Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c98924e3-97af-3c39-9d63-c74606dc8b73.roa
File:                     c98924e3-97af-3c39-9d63-c74606dc8b73.roa (raw, json)
Hash identifier:          9DTlARVv9HZPT7U4WyKxETd04spzN8bkdSCV1Gd81Xw=
Subject key identifier:   0C:43:EB:6D:3B:AC:39:ED:28:4A:83:26:DF:89:E2:62:FF:E7:47:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4981891BFB84D21D4D1663C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c98924e3-97af-3c39-9d63-c74606dc8b73.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7015
IP address blocks:        2001:559:8279::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:81:89:1b:fb:84:d2:1d:4d:16:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ce22c5f0-e0f6-4936-861a-27e697af1ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ae:39:e8:5b:6f:b1:90:23:08:13:3a:8b:ae:
                    16:da:05:ac:0f:f1:99:8c:f0:c2:14:33:8d:ab:f7:
                    f5:6b:b6:b5:7c:e0:15:02:34:4f:72:0a:ce:5c:dd:
                    04:3d:e3:51:9f:7a:9a:00:4b:02:14:01:ea:c0:c0:
                    38:6f:52:a8:db:8c:35:3a:37:eb:62:64:cb:60:b3:
                    6b:67:2b:aa:67:af:de:5e:0f:dc:89:70:97:78:8e:
                    a9:78:2c:d8:90:78:aa:02:68:99:73:df:78:e9:d7:
                    a9:1f:d5:1f:ce:1c:bf:bc:bd:5a:c0:c3:00:0c:c8:
                    9d:02:37:e9:bb:5c:b7:57:b9:7a:51:c6:49:a9:c4:
                    fc:1e:b9:cd:29:c5:79:e9:f8:b8:6c:35:1f:b0:00:
                    fd:ea:33:c0:25:a8:72:25:77:82:96:ae:26:7a:27:
                    de:ea:c6:05:b7:6b:3d:92:2d:a9:e6:79:a6:af:7e:
                    39:f0:53:2e:fe:7f:04:25:4c:1f:cf:0b:5f:c8:03:
                    56:f7:7d:58:cd:39:4f:2c:28:89:6f:bd:fa:3e:8a:
                    0b:e5:7b:73:29:49:26:25:5a:87:c0:6b:06:63:99:
                    d4:7b:98:b6:62:c6:0f:d6:f3:c7:8d:b1:1f:c0:c7:
                    97:9f:33:04:d2:c1:11:45:d5:28:bc:1d:ae:26:ce:
                    f2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:43:EB:6D:3B:AC:39:ED:28:4A:83:26:DF:89:E2:62:FF:E7:47:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c98924e3-97af-3c39-9d63-c74606dc8b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8279::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:f9:da:85:5b:05:a7:90:26:57:0d:c7:17:d2:5f:1d:26:
         c9:36:9c:6d:40:bd:db:7d:7e:93:0a:55:0e:58:4a:b0:05:54:
         38:f1:ce:5a:00:3c:65:e4:c4:14:d9:a2:67:fc:f4:4a:48:23:
         a6:d3:77:e2:2f:98:49:55:9f:a1:bc:a5:21:f4:48:97:cc:87:
         05:3e:7c:25:a9:d6:91:bb:46:70:67:fc:5b:f8:ad:4f:4c:ef:
         04:53:1f:bc:52:e7:02:d1:bd:bb:90:8b:63:0b:90:d9:a0:cb:
         5b:77:96:20:1e:bb:a4:f3:59:5f:85:33:8d:98:50:a3:81:25:
         dc:67:aa:5d:f2:b3:ab:e3:e5:03:8f:e6:d3:0a:f3:f1:4f:ad:
         65:54:f5:df:8d:ff:20:46:3b:36:dd:77:1b:c7:3a:93:66:85:
         5d:75:8e:04:1e:f1:65:0f:7e:08:e0:43:b9:a0:ea:51:1c:f0:
         2e:be:f7:d9:3f:37:9b:cc:59:81:15:56:3e:6a:c3:eb:f9:e5:
         cf:29:55:72:d5:f3:47:eb:f1:f3:b6:50:d2:1a:e4:8a:09:5e:
         7d:c6:98:90:fb:99:0e:ad:6b:3e:9e:60:8a:67:30:69:2e:a4:
         36:94:42:1c:c3:f5:c9:9b:29:cc:05:52:43:5a:94:4b:eb:c9:
         ff:90:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:59:07 2026 by rpki-client