Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13cd37d9-3cbe-348d-a949-6a88d74eec02.roa
File:                     13cd37d9-3cbe-348d-a949-6a88d74eec02.roa (raw, json)
Hash identifier:          LhB7ivgyYH+zoTstFiK8OjlRmzEhDBRzPrLPioSzDYg=
Subject key identifier:   6A:78:63:F1:12:39:28:ED:A6:CD:5C:1B:54:39:2A:E7:F8:39:02:F9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE7EE8F0FECBB1143E97300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13cd37d9-3cbe-348d-a949-6a88d74eec02.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        2601:841:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:ee:8f:0f:ec:bb:11:43:e9:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=6f7a02ad-2c29-433b-9650-4365f8966a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:8b:6b:db:82:a9:a2:32:e7:fb:da:71:86:
                    fd:f3:4c:34:41:7d:14:27:11:67:38:6f:96:7b:92:
                    9c:c6:e1:35:ee:0c:e2:41:8c:dc:a0:51:0f:b6:7d:
                    c5:3b:56:8d:07:03:ca:32:b5:0a:c1:21:33:17:33:
                    c7:6a:71:f9:4a:aa:ef:38:11:fa:b3:20:57:50:2d:
                    bc:5c:22:56:74:5f:86:fa:ef:0a:15:51:71:f8:df:
                    64:68:21:c7:48:44:72:2c:33:2a:b7:b4:ee:97:ea:
                    38:aa:6c:e8:bc:53:a8:2d:84:0a:b1:7c:e1:67:73:
                    cf:21:3e:d6:6f:ac:9f:43:88:f5:75:da:c1:36:ff:
                    1c:1a:d6:2e:e6:5b:c1:23:69:c4:d9:c7:44:a7:89:
                    07:9c:7c:47:13:20:43:e1:68:c7:d5:9c:1f:2d:79:
                    b4:87:d7:80:66:c0:02:61:23:9a:ba:85:3e:ff:98:
                    a0:08:f3:7b:d6:a2:ea:4a:8f:f9:12:c8:0c:49:91:
                    ee:07:dd:d5:50:55:58:46:ef:00:cb:e6:26:48:5c:
                    77:9f:7d:05:0e:62:78:85:e8:0b:a1:0c:3b:57:98:
                    9a:e6:16:6f:d8:1c:da:24:2a:a2:73:a9:3f:aa:03:
                    67:6b:2e:f1:ea:66:80:d8:59:a1:9f:08:d4:ef:6f:
                    7d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:78:63:F1:12:39:28:ED:A6:CD:5C:1B:54:39:2A:E7:F8:39:02:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13cd37d9-3cbe-348d-a949-6a88d74eec02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:841:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e6:c2:2a:1e:88:4c:a9:91:00:13:ed:3f:82:61:61:8c:15:
         04:63:54:32:96:9f:9f:c6:79:4e:ce:5f:67:bd:df:ff:1e:68:
         e0:ca:10:5f:dc:87:f0:38:03:41:19:c2:8e:00:5f:5d:80:cd:
         5d:2a:ed:bf:e1:82:fc:98:a9:4a:79:5a:a1:62:9a:bc:1f:66:
         91:52:5f:af:e2:99:ae:e1:70:97:f8:bc:65:c2:ed:b4:a5:e0:
         a9:b5:f1:47:4c:1f:6c:12:c3:d0:6b:e5:5c:7c:3f:aa:d6:da:
         cc:5f:31:d5:65:d1:1c:ed:91:aa:56:9a:9a:f0:e1:66:79:c2:
         a2:03:5c:83:1e:b9:5a:2f:d4:ab:39:00:f6:f5:27:e7:68:e3:
         8c:f1:2e:48:cd:ac:01:3e:84:1d:bb:c1:59:b4:90:b6:d3:9d:
         d1:d2:ee:4d:bb:2f:a3:73:e1:f6:77:98:fb:97:12:25:9c:12:
         67:e9:84:aa:6e:91:f9:2c:01:62:e5:ec:b6:78:8e:f6:41:ce:
         88:c3:17:2a:9a:d4:58:87:68:32:42:17:1f:b2:3b:94:d1:31:
         b5:41:b3:fe:04:71:bb:eb:71:66:84:d8:b8:0f:e3:b0:3a:00:
         3e:b4:36:c5:7c:98:ab:5c:e3:8c:00:57:00:13:a5:82:a9:42:
         27:14:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:39:56 2026 by rpki-client