Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e492e17-6442-38a0-a2ad-1d1d0369e475.roa
File:                     3e492e17-6442-38a0-a2ad-1d1d0369e475.roa (raw, json)
Hash identifier:          D//NNXljtF0Hss7BxVLd0AtNzowOkWMQT6ai8Flc6x4=
Subject key identifier:   31:03:89:C5:EA:46:1F:B7:8B:C8:E3:32:A7:88:90:70:18:46:45:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52439AF4DEFF989385D99FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e492e17-6442-38a0-a2ad-1d1d0369e475.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7016
IP address blocks:        2603:301f:2700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:9a:f4:de:ff:98:93:85:d9:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=17c6006c-fb51-44bc-a973-04e1eb265d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:17:a7:80:6d:0a:15:80:64:e9:99:3e:32:08:
                    6d:e1:a0:d6:72:40:60:9f:7f:ab:99:35:04:fc:55:
                    82:21:f6:da:3a:b1:65:cd:85:41:2e:31:3f:bf:9d:
                    5c:4a:91:b0:24:eb:96:e9:2b:63:b8:5b:00:3d:88:
                    c6:e7:64:3e:71:a5:67:55:4e:59:c2:af:8e:22:4d:
                    c8:0f:27:42:f6:8b:ac:c0:d6:99:ff:a7:f7:fe:78:
                    61:3e:eb:cb:00:13:f3:fa:9f:f5:a9:50:61:f8:88:
                    f3:6d:76:32:9e:44:21:9e:25:7d:39:2e:ea:1d:47:
                    fb:0e:da:2a:72:9a:58:3c:cc:d4:f0:5b:2a:34:21:
                    9e:00:39:38:47:5a:b3:1b:df:3f:e3:f4:1d:c1:f5:
                    88:75:7b:6a:6a:7a:4c:e0:98:07:c5:d9:2a:7c:cb:
                    7a:29:94:25:5f:68:c0:12:48:99:4d:2c:0b:45:6e:
                    ac:ce:9b:07:80:15:7b:f7:88:cb:29:fc:e0:3a:bf:
                    2b:52:9c:ad:9e:c3:84:80:d5:d7:65:f3:ee:59:09:
                    54:54:ea:21:be:4c:a5:84:57:a9:67:51:13:69:7c:
                    c4:a2:bd:6d:23:33:fa:5f:39:f5:e3:29:cb:e8:83:
                    b4:5b:e9:70:cc:6a:d3:e7:83:57:6e:00:14:5f:e7:
                    14:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:03:89:C5:EA:46:1F:B7:8B:C8:E3:32:A7:88:90:70:18:46:45:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e492e17-6442-38a0-a2ad-1d1d0369e475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301f:2700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:47:76:4d:5d:0a:b9:38:7a:d3:93:41:c9:16:83:17:0b:07:
         81:2f:64:9c:e8:07:ec:d3:94:77:14:b5:2a:48:53:63:24:7c:
         cd:b3:1b:d6:90:e0:f4:32:b8:31:cf:fc:9b:e5:7e:0f:ed:75:
         3a:56:26:fe:57:f8:0b:fb:b2:4c:04:96:be:72:22:3c:4b:7d:
         1a:10:ee:1b:e2:b6:85:66:45:5d:81:02:cd:d2:6e:dc:f0:03:
         c0:ce:21:ca:be:f7:52:7d:0b:bf:ae:9d:9e:f4:f5:1a:02:c9:
         7e:a2:ee:38:3a:1c:c3:4b:2d:7c:b4:2e:0a:7b:e4:5a:f4:25:
         0a:b3:33:ab:d7:c6:da:01:fb:4d:e0:96:74:6b:c5:05:d7:05:
         d3:f7:c1:f5:1c:01:0b:2b:a2:f1:90:91:09:b8:39:59:ee:e1:
         9e:7e:79:46:4a:e1:c4:33:33:a4:d1:5e:e1:2d:57:84:93:4c:
         33:a3:d4:da:e9:dd:97:3f:52:87:4d:80:fe:32:a0:0b:af:19:
         1f:96:c9:48:6d:92:d2:b1:23:82:88:ac:17:f2:15:67:50:47:
         bc:54:d2:0b:b3:7a:54:32:cd:2f:2b:5a:4e:5d:d8:3a:ef:92:
         a9:2b:b7:e5:c6:33:2f:6b:16:49:48:c7:ef:c8:05:98:90:75:
         96:01:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:11 2026 by rpki-client