Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24db6b21-169e-3ac2-a756-84b57cee90c6.roa
File:                     24db6b21-169e-3ac2-a756-84b57cee90c6.roa (raw, json)
Hash identifier:          YO+TAF2BUgmPV+Z9yWBysVr3Ysv+yx3p3P9wi2l14to=
Subject key identifier:   4F:5C:3F:3E:DF:09:04:83:FB:14:BC:F5:48:C0:3E:3D:66:6A:B6:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5A98C5CC6F6BD72C19A080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24db6b21-169e-3ac2-a756-84b57cee90c6.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        2603:208a::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:98:c5:cc:6f:6b:d7:2c:19:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=9696b99c-2830-44b2-9d79-c3bcdf2f6e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:3e:b2:7a:29:40:2d:39:e1:cd:a6:48:79:
                    b1:2d:e6:6e:44:05:c3:c0:57:c7:f4:88:9b:bf:68:
                    4e:02:fb:3c:cf:48:4e:68:24:77:4f:ec:af:bc:54:
                    94:ef:6d:2a:7d:14:3c:5b:36:6c:c9:d3:5f:b0:62:
                    4b:4c:ac:7e:b4:ca:ff:fc:ff:eb:5b:e1:16:cf:22:
                    2b:e1:9b:68:d9:7d:cd:dc:07:58:fc:43:fc:0b:4e:
                    56:fb:1e:7d:82:6b:35:fa:50:f4:33:ef:b9:fa:8e:
                    e9:61:f4:18:1c:1e:26:d5:e9:c2:8a:a3:d6:0c:ff:
                    60:73:69:74:83:c2:76:dd:f6:6b:53:dc:6a:89:31:
                    c6:c9:5b:1b:88:7b:8b:75:aa:3a:64:02:ed:b8:c5:
                    b5:d9:34:be:68:b2:20:b7:49:fb:ac:02:5f:3f:2b:
                    f3:ab:54:a8:e0:05:20:39:e8:b3:f8:cd:79:17:ac:
                    52:6d:58:a6:d4:b7:80:96:bf:ca:27:a7:11:cf:f8:
                    b9:0f:ca:c5:d4:d8:9c:0e:1b:65:72:19:43:6a:60:
                    b5:3b:9b:33:f0:8b:c4:08:d5:89:4c:fc:ae:4a:00:
                    21:73:e9:6c:35:fd:c4:53:75:51:02:26:24:46:f3:
                    4f:54:cf:62:4a:cf:b5:09:0f:0c:8a:e2:c5:09:59:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5C:3F:3E:DF:09:04:83:FB:14:BC:F5:48:C0:3E:3D:66:6A:B6:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24db6b21-169e-3ac2-a756-84b57cee90c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:208a::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2a:0c:f3:f2:5d:18:88:e1:0e:fa:3e:33:46:12:8a:6d:43:
         c8:c9:da:86:05:b4:eb:7d:31:2e:05:08:c3:a1:f0:ba:13:08:
         f0:30:06:bb:50:6a:bf:20:cc:41:4f:83:1b:df:d8:df:8c:99:
         2f:c2:df:81:b1:39:f3:34:7b:61:62:fb:0d:3c:d7:ed:04:7f:
         3a:13:9a:aa:e1:3b:e6:91:2e:d3:08:02:a4:fa:de:92:cf:d5:
         51:8f:47:e5:fc:20:93:66:0d:6a:f7:8a:a9:49:ef:0f:d2:64:
         a3:e6:e8:21:3e:6f:ef:54:c5:7d:72:61:4a:24:75:5e:32:bf:
         00:56:29:3d:b2:51:23:d8:26:49:9b:c7:c8:93:3f:0f:5c:a3:
         9f:a6:1a:cf:ee:17:3f:d4:e6:36:41:b0:ff:f3:1f:da:78:68:
         05:ca:7b:3e:67:62:c9:6b:8d:13:5c:4c:57:47:5e:ea:d8:d3:
         0c:e9:85:10:8a:b8:67:48:40:49:56:5a:ce:e9:29:b9:dd:b1:
         ca:0b:0d:fd:43:91:35:13:3c:ab:b7:31:01:a1:13:53:61:1a:
         2c:91:dd:e7:f8:6c:a6:30:ef:13:3d:a2:c3:a6:d5:4f:61:4e:
         ac:ed:73:94:06:da:ac:72:ac:37:ee:51:5c:a0:a4:5f:c5:1d:
         ad:ab:62:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:54 2026 by rpki-client