Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c14f2479-2c39-3dc7-b4d4-5d8f325ac5cc.roa
File:                     c14f2479-2c39-3dc7-b4d4-5d8f325ac5cc.roa (raw, json)
Hash identifier:          1d0p8Gyeilw6WxrzAafUw0zUnZGDf/HDIX9TTQBWRlk=
Subject key identifier:   FC:CF:B6:D8:F3:9E:FB:A8:7F:C9:1C:5A:74:82:FB:79:AC:62:25:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E614502CB759B30085B187580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c14f2479-2c39-3dc7-b4d4-5d8f325ac5cc.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7015
IP address blocks:        2001:559:e045::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:02:cb:75:9b:30:08:5b:18:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=759020b6-416d-4570-bb87-69e41b1bca6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:c3:e7:bf:82:d7:b0:d2:1a:e5:7c:f2:62:
                    7a:47:fc:31:12:88:5e:59:55:a1:69:b2:9d:b4:56:
                    f5:04:ad:9d:47:74:f7:7d:4f:bf:69:46:80:ff:2d:
                    fd:00:76:fd:3f:1f:1e:1b:84:ef:0a:85:c2:d4:57:
                    90:2b:69:7b:72:65:75:3f:36:b3:52:0f:8e:48:b9:
                    3a:40:ea:bd:a8:be:af:ce:40:68:53:cd:e4:f7:2e:
                    2d:ff:f1:6d:ae:aa:91:c6:a0:82:b4:a6:b0:c2:90:
                    c7:f1:38:ee:28:64:dc:49:1f:fe:75:9f:f1:6d:4f:
                    2f:bb:37:0d:82:a7:23:a2:97:d0:8e:44:94:6d:66:
                    71:0b:a5:78:04:a9:d6:93:ea:9d:dd:f0:1f:cf:0d:
                    cf:fa:62:13:65:7e:d2:b3:0f:bd:30:f3:b4:ea:f8:
                    8a:71:0c:5c:7b:a8:92:0c:f7:68:12:b7:85:72:9e:
                    61:b9:6d:b7:43:14:4c:a3:dd:27:1f:8a:07:ec:2a:
                    c4:14:0e:6a:7d:28:db:7d:1a:c9:a6:9d:9c:93:66:
                    30:63:4a:74:50:f6:ff:30:9e:c4:25:61:bc:de:da:
                    cc:10:14:74:0c:0e:d5:84:27:2f:25:57:c8:19:76:
                    05:4c:23:3f:86:e7:21:4f:11:63:9e:f7:24:7e:2e:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CF:B6:D8:F3:9E:FB:A8:7F:C9:1C:5A:74:82:FB:79:AC:62:25:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c14f2479-2c39-3dc7-b4d4-5d8f325ac5cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e045::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:46:a2:b4:37:16:15:63:d3:e0:b2:21:3d:d1:f7:78:53:
         f0:c5:44:54:36:db:72:6d:5a:2b:1b:50:28:d7:81:87:b7:8c:
         4f:70:98:d4:6c:c2:fb:50:c0:4a:6a:8e:f6:11:49:af:5a:35:
         ca:bb:05:3d:69:4b:be:9a:50:ab:c3:a5:f1:00:eb:99:90:70:
         75:08:5e:a2:78:3d:77:ef:9a:cf:6a:2b:cf:9d:bc:82:ad:26:
         2f:b0:f3:f8:8d:68:87:27:51:a9:fb:27:8b:cb:66:83:a5:0f:
         1f:1a:bf:b0:99:55:bc:6b:00:58:6e:24:70:cf:71:3f:f9:09:
         8f:fb:4b:9a:0f:eb:06:10:4f:97:21:6f:5d:ce:07:96:b5:82:
         9d:74:ff:7b:79:8b:1a:d6:ac:eb:76:ed:63:9c:7a:8d:b1:56:
         53:39:29:4b:9b:da:4f:13:df:df:11:82:03:ee:9b:e7:b3:0e:
         a7:48:e8:d7:5e:a3:bd:53:ae:41:49:3d:07:e7:2c:01:9f:9f:
         21:d7:4d:58:5d:44:15:c7:b7:ab:14:00:0a:71:3d:fe:11:73:
         15:92:99:f8:6c:0c:29:4c:61:b1:2a:70:79:d9:89:dc:6a:58:
         3d:fc:94:77:6d:3b:63:f6:6b:73:93:48:f7:fa:d8:3f:06:f4:
         02:b1:0c:59
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5hRQLLdZswCFsYdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
NzU5MDIwYjYtNDE2ZC00NTcwLWJiODctNjllNDFiMWJjYTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTHD57+C17DSGuV88mJ6R/wxEoheWVWhabKd
tFb1BK2dR3T3fU+/aUaA/y39AHb9Px8eG4TvCoXC1FeQK2l7cmV1PzazUg+OSLk6
QOq9qL6vzkBoU83k9y4t//FtrqqRxqCCtKawwpDH8TjuKGTcSR/+dZ/xbU8vuzcN
gqcjopfQjkSUbWZxC6V4BKnWk+qd3fAfzw3P+mITZX7Ssw+9MPO06viKcQxce6iS
DPdoEreFcp5huW23QxRMo90nH4oH7CrEFA5qfSjbfRrJpp2ck2YwY0p0UPb/MJ7E
JWG83trMEBR0DA7VhCcvJVfIGXYFTCM/huchTxFjnvckfi6cSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPzPttjznvuof8kcWnSC+3msYiWVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzE0ZjI0NzktMmMzOS0z
ZGM3LWI0ZDQtNWQ4ZjMyNWFjNWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeBF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC65RqK0NxYVY9PgsiE90fd4U/DFRFQ223JtWisbUCjXgYe3jE9w
mNRswvtQwEpqjvYRSa9aNcq7BT1pS76aUKvDpfEA65mQcHUIXqJ4PXfvms9qK8+d
vIKtJi+w8/iNaIcnUan7J4vLZoOlDx8av7CZVbxrAFhuJHDPcT/5CY/7S5oP6wYQ
T5chb13OB5a1gp10/3t5ixrWrOt27WOceo2xVlM5KUub2k8T398RggPum+ezDqdI
6Ndeo71TrkFJPQfnLAGfnyHXTVhdRBXHt6sUAApxPf4RcxWSmfhsDClMYbEqcHnZ
idxqWD38lHdtO2P2a3OTSPf62D8G9AKxDFk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:12 2026 by rpki-client