Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0878a6f4-893b-3c3a-bbd6-a5c77ba25838.roa
File:                     0878a6f4-893b-3c3a-bbd6-a5c77ba25838.roa (raw, json)
Hash identifier:          QBDRd1lMXiIjDM8z98edgbHn/jMjcDCxXWbRrzH06FI=
Subject key identifier:   78:FE:37:DC:00:9B:AF:26:AA:90:D2:47:C5:7F:51:76:E0:1F:E7:42
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBC75B38C6B1BF8E7FAE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0878a6f4-893b-3c3a-bbd6-a5c77ba25838.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        2601:197::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:c7:5b:38:c6:b1:bf:8e:7f:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=b32643bf-36de-46b9-a854-9392f84677d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:45:03:13:19:36:84:7b:80:ed:53:3e:89:
                    cb:64:42:fe:f2:93:7a:96:bd:32:47:6f:f4:97:78:
                    4c:a2:4f:82:44:35:fa:d1:6d:09:f4:ad:73:6f:79:
                    8c:75:ee:4b:d1:da:70:91:40:73:38:96:5f:7e:24:
                    cc:de:f6:af:75:b0:e8:a6:14:5e:84:be:67:f4:75:
                    4c:15:43:df:f8:c5:60:c1:36:6d:b1:7f:e7:81:67:
                    73:91:5e:93:b4:06:24:01:66:b1:a7:47:f8:41:bb:
                    36:30:5b:6a:b4:fb:94:91:7e:32:de:88:2a:48:50:
                    01:1a:1e:6e:53:62:93:91:ec:f2:a3:41:7e:41:50:
                    69:be:72:83:95:1f:dc:0c:df:b9:04:b6:04:40:fb:
                    41:93:79:c0:29:1b:b6:1f:33:9e:73:f5:f0:b0:8a:
                    8b:16:4a:ef:6c:d3:85:78:b0:72:be:35:9a:a9:43:
                    22:51:33:ba:d1:dd:50:1c:fb:11:f9:35:18:de:29:
                    bc:ff:69:c9:a7:a9:88:05:68:90:96:28:ce:a0:69:
                    f3:d1:74:bd:2a:90:e0:47:9e:28:63:9b:e7:94:ce:
                    95:8b:40:e9:13:a0:22:1b:a1:ba:6b:bd:90:ef:65:
                    b0:f0:77:9f:71:4e:a5:87:f2:1e:4a:7c:24:89:b6:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FE:37:DC:00:9B:AF:26:AA:90:D2:47:C5:7F:51:76:E0:1F:E7:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0878a6f4-893b-3c3a-bbd6-a5c77ba25838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:197::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:70:96:70:77:3e:4a:4a:c2:db:34:0d:4f:29:69:da:b7:21:
         27:c9:39:8a:c8:d9:35:c1:43:de:40:80:fe:d0:c9:63:de:fd:
         a6:c4:2c:0a:58:62:39:26:58:32:bf:7d:5c:60:b1:14:53:51:
         8c:f2:0f:55:13:b5:01:33:12:29:9f:72:a5:f7:a4:9f:9e:34:
         22:2f:d6:57:25:85:f9:bc:3b:d2:bf:a5:b5:88:3b:94:73:1c:
         b6:de:7f:2e:b8:18:28:fd:0c:04:cb:8f:5c:d5:05:cd:2f:ae:
         77:6a:93:5d:a3:6e:a3:98:8e:64:4c:77:2e:60:ce:14:29:4e:
         c2:e8:4f:4e:0a:98:d3:28:1d:56:c5:a0:f2:cf:7b:ef:3f:47:
         97:f9:87:5a:12:96:2d:74:ed:a9:2c:a1:46:6c:e6:0a:55:15:
         3b:19:79:be:31:9f:fa:27:ae:d9:17:2d:2b:f5:fd:e9:f9:6e:
         5e:1d:b0:5e:9f:62:5a:20:63:fe:9a:fb:af:71:96:9a:5c:b9:
         37:c3:87:c5:ec:09:92:86:72:08:5d:de:0a:96:84:77:bb:50:
         60:b0:14:d7:79:f7:f3:83:9a:61:19:22:68:c9:5f:d7:d9:e1:
         21:7e:93:b2:c5:53:77:dc:eb:70:d3:83:2d:e8:58:54:65:27:
         9e:4f:06:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:34 2026 by rpki-client