Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34fd95f0-6203-3a52-8ed9-52cfc0ccab12.roa
File:                     34fd95f0-6203-3a52-8ed9-52cfc0ccab12.roa (raw, json)
Hash identifier:          Jo5sjb+qU21KL/AlUAO5ceozosLgme+YGt1zFt40O6M=
Subject key identifier:   4D:06:75:87:CC:5A:05:C6:DE:82:79:68:55:51:2F:1C:D9:EA:D5:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE8778A0D8C326A6F5F9B900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34fd95f0-6203-3a52-8ed9-52cfc0ccab12.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     33668
IP address blocks:        2001:559:c134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:78:a0:d8:c3:26:a6:f5:f9:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=ab8eb73b-e16c-4760-ba23-1ed9454495ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:3a:7b:90:a2:fc:11:71:93:f0:ea:ef:4d:
                    30:55:4f:cc:40:12:3a:8d:25:3c:13:4c:7f:3e:2f:
                    de:3a:1f:91:ee:10:0d:1f:66:ae:51:e7:71:f1:58:
                    6d:5c:69:26:43:73:e1:1f:d1:d9:aa:6a:75:05:25:
                    2c:5b:91:f2:77:ee:93:67:f2:84:7d:ec:69:b6:1d:
                    5f:4e:38:0a:88:d7:4f:fe:a3:b3:b2:e9:05:54:5b:
                    f0:11:bc:c8:72:72:f8:9f:6a:ec:de:9b:b3:73:81:
                    42:96:0c:7f:c0:ac:ca:e0:cd:df:21:18:48:e0:b7:
                    6e:c2:5c:9a:d7:9d:6a:85:e4:f5:55:9e:26:9c:19:
                    c9:76:10:2b:2c:e5:aa:46:fa:48:42:a5:1c:09:14:
                    2d:13:71:e5:b2:97:ec:42:5e:90:94:fc:ef:3a:26:
                    a4:c4:e0:2c:7b:66:62:91:a2:b5:6c:16:68:93:4a:
                    b4:1a:d4:da:8f:fb:ae:ae:08:27:1d:3f:ca:d0:4d:
                    3c:00:3d:06:c0:da:09:07:bb:99:14:69:8e:5e:51:
                    29:82:61:e8:8c:98:a4:98:3b:35:c3:f1:07:c7:6f:
                    6d:5c:f7:f8:b1:f1:99:48:8f:41:f9:15:10:d3:38:
                    07:a5:b7:86:eb:88:8c:cf:64:58:0d:d9:7e:66:01:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:06:75:87:CC:5A:05:C6:DE:82:79:68:55:51:2F:1C:D9:EA:D5:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34fd95f0-6203-3a52-8ed9-52cfc0ccab12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:96:80:a3:5e:de:db:2b:d7:3f:2c:d4:b6:a3:b9:70:43:55:
         38:8f:b6:40:1c:96:f2:1e:a4:67:4d:d2:67:d9:91:41:4e:dd:
         da:63:b5:a6:7c:ee:dd:e3:a9:b2:45:d0:fe:b4:17:51:a9:5d:
         18:c2:68:61:ed:6e:57:3b:16:3d:d5:9b:56:3c:41:b9:04:c0:
         63:2a:03:1c:2f:23:07:57:dc:5b:ac:69:47:f2:c1:61:36:ad:
         0a:4f:c8:73:d7:f6:7b:0c:60:57:2f:29:a3:a5:6c:aa:e6:a3:
         a6:2d:62:2e:ff:af:ba:d5:0f:f5:15:bf:12:b0:84:f0:c7:07:
         d7:0b:4c:29:3c:e3:b4:a3:c6:71:a1:57:b3:fc:4e:0e:7c:64:
         67:7c:c7:52:06:50:07:eb:f8:01:f8:d8:47:2a:17:e4:15:a5:
         c2:b9:7a:ac:75:fb:30:9e:91:ed:b6:74:21:a6:2e:8c:79:b9:
         15:f1:27:20:2e:62:51:63:1b:d9:8a:d8:fc:ad:fc:0d:e3:56:
         7b:7c:35:15:15:22:59:2f:b5:1a:c3:6c:f0:8b:6d:80:06:9b:
         d9:4c:b1:b6:45:bd:40:ad:d7:76:cb:80:7b:dc:fe:88:16:31:
         41:f6:85:ed:dd:10:f8:31:81:f4:ef:8e:1f:8e:47:8b:73:6e:
         ba:09:63:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:35:32 2026 by rpki-client