Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad3e8c06-1ab9-3bee-9719-b4f67223c14d.roa
File:                     ad3e8c06-1ab9-3bee-9719-b4f67223c14d.roa (raw, json)
Hash identifier:          +T3tufZK8hG1HdqicZMuGR0ENQrc1VV/8D88FSTMXV0=
Subject key identifier:   40:B4:01:E2:07:1D:3A:CB:3B:84:05:52:AD:39:E5:25:95:77:1F:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4980656C48EEAD02318F8000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad3e8c06-1ab9-3bee-9719-b4f67223c14d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7016
IP address blocks:        2001:559:8592::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:65:6c:48:ee:ad:02:31:8f:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cfd17ba0-66b1-469c-8b09-17112b872da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:9a:95:1b:f6:44:4b:0a:06:33:e2:61:fa:
                    60:e7:dd:af:90:55:c9:45:4d:03:28:4e:95:cd:32:
                    38:ab:3c:bc:4f:66:f0:f3:a5:1f:88:38:8f:c2:70:
                    e4:61:95:28:13:86:5f:d2:b2:f2:f3:41:b7:92:06:
                    e8:89:b9:f1:4e:23:76:a4:bd:13:08:c1:cc:84:78:
                    1e:89:7e:1a:5b:5e:0a:d5:84:b7:18:87:76:1a:73:
                    f8:f2:e1:c9:27:6f:8c:55:84:56:ff:1e:74:66:b2:
                    a4:d9:0f:7f:51:50:50:8b:ab:39:40:7b:5b:23:52:
                    c7:de:c5:22:32:99:23:7d:cf:c0:dd:69:ce:ed:fd:
                    b6:84:ce:07:d4:ea:49:e3:03:ed:56:bf:aa:b8:32:
                    2c:9d:d2:58:cc:eb:9c:db:c9:53:82:66:c6:a0:95:
                    f7:4e:b7:33:39:1d:cc:e0:62:f0:1f:a4:36:b8:5e:
                    3f:92:fc:f1:e9:51:3d:bb:d1:9a:fb:f6:93:e4:02:
                    01:ac:6d:e8:6b:3d:3e:99:a0:02:a2:0a:b7:e8:37:
                    e4:3b:ad:9b:56:09:c3:f1:1b:10:45:a0:eb:39:7a:
                    70:87:45:bf:04:b4:7a:8c:4e:12:c9:9b:12:ce:3f:
                    2c:56:f1:b8:30:a6:64:53:50:b8:ea:d1:8f:55:07:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:01:E2:07:1D:3A:CB:3B:84:05:52:AD:39:E5:25:95:77:1F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad3e8c06-1ab9-3bee-9719-b4f67223c14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8592::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d1:69:b0:d4:84:a2:44:d8:8d:b2:0e:e2:20:c2:bc:d8:40:
         d5:31:44:c0:8c:b1:fa:08:ad:5a:52:20:7f:83:43:ce:2f:a3:
         5e:47:a6:0a:6c:0d:a5:07:bd:63:47:fb:9b:3d:a0:ff:96:6d:
         73:f5:b6:c1:9e:83:7c:fe:71:6e:7c:77:c5:12:2d:5a:a3:db:
         31:f5:c8:c4:be:df:13:d6:7b:50:bc:0b:96:0d:0c:62:01:77:
         a8:aa:bf:5c:ab:d3:9a:1e:c6:14:77:9c:71:a3:69:c0:33:db:
         26:63:63:a0:06:2e:97:cf:13:11:12:5d:02:b2:af:eb:f8:50:
         0f:dd:ac:c3:b5:89:f2:41:82:4b:c8:fd:85:14:f6:5f:fd:c5:
         2a:5c:7e:5c:1e:bc:4d:6e:52:a8:ee:3a:2f:10:b2:14:5b:fb:
         3a:e7:5c:61:f0:53:bf:1c:40:a7:d2:64:78:40:d6:4a:b7:39:
         20:05:86:da:dd:b7:4a:10:7e:03:16:40:ea:da:a3:8c:af:60:
         19:16:5e:88:53:54:b3:58:ab:56:f3:a4:7d:de:de:a5:d1:e9:
         22:64:f2:75:7a:5a:e7:0c:c0:60:2e:2d:12:13:b0:d2:09:ee:
         20:94:9a:64:ba:b3:4d:31:e8:1a:6e:01:90:55:85:c3:c4:37:
         db:8d:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:59:35 2026 by rpki-client