Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d445f75-9266-337c-b0d3-a78dcb832dbb.roa
File:                     1d445f75-9266-337c-b0d3-a78dcb832dbb.roa (raw, json)
Hash identifier:          Vk9FbLfCXpvl6Cr3ua8tUVwXJVUbU34NezsOt3zA5uI=
Subject key identifier:   7D:BB:CF:54:84:22:67:70:1D:12:BD:38:47:0D:B2:4A:46:16:1D:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D524364566EA9B2F587E6D970
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d445f75-9266-337c-b0d3-a78dcb832dbb.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7016
IP address blocks:        2603:254a:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:64:56:6e:a9:b2:f5:87:e6:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=13aaedf8-b7be-4c76-84d7-fc1ec9459a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:47:d0:10:07:97:1f:08:4e:b2:de:bb:99:
                    9b:eb:fb:d6:6b:bd:5f:36:3d:15:bd:c4:7f:45:56:
                    19:e8:cc:6d:fe:6a:64:e7:77:03:63:f8:44:26:a8:
                    ae:1c:6e:6a:db:04:1d:2e:98:15:bc:45:b0:d6:bd:
                    1b:4e:5b:25:e0:1d:19:a9:bc:bc:ab:f3:04:32:d5:
                    eb:d2:b0:8d:57:c7:8b:a0:a0:1e:d4:60:0e:a5:7f:
                    26:7f:f1:c1:e5:6d:a0:43:0d:a7:57:4d:b5:37:96:
                    71:96:06:f2:f4:94:1d:74:47:0d:77:be:b2:09:4f:
                    49:3a:30:f8:d6:2b:c7:07:ba:ac:6c:7d:91:e3:de:
                    09:01:4e:2f:a8:c7:7f:60:77:e8:0e:9e:f6:ad:db:
                    9f:a7:2d:2f:6d:a3:6d:a0:55:37:f3:d3:d1:c9:68:
                    3a:8b:b0:69:d9:1b:cc:96:11:5f:4f:cf:e2:55:bd:
                    ab:0c:68:e3:e9:0f:ee:dd:cc:54:cf:06:88:ad:a8:
                    cf:14:43:12:23:a7:e9:e3:03:ed:c3:6a:67:89:a1:
                    2f:fc:29:88:92:c9:3b:58:eb:30:11:fe:bc:67:bd:
                    3d:e6:4b:12:06:44:bf:98:82:b6:d3:88:f0:58:d4:
                    0d:63:35:58:18:36:5f:39:73:71:d6:48:86:8a:b8:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BB:CF:54:84:22:67:70:1D:12:BD:38:47:0D:B2:4A:46:16:1D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d445f75-9266-337c-b0d3-a78dcb832dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:254a:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:da:a9:ed:d2:c8:5e:46:f5:fc:c3:c4:82:f5:e4:b4:89:8a:
         19:89:ed:72:83:53:59:b6:29:a1:28:bc:5a:c4:93:d5:05:a6:
         6e:1e:ae:26:82:3e:59:55:1e:34:20:de:06:95:fa:b9:9a:2a:
         60:41:72:93:8a:3c:bb:5b:67:ff:52:34:8b:82:a7:84:4e:e7:
         0c:c8:b5:d2:4d:cc:2c:27:e6:44:19:6e:fc:b2:3d:24:c0:87:
         3d:1f:52:bd:55:e8:12:22:15:3c:2b:bf:3b:51:79:73:37:97:
         fa:35:e8:71:48:e7:70:f8:2f:5c:7a:44:d6:c0:f8:df:a7:94:
         60:6b:01:97:32:ee:7a:c9:cf:da:8c:26:f1:f3:c6:e4:a0:3e:
         91:ad:c9:23:d6:e1:6d:6e:c7:76:39:87:a3:09:05:ea:0e:7f:
         af:17:22:d3:aa:80:7d:30:66:0a:cd:16:7a:35:19:47:ba:70:
         bf:46:9c:99:75:9a:1e:83:98:3d:3c:02:98:48:c9:4f:38:28:
         46:bb:f5:7a:ac:6b:90:73:c8:73:46:cb:a8:61:5a:33:f2:ec:
         45:01:71:ec:4d:e9:ed:7c:ae:f7:56:f9:51:f9:7f:61:fb:f8:
         48:81:95:43:95:05:9c:ae:9b:f0:e9:0c:1c:b5:48:f2:a7:6a:
         a1:72:69:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:40 2026 by rpki-client