Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/940252d0-9dfa-3c76-8454-27df2c06dccd.roa
File:                     940252d0-9dfa-3c76-8454-27df2c06dccd.roa (raw, json)
Hash identifier:          hwBlEui86bhxg0FlulAn4hiIpaKnVKsrMBhTE7nocSQ=
Subject key identifier:   19:BA:5D:C3:BF:8C:EA:F1:B2:14:5D:37:7A:8E:5F:6C:D3:5A:43:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D3DFF8904DAB6F3673FEE9600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/940252d0-9dfa-3c76-8454-27df2c06dccd.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     7922
IP address blocks:        2001:558:b0::/44 maxlen: 44
                          2001:558:120::/44 maxlen: 44
                          2001:558:1b0::/44 maxlen: 44
                          2001:558:260::/44 maxlen: 44
                          2001:558:270::/44 maxlen: 44
                          2001:558:280::/44 maxlen: 44
                          2001:558:290::/44 maxlen: 44
                          2001:558:2b1::/48 maxlen: 48
                          2001:558:330::/44 maxlen: 44
                          2001:558:390::/44 maxlen: 44
                          2001:558:410::/44 maxlen: 44
                          2001:558:430::/44 maxlen: 44
                          2001:558:440::/44 maxlen: 44
                          2001:558:4c0::/44 maxlen: 44
                          2001:558:1013::/48 maxlen: 48
                          2001:558:10fd::/48 maxlen: 48
                          2001:558:5000::/48 maxlen: 48
                          2001:558:600e::/48 maxlen: 48
                          2001:558:6018::/48 maxlen: 48
                          2001:558:8009::/48 maxlen: 48
                          2001:558:fc0a::/48 maxlen: 48
                          2001:558:fc11::/48 maxlen: 48
                          2001:558:fc18::/48 maxlen: 48
                          2001:558:fc1d::/48 maxlen: 48
                          2001:558:fd00::/48 maxlen: 48
                          2001:558:fd01::/48 maxlen: 48
                          2001:558:fd02::/48 maxlen: 48
                          2001:558:fd04::/46 maxlen: 46
                          2001:558:fd08::/46 maxlen: 46
                          2001:558:fd0c::/46 maxlen: 46
                          2001:558:fe1f::/48 maxlen: 48
                          2001:558:fe21::/48 maxlen: 48
                          2001:558:fe39::/48 maxlen: 48
                          2001:558:fe3b::/48 maxlen: 48
                          2001:558:fe3f::/48 maxlen: 48
                          2001:558:fee0::/48 maxlen: 48
                          2001:558:fee3::/48 maxlen: 48
                          2001:558:fee5::/48 maxlen: 48
                          2001:558:fee8::/48 maxlen: 48
                          2001:558:fefa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:89:04:da:b6:f3:67:3f:ee:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=bf7f16a9-79f3-4261-a1f5-701014e66447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:2b:8d:b3:f6:c6:d0:5e:55:11:37:74:0d:
                    0f:56:de:73:45:ac:94:42:8b:87:33:3c:20:72:8a:
                    41:fe:e4:6d:fa:f6:52:27:41:43:30:3d:cf:ac:2e:
                    f3:4c:f9:21:6e:29:8a:29:10:74:48:47:04:fc:19:
                    2a:25:8c:d1:81:89:57:0f:13:a7:be:72:f9:06:17:
                    44:a6:3f:13:ab:1c:e3:2a:ae:9a:ef:1e:77:de:41:
                    da:88:09:42:c3:db:32:60:63:5b:48:b1:82:b5:2a:
                    35:ca:30:50:a9:0c:d6:49:21:39:44:0a:07:5b:b6:
                    01:18:19:6f:29:35:85:8e:5d:3f:eb:01:68:f3:89:
                    e6:ec:9a:47:e7:2e:86:49:bf:e4:77:fd:5c:26:a0:
                    72:81:17:f0:b3:79:f4:9b:95:ce:d5:c9:f4:30:a2:
                    f6:ad:77:fc:a7:75:6f:f0:9f:7b:93:c7:a3:ef:4a:
                    28:65:c0:96:2b:48:d3:ca:bb:c6:80:ef:31:18:00:
                    a2:06:1a:33:40:52:c4:36:34:de:cb:96:1c:6c:bf:
                    d7:1d:95:14:e6:e5:32:ed:44:55:ce:7a:c2:4d:1f:
                    73:8a:51:9a:7a:e0:df:4b:85:d1:12:ee:dd:f4:dc:
                    2d:35:e1:c0:b9:11:c6:50:cf:07:78:23:27:60:02:
                    4f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BA:5D:C3:BF:8C:EA:F1:B2:14:5D:37:7A:8E:5F:6C:D3:5A:43:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/940252d0-9dfa-3c76-8454-27df2c06dccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:b0::/44
                  2001:558:120::/44
                  2001:558:1b0::/44
                  2001:558:260::-2001:558:29f:ffff:ffff:ffff:ffff:ffff
                  2001:558:2b1::/48
                  2001:558:330::/44
                  2001:558:390::/44
                  2001:558:410::/44
                  2001:558:430::-2001:558:44f:ffff:ffff:ffff:ffff:ffff
                  2001:558:4c0::/44
                  2001:558:1013::/48
                  2001:558:10fd::/48
                  2001:558:5000::/48
                  2001:558:600e::/48
                  2001:558:6018::/48
                  2001:558:8009::/48
                  2001:558:fc0a::/48
                  2001:558:fc11::/48
                  2001:558:fc18::/48
                  2001:558:fc1d::/48
                  2001:558:fd00::-2001:558:fd02:ffff:ffff:ffff:ffff:ffff
                  2001:558:fd04::-2001:558:fd0f:ffff:ffff:ffff:ffff:ffff
                  2001:558:fe1f::/48
                  2001:558:fe21::/48
                  2001:558:fe39::/48
                  2001:558:fe3b::/48
                  2001:558:fe3f::/48
                  2001:558:fee0::/48
                  2001:558:fee3::/48
                  2001:558:fee5::/48
                  2001:558:fee8::/48
                  2001:558:fefa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:7a:2b:a3:fc:69:a2:fb:ae:8b:5f:31:9f:9d:32:fe:2c:
         b8:90:c0:a5:9a:e1:b6:68:90:0d:80:1a:0e:2a:ed:20:b1:2e:
         06:a1:26:d8:8e:8f:dc:f1:89:81:33:5e:29:ca:23:e3:ae:9b:
         d1:8c:9d:4c:a6:01:80:63:bb:95:ff:9e:f0:f7:f0:f8:a0:01:
         74:68:c3:92:11:e9:31:28:72:2b:90:73:06:4f:46:35:22:34:
         d9:2f:e3:86:fd:36:3c:64:53:f5:88:e4:d3:b6:93:fa:eb:f1:
         75:fd:0f:64:b6:7e:3a:4b:dc:e4:b0:54:19:0f:14:a6:81:87:
         9f:c6:f5:53:cb:64:23:53:b2:f6:53:2b:11:22:c0:e5:82:38:
         1d:0e:ae:8a:13:2c:75:01:ee:49:4e:5e:ad:0b:92:c1:c7:e8:
         8c:be:d8:bb:6d:ac:9f:7f:09:18:c5:91:2a:d1:56:ed:a9:2f:
         e5:47:43:d4:cb:71:64:00:69:a4:97:5a:68:35:ff:da:d0:7d:
         63:ff:16:a8:06:18:5e:33:34:54:b9:fd:be:f1:16:f1:bf:b8:
         73:0d:8b:28:1f:4c:31:47:a9:8b:9c:89:df:14:af:0e:96:54:
         db:1c:e3:f3:42:00:e9:1e:8b:48:87:11:27:37:48:ea:7d:05:
         5a:a4:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:32:44 2026 by rpki-client