Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0038cb7e-acd0-381b-ba65-f715cd725b23.roa
File:                     0038cb7e-acd0-381b-ba65-f715cd725b23.roa (raw, json)
Hash identifier:          2Tkf1lSWSlxXfCYrsVFRu4neF7lSbF/VPvsYR+x+4H8=
Subject key identifier:   2B:E0:3C:E6:14:F7:02:C0:32:3D:0A:AD:25:42:32:3D:13:C3:7F:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81000F2FEB2E964AF226B470
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0038cb7e-acd0-381b-ba65-f715cd725b23.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        2603:3001:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:0f:2f:eb:2e:96:4a:f2:26:b4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=d1b914e9-907b-4d2d-aa56-cdbb2b5bf9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f3:ee:70:9e:19:61:fc:4c:40:37:5f:02:92:
                    f1:34:b8:66:97:02:a8:3a:f4:91:78:31:7e:d0:dc:
                    45:27:86:77:a8:fb:d8:b7:5d:47:f1:e0:74:bb:6e:
                    69:b1:dd:09:62:14:95:31:11:a0:ab:de:ca:d4:48:
                    b8:1c:68:92:57:8f:f5:ad:88:26:00:88:ed:30:94:
                    27:6b:0e:46:1a:99:3a:41:10:95:26:a1:bb:75:2f:
                    1f:78:0c:02:d3:92:6e:5d:bb:7f:e6:c4:68:06:6d:
                    97:37:52:38:89:d1:a6:72:72:5e:d8:66:ba:a8:e3:
                    d4:35:64:f9:ad:93:a9:dc:5e:3e:59:6b:41:cc:2b:
                    a6:47:7d:47:9c:32:62:97:df:51:af:bc:51:f8:7c:
                    d4:af:4a:96:57:1b:ec:c8:87:7f:4e:49:01:87:16:
                    0b:7d:34:22:d9:88:d2:fc:ad:a4:b4:fe:7f:12:bc:
                    c3:5a:e7:c4:b0:cc:8b:b3:f8:b0:8e:11:a6:ef:f0:
                    e3:8a:f6:bb:0a:25:6c:3c:08:15:b9:a4:a4:ad:2a:
                    13:2c:08:60:c6:5b:82:27:ac:a7:09:f9:9d:f0:19:
                    10:5d:df:22:c6:4d:2a:1c:93:64:f6:f4:b6:ce:48:
                    96:b4:7f:f2:9f:c3:2f:44:a1:02:6c:65:24:3c:fd:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E0:3C:E6:14:F7:02:C0:32:3D:0A:AD:25:42:32:3D:13:C3:7F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0038cb7e-acd0-381b-ba65-f715cd725b23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3001:1200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:74:32:de:5c:ef:53:7e:6b:96:71:d0:db:74:b1:18:84:06:
         3d:26:83:c7:d5:9e:52:6c:c6:f0:3c:3e:3f:27:14:25:a2:83:
         7b:37:cf:c7:b8:5b:b0:21:c3:24:7c:71:11:9d:a0:4e:97:08:
         61:eb:b8:cc:29:9d:27:c2:b8:af:52:8a:e4:a3:ba:aa:00:f4:
         0b:4b:7a:9a:cf:8c:ab:18:1b:80:e2:d8:5a:3a:f7:25:91:f3:
         76:97:7f:b1:bf:30:a7:eb:c8:21:03:fe:ed:b8:0d:4f:a9:40:
         56:d6:de:e8:69:09:d5:bc:38:22:fc:95:29:1b:bf:4e:fd:f2:
         77:de:8e:e5:69:3c:bb:bf:53:90:5a:27:89:cb:95:a1:5c:fa:
         6d:87:d1:48:6e:d4:eb:52:ac:fb:d6:4c:1b:e5:37:0f:ca:79:
         2e:40:93:68:bb:2f:8a:34:c7:8c:99:a9:f1:2d:f9:8d:6c:e4:
         0a:f7:24:24:51:10:1d:66:88:fa:39:78:7a:70:14:b2:87:d4:
         d7:71:79:53:35:7e:72:f0:fd:bb:f9:f9:09:44:e2:92:a4:33:
         c6:04:bf:93:db:c5:73:26:0c:cb:90:46:52:9a:3e:a3:06:ee:
         42:46:fa:1b:f9:8b:e3:05:1d:8e:08:fa:08:6c:d8:07:ed:45:
         fc:76:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:51 2026 by rpki-client