Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115f12f6-a295-3933-9dc4-f5bb7ef16ba6.roa
File:                     115f12f6-a295-3933-9dc4-f5bb7ef16ba6.roa (raw, json)
Hash identifier:          EnDhD55dtiPclplSA/PmgCLkf0C9+7DmampEvZgnnmo=
Subject key identifier:   F5:78:98:24:C9:B4:53:8E:37:9D:A2:63:0A:D7:AC:21:44:D7:2E:D9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58BB18CB20AFD6FE1883C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115f12f6-a295-3933-9dc4-f5bb7ef16ba6.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        2601:646::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:bb:18:cb:20:af:d6:fe:18:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=903d841e-fea3-4513-9bb0-394ba081edc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:51:d9:2c:e5:a0:d6:a6:10:11:9f:f5:92:
                    02:24:7c:cc:22:0d:d6:3f:46:e7:1c:8f:8f:48:82:
                    3e:de:ac:18:bf:cb:b0:11:bf:03:eb:81:23:e7:a6:
                    5a:6c:35:89:31:57:76:db:dc:af:e6:5f:e7:9a:98:
                    7b:de:75:e1:c0:e7:90:a7:d6:73:9c:f7:0c:f3:bb:
                    a2:16:8b:fd:1e:16:b3:f3:08:35:7e:46:3a:11:3d:
                    de:72:2f:a2:30:05:3b:ac:c4:a6:34:d1:16:54:f8:
                    67:75:c3:0f:f7:5d:d4:25:f4:3e:52:82:91:2b:12:
                    37:d3:5c:50:18:c0:2e:4d:c5:e0:55:54:75:e1:76:
                    9d:61:13:db:a6:c8:4d:d5:60:d6:c1:98:09:02:e5:
                    f3:c1:f3:a3:5d:88:f7:29:70:ac:64:ed:49:c7:a6:
                    c6:30:cf:bd:bc:d5:b3:22:29:d9:3e:c7:7d:ae:d8:
                    e1:3f:2a:16:69:a8:aa:16:3f:7a:82:ab:ac:ee:09:
                    c9:91:f5:37:31:2b:ba:32:0d:9c:bd:fd:19:ab:a8:
                    de:f3:62:e8:f4:93:78:04:d8:4b:cd:9a:59:e0:df:
                    a6:49:ce:1e:bc:77:ce:62:ae:5e:c3:24:79:5a:20:
                    f5:81:00:46:05:7a:9d:b9:5d:aa:ce:d8:30:a2:cd:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:78:98:24:C9:B4:53:8E:37:9D:A2:63:0A:D7:AC:21:44:D7:2E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115f12f6-a295-3933-9dc4-f5bb7ef16ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:646::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:17:3f:99:2b:85:44:a7:7d:1c:f7:83:cc:1e:fb:85:65:8b:
         40:13:60:d4:eb:aa:ee:5c:6a:94:5d:e3:d3:d9:8a:ac:1e:4c:
         8b:99:65:54:df:fe:4b:0f:93:50:b9:9d:76:b0:cd:96:87:97:
         5d:cb:a5:88:46:e0:7f:fc:9d:a9:b5:f4:35:31:76:44:f2:1b:
         d2:b2:6b:14:43:ee:f0:43:66:d2:b5:bd:5a:70:a1:4f:3b:fb:
         3e:6a:4b:e9:b6:b4:7d:b4:79:ac:80:1c:25:c9:42:4c:b1:df:
         f6:06:14:a9:fa:67:dd:35:3c:69:e6:68:29:13:d4:e1:ec:86:
         74:0e:35:3c:12:eb:10:ab:25:48:73:4b:dd:56:44:34:dd:ba:
         93:d4:68:5c:1e:e0:e5:6e:61:b3:3b:50:ed:26:e6:05:aa:0b:
         aa:9c:ce:18:ee:af:6c:22:41:d8:ee:f4:da:75:0a:ef:0b:70:
         70:b8:46:a9:2b:5b:ce:08:09:77:3a:cd:49:8c:53:56:e1:81:
         8c:24:e5:bb:e4:0e:37:84:62:da:3b:9f:f2:4d:67:1e:f7:28:
         81:3e:6a:0b:17:52:c8:65:36:1a:0b:91:67:79:52:5b:67:06:
         52:d8:81:21:25:71:60:76:13:c6:16:3e:d0:0b:ad:ee:d3:8b:
         d4:3a:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:11:06 2026 by rpki-client