:ff:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:21:23 2026 by rpki-client