Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1fdbec7-a7b9-3873-b179-bc9a70ee6673.roa
File:                     e1fdbec7-a7b9-3873-b179-bc9a70ee6673.roa (raw, json)
Hash identifier:          JcEs+GFOmYMR1YS4zmF3eaUFbrLeX266rc4m1YVLaTQ=
Subject key identifier:   7F:7D:6B:D2:E1:F3:BA:7E:D2:E5:97:B4:36:CC:C0:7E:C5:5B:5D:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F498211474372E4B7D6821A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1fdbec7-a7b9-3873-b179-bc9a70ee6673.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13367
IP address blocks:        2001:559:c498::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:82:11:47:43:72:e4:b7:d6:82:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3b68a73e-0a21-4be0-a34a-ebef5796d791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:04:2b:59:c8:4c:d9:0c:cb:65:2b:4b:75:
                    f0:5a:d6:11:dd:c0:aa:79:9b:eb:24:87:be:b1:6c:
                    06:87:cb:c2:91:22:50:6c:d5:5b:97:12:f1:b1:2a:
                    a2:b8:5a:69:d3:65:62:3e:87:1c:a8:0b:14:bb:77:
                    15:4e:66:b7:2b:c4:30:81:1c:68:ad:0a:71:de:6f:
                    88:4e:27:2b:bd:76:b7:63:91:b3:54:5d:e0:6d:88:
                    6b:4e:f0:21:23:46:f3:1a:3b:0b:e2:14:b5:c1:43:
                    ef:4c:41:f4:9a:a7:9b:03:12:7c:b8:e0:a0:c7:5b:
                    91:92:13:93:bb:47:76:1d:63:7a:05:47:a4:dd:68:
                    0c:a7:62:33:f6:2e:36:85:5d:7e:d2:d8:37:f0:6d:
                    40:57:6f:17:38:23:bf:91:b9:d7:32:8a:68:ac:f5:
                    11:3a:0f:ef:1f:f5:00:8c:30:91:df:d8:2f:b5:5d:
                    64:b9:bb:07:bb:c5:4b:de:85:d6:d3:70:f0:2a:21:
                    18:1e:bf:4e:a9:f1:79:e7:74:72:2f:ac:f2:0d:48:
                    0d:b6:c6:c5:d7:1b:68:45:67:57:a5:7d:fd:7c:df:
                    05:53:ec:ab:e7:22:d4:0d:fb:29:d5:70:cb:41:9f:
                    79:06:b1:5d:38:64:e8:06:c9:16:bc:d6:16:30:24:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7D:6B:D2:E1:F3:BA:7E:D2:E5:97:B4:36:CC:C0:7E:C5:5B:5D:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1fdbec7-a7b9-3873-b179-bc9a70ee6673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c498::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:d1:f7:9e:ec:f9:c1:9e:78:72:cf:99:fd:fe:e0:cb:d3:9e:
         17:c0:ff:86:3b:ac:f2:d8:ce:61:27:1a:96:5d:4a:4d:3b:69:
         3b:8a:74:43:6b:9a:85:52:85:e5:ad:5c:bc:7b:70:24:e9:c5:
         d9:47:d0:66:9e:17:3e:a1:84:04:cc:18:0f:8c:52:74:e6:43:
         3a:7c:15:ed:6f:98:ea:26:bd:a8:11:50:e9:22:94:48:83:b9:
         12:59:a5:4f:1f:56:5d:cb:0b:a5:34:fb:76:28:79:5a:ab:db:
         6e:2f:01:49:41:a1:54:e1:4c:60:18:62:72:28:be:e4:f4:74:
         06:7b:64:28:13:9b:f6:66:7d:e1:f0:94:43:42:62:52:d3:5e:
         2f:bd:a2:de:6c:a5:ef:1b:62:d9:b3:9d:ec:71:6d:b6:75:74:
         aa:e2:11:15:c4:c0:ea:f8:0a:41:a1:3c:06:48:6f:1c:86:22:
         41:47:3f:6f:0c:1f:e3:a6:28:25:25:0c:44:87:8b:8c:51:3e:
         63:7a:85:2e:ff:fd:e2:91:93:33:0c:e0:7e:43:c0:8f:3e:55:
         6e:89:f4:66:d4:f6:0a:31:60:fd:4b:42:6f:1c:6b:ba:87:34:
         5c:f0:ce:41:3a:e7:b9:8b:3e:0a:61:09:24:bb:42:cf:1d:71:
         40:31:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:59:40 2026 by rpki-client