Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fef471b-5da7-3f79-8ffa-48b5e0a44ded.roa
File:                     7fef471b-5da7-3f79-8ffa-48b5e0a44ded.roa (raw, json)
Hash identifier:          fZZB1YSYFAw5wRAZcWTmHDMJjitcWR2GOfHsORPY4hM=
Subject key identifier:   D8:10:9C:AA:99:3C:16:5A:92:B3:46:B6:88:CD:1B:A5:28:CC:84:AA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49781B6BD1B722282323C940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fef471b-5da7-3f79-8ffa-48b5e0a44ded.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7016
IP address blocks:        2001:559:c08e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:1b:6b:d1:b7:22:28:23:23:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=386d505e-2e95-49b5-8bae-292e655ab804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:f0:4f:bc:2c:b9:35:a6:7d:de:ff:41:35:
                    f0:e4:24:c3:1e:6e:7d:ad:39:e1:16:26:9e:c0:31:
                    cb:43:ed:db:59:9d:c8:72:fa:98:50:bf:88:43:0d:
                    49:7b:d3:11:86:6e:71:2d:1d:5f:d7:3b:8a:cd:34:
                    a5:8c:d0:eb:04:0e:ca:89:3c:eb:69:24:c3:41:14:
                    7d:26:06:ff:22:0a:6d:ad:ba:dd:d2:f3:67:e4:d0:
                    49:b7:36:c2:5f:37:38:2a:f9:f6:be:f1:ac:5d:98:
                    ec:c4:e4:73:ea:3e:c5:7d:cf:51:cf:35:da:6b:34:
                    05:3b:0e:b5:03:9f:76:c4:4c:20:aa:30:f6:75:a6:
                    8a:7a:ce:f5:4d:ef:0d:cb:7e:89:e6:80:3d:f0:ba:
                    8c:50:7a:ff:cf:d4:ad:ce:66:33:0d:9d:92:d9:c5:
                    2a:48:70:3f:90:54:35:b7:be:90:1f:a5:ec:5a:8d:
                    7c:80:1e:8b:73:62:1f:f7:d2:e5:6d:7a:d8:bc:12:
                    0d:0a:82:75:5e:b9:2c:79:00:39:2c:7d:fc:e4:98:
                    fa:47:5e:a5:e1:1f:e0:9e:c3:6b:9d:58:f0:c1:79:
                    2f:9e:dc:b3:be:ed:62:2b:f8:f1:6f:06:b5:42:3d:
                    21:3e:14:e7:5e:ab:0e:5d:65:97:2c:85:41:86:34:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:10:9C:AA:99:3C:16:5A:92:B3:46:B6:88:CD:1B:A5:28:CC:84:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fef471b-5da7-3f79-8ffa-48b5e0a44ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c08e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:89:e8:ba:d3:df:a1:22:b6:64:84:76:fe:20:1f:cf:fb:47:
         04:15:e9:b2:76:24:6a:71:86:01:cb:c3:29:c3:fe:a3:92:37:
         7d:5e:4f:ba:97:c3:6d:38:f5:c0:54:17:c0:72:d3:c5:97:a2:
         8f:bf:1d:91:15:6b:f3:1e:ff:ca:26:d4:62:83:47:cd:2b:cb:
         a1:2d:6c:3c:c2:3b:2c:ad:60:8c:66:d0:02:88:a1:9c:de:66:
         35:8a:8d:6d:e9:37:8f:88:76:97:26:b8:5a:cf:54:a3:2e:d8:
         6a:6c:b2:6b:4f:26:e4:f8:3d:9c:ae:e3:66:4b:56:1f:f3:69:
         1e:62:a4:88:79:e4:77:64:a3:d6:06:13:7e:68:68:80:5e:72:
         a7:5e:19:0a:db:6a:02:aa:13:b9:83:9a:8d:1c:dc:b7:6a:0e:
         be:f2:78:6e:09:30:77:be:04:a4:09:57:23:59:f9:42:52:45:
         48:4c:57:94:6d:ef:3b:20:18:d1:b3:46:21:9e:3e:19:c6:40:
         dc:07:2f:52:e4:2d:eb:4e:4c:3a:bf:09:6f:f4:16:10:9a:c9:
         d9:0d:8f:54:f7:40:eb:a3:2f:f1:45:8c:4e:02:f3:89:39:3e:
         45:b8:b8:16:c2:5b:23:a7:02:b1:0a:ef:7b:20:e2:36:48:b9:
         76:ee:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:44:00 2026 by rpki-client