Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03f231c6-f62a-34ab-8c8c-b84f25ea48f5.roa
File:                     03f231c6-f62a-34ab-8c8c-b84f25ea48f5.roa (raw, json)
Hash identifier:          pexnLj4taxjkwPUAOOYNzt8nACoCZ6yoqnYLchsW9z0=
Subject key identifier:   2A:88:1F:BC:AA:11:61:CD:55:3A:B7:13:20:D5:D5:65:69:21:4F:40
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78A0857D1EEAEDF92462D60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03f231c6-f62a-34ab-8c8c-b84f25ea48f5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7015
IP address blocks:        2001:559:3aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8a:08:57:d1:ee:ae:df:92:46:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c3ea8cea-763a-43b6-9bb1-eb7e56d0974a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ad:74:0e:70:29:c4:e3:11:ae:0c:74:a0:ff:
                    db:f0:82:84:fa:48:39:2d:1b:90:c4:7f:f4:64:c9:
                    9e:a5:40:f1:c0:cc:d7:8c:14:c6:a7:cb:ab:b9:41:
                    c0:9f:64:52:a7:5e:f9:aa:87:b2:61:03:b9:ba:1e:
                    4a:09:2e:fe:fb:c1:d9:10:6a:21:86:18:a9:83:45:
                    a9:e6:d8:39:ce:23:00:37:0c:c7:cb:5a:07:55:6e:
                    05:09:6b:75:f7:54:96:3a:68:a7:4b:69:2a:1f:54:
                    67:ec:1d:07:8a:76:74:8f:e3:79:6f:e2:2e:2c:51:
                    da:db:84:92:f8:8a:eb:a2:36:d8:5d:80:b5:bd:95:
                    6d:61:3b:8b:1d:e3:7a:5c:79:02:7c:3d:61:5b:e4:
                    1c:ad:5a:b5:30:3f:21:78:01:d4:cd:6a:6a:f5:6b:
                    13:0e:74:29:7b:fe:63:55:4b:1a:3e:5c:db:12:f9:
                    2e:62:ef:2a:85:37:17:c6:76:71:82:e8:7a:f1:56:
                    0b:6b:b4:5e:ce:d0:33:51:ae:c9:21:0f:2b:2b:e5:
                    9e:50:3d:e3:22:3b:0c:f6:a9:e3:32:f2:82:68:cc:
                    04:28:ce:8f:eb:85:5f:d9:66:d1:1a:19:c4:e2:fa:
                    a0:d8:32:e6:41:e3:22:67:13:8a:23:c5:fa:5a:53:
                    65:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:88:1F:BC:AA:11:61:CD:55:3A:B7:13:20:D5:D5:65:69:21:4F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03f231c6-f62a-34ab-8c8c-b84f25ea48f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:0e:1b:92:ce:ca:4f:0a:eb:b4:10:17:34:ab:81:c7:ba:
         d8:63:d6:31:92:df:50:39:b5:45:58:a5:44:b0:51:93:f6:50:
         5f:ba:b7:45:bd:6f:36:88:8a:e1:a3:5d:79:d2:26:49:c0:2f:
         be:89:49:25:7f:20:aa:4b:3e:16:45:fa:f2:f1:de:d1:ce:a2:
         1b:95:84:1b:d0:3f:20:e4:4e:02:af:23:cd:4d:c7:28:f5:36:
         06:29:c4:fb:c7:fb:9e:e1:ff:e0:44:8d:a6:f7:a7:6b:b9:a0:
         87:7a:45:d0:4a:58:c1:8b:d9:66:b1:d6:f7:9d:88:e2:f9:19:
         03:3a:ea:e6:4b:68:dc:c0:d9:0a:ac:40:72:95:1b:6f:d4:dd:
         e8:42:d1:57:b8:d8:f4:90:0e:f1:1c:e7:97:57:55:29:11:55:
         e4:b3:77:ad:3b:8b:a3:f1:1a:7b:d5:96:4e:f9:ca:5a:26:4e:
         f4:9b:e3:7f:88:71:18:2d:6d:16:cb:67:37:5e:9f:66:fc:7a:
         2b:f6:64:67:fb:46:83:ea:c7:23:85:db:07:90:22:44:13:77:
         5f:a4:0b:e3:4b:8d:67:ba:0c:54:4b:d0:59:0a:cc:bd:ee:a9:
         1b:d0:be:21:7b:cc:3c:5a:f0:f6:47:1e:1e:7b:79:f5:4c:9c:
         d1:cd:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:15 2026 by rpki-client