Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1fe9cf3-bb33-3a39-936c-e10be70f717a.roa
File:                     f1fe9cf3-bb33-3a39-936c-e10be70f717a.roa (raw, json)
Hash identifier:          Yo/Xp09XM6dmpbg9tivs3kU36LGHTAJKCy5Tgg3PS7I=
Subject key identifier:   AA:82:C6:A3:2B:0B:A8:66:E0:27:DE:50:0A:F9:1A:1E:0A:12:4F:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4979CD7F83FD3F0AE3E8B900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1fe9cf3-bb33-3a39-936c-e10be70f717a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33287
IP address blocks:        2001:559:2c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:79:cd:7f:83:fd:3f:0a:e3:e8:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fcc65f1a-9668-48ed-8790-d80625130851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:3a:46:37:3a:26:3f:b5:a8:c8:cf:9c:45:
                    b9:55:ed:0f:c8:d9:10:32:ab:f2:01:05:84:36:cd:
                    df:9c:81:50:91:09:ed:51:84:91:65:fb:ee:10:22:
                    46:91:78:a4:c9:f8:39:e9:0c:c7:3f:aa:32:b9:3b:
                    d0:18:e0:59:52:72:49:a9:56:23:5d:d6:85:07:05:
                    aa:48:a5:49:62:80:b6:4f:31:ef:b1:25:84:ee:96:
                    b8:cd:84:8e:14:fe:78:3c:a0:3c:df:c0:1d:1f:be:
                    56:46:ae:25:b0:d3:62:3b:45:93:09:97:1c:04:13:
                    5a:20:c6:f2:e2:06:3e:85:e5:3f:84:1c:34:70:36:
                    33:7b:01:45:8a:37:90:1d:fc:16:6b:78:09:6e:ac:
                    a5:ff:55:cd:72:f1:3a:66:c3:1b:95:b3:d1:d2:b5:
                    a8:8f:bc:1d:1e:ea:dc:26:16:ae:63:bf:9b:c1:2e:
                    0a:28:5e:3f:ac:88:3d:24:50:95:f5:3a:36:a7:2e:
                    f9:34:8e:ca:0d:eb:f6:01:51:f1:8c:35:f5:07:62:
                    3a:2d:33:e4:f5:48:17:0f:93:67:68:28:88:43:3b:
                    5e:b7:c6:c7:cb:a3:ec:08:de:d1:42:c0:dc:1d:be:
                    6b:83:12:63:98:19:09:2d:30:32:ca:ea:50:86:8b:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:82:C6:A3:2B:0B:A8:66:E0:27:DE:50:0A:F9:1A:1E:0A:12:4F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1fe9cf3-bb33-3a39-936c-e10be70f717a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:2c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:36:39:37:01:86:73:3c:a3:e0:43:ee:f2:b5:33:43:aa:
         d1:33:b0:94:31:aa:57:23:56:a7:18:21:d7:6b:2d:c1:4f:70:
         da:1d:38:e6:f7:db:38:2c:c8:b8:7b:09:94:6f:ff:dc:a9:77:
         9f:82:bf:a7:f5:22:3a:b8:77:e0:0b:d6:a2:4e:e8:bf:0c:88:
         65:bc:3f:df:4d:7d:11:97:ae:d0:7a:0b:3c:d4:06:10:0c:f8:
         29:56:5e:05:c8:82:41:36:9a:f0:5a:c9:72:01:37:9e:6c:50:
         ad:98:83:a1:cd:32:3d:8b:f4:ea:71:a3:d8:b7:35:d0:d0:17:
         c8:08:44:cd:3e:70:8f:a1:80:79:fc:e8:93:1c:81:93:f7:92:
         95:4b:92:04:96:36:41:18:c8:67:ee:60:ac:7b:1f:30:8d:2b:
         f3:52:e7:9d:ba:8d:c6:df:30:c8:08:1f:e2:ea:cc:8b:80:9f:
         ec:af:98:09:57:af:86:b3:11:cc:a3:a2:1e:78:96:79:5f:48:
         12:3f:43:d0:47:e4:b2:c8:48:70:e3:55:87:f2:cc:d7:7a:24:
         9e:cd:fa:1a:03:7a:a0:64:98:f1:36:f1:ea:b4:44:8b:5a:09:
         f2:cf:e4:db:72:67:09:de:7b:63:53:5b:80:af:98:e6:a7:04:
         1b:0c:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:49:39 2026 by rpki-client