Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a32f30a-91ac-32e2-b7dd-2797e7239161.roa
File:                     2a32f30a-91ac-32e2-b7dd-2797e7239161.roa (raw, json)
Hash identifier:          aZzX15quvtGxo7h3sFyctFjslS23YxyoQ+52hFwaDAk=
Subject key identifier:   F2:BA:2B:A6:0F:DC:79:40:C4:F5:2A:ED:81:1A:67:19:80:39:C6:25
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBC9277267C9B30EF62780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a32f30a-91ac-32e2-b7dd-2797e7239161.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        2603:2194:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:c9:27:72:67:c9:b3:0e:f6:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=3fbb3a64-e7f3-4c34-af80-dcb87523458f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:27:b6:6b:6d:3b:76:fd:fa:3b:a0:cf:55:
                    33:74:72:cb:85:4d:8a:62:fe:b1:e8:8a:74:6b:3b:
                    a2:ab:92:f9:45:38:5e:19:e6:0f:dd:f7:af:02:bd:
                    cb:45:45:e0:ec:61:2a:1a:78:bb:79:ae:3d:62:9c:
                    94:4e:8f:cd:3c:86:19:f1:1a:54:fd:c6:8c:45:22:
                    67:df:a2:76:49:f7:cd:e8:bf:8d:a5:52:b6:80:8d:
                    39:f6:26:ed:86:fc:3e:60:50:ad:f5:e3:6c:8c:d0:
                    a7:87:67:0c:da:0e:92:48:93:5d:7d:b4:03:28:70:
                    89:42:fa:ae:25:88:6d:f5:c8:23:a1:f1:7c:3f:91:
                    15:79:dd:7f:04:fb:c8:16:23:4e:b4:2f:2c:f6:c0:
                    94:5a:6e:61:69:bd:3d:e7:f5:98:fe:33:58:30:27:
                    80:da:11:7d:de:21:a8:64:29:42:5d:33:25:09:76:
                    82:b9:ad:24:7f:a0:a8:ce:d8:9f:f1:bf:ad:8d:66:
                    45:7b:3a:39:93:88:25:5a:ef:53:3d:1a:fb:aa:ca:
                    43:8c:b4:1e:09:81:6d:92:c3:3a:42:44:69:ae:37:
                    37:9a:4e:87:21:45:ec:53:47:8b:f4:4b:82:00:c6:
                    85:42:cf:c1:96:12:2f:f8:be:84:fa:ec:3d:8a:db:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BA:2B:A6:0F:DC:79:40:C4:F5:2A:ED:81:1A:67:19:80:39:C6:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a32f30a-91ac-32e2-b7dd-2797e7239161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2194:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:01:ad:5e:84:66:2e:4e:e6:fb:e8:46:3b:8f:d2:b1:52:51:
         90:43:c3:b2:98:9b:6c:42:24:98:c5:94:aa:54:47:e9:f0:94:
         91:fd:8b:5a:8e:65:f7:29:d8:6a:30:02:6e:71:37:38:1c:86:
         32:48:5e:b2:46:6b:3c:30:f0:3a:95:82:a3:63:0e:98:9a:cc:
         60:05:be:11:bf:eb:0e:f7:83:ba:e8:b5:ae:dc:77:ac:ed:5f:
         64:e2:a9:94:0f:08:cf:94:25:7a:55:c5:95:bb:82:91:f2:a4:
         9d:30:91:71:c1:17:b1:fe:dd:9e:f6:0d:69:1f:53:14:c4:04:
         e2:5f:a8:61:89:32:63:32:6d:fa:67:b6:bc:37:79:46:cb:6b:
         94:86:28:10:60:da:81:49:76:66:26:c4:2e:3c:fe:14:65:4e:
         4e:15:c5:4f:b6:29:25:9e:b8:be:21:88:9e:45:83:1d:a3:ee:
         a7:8d:31:f9:b4:6a:95:34:99:9a:3f:79:fa:94:f3:1d:cd:2f:
         4f:b2:66:45:08:13:00:00:f6:f5:2b:59:4e:31:7d:1f:c0:de:
         cf:8f:3a:05:c4:c7:44:57:32:e5:68:c8:f7:ea:3c:47:32:a9:
         57:b7:8d:ff:66:a9:fe:06:91:16:2a:fc:d1:c5:9d:0d:d9:e2:
         47:e8:b0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:48 2026 by rpki-client