Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416237bf-4f32-3291-b6e7-ad856ade5f8f.roa
File:                     416237bf-4f32-3291-b6e7-ad856ade5f8f.roa (raw, json)
Hash identifier:          mqIrRFC5bXf3XQkUKunXvZYSep4ZUmdUvAmdU86EBJo=
Subject key identifier:   73:B3:23:DD:68:05:EA:4E:B7:09:D0:8B:AA:D6:F6:87:8B:79:8A:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D524365705DBECC772207F580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416237bf-4f32-3291-b6e7-ad856ade5f8f.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7016
IP address blocks:        2603:298b::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:65:70:5d:be:cc:77:22:07:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=b4e5536e-383f-4c83-909d-9a6b3dd5c879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:92:b8:85:37:53:50:e4:b4:b8:33:71:2b:
                    0b:40:07:68:86:cc:d5:b3:e7:fe:3b:7d:e0:c5:7c:
                    be:71:bf:1d:04:fa:de:81:3a:47:1e:e9:f6:64:c0:
                    0e:48:7c:e6:ca:94:e9:f5:cc:b0:84:69:b1:86:35:
                    0c:a4:53:99:b5:49:80:c3:7e:67:c0:ed:67:e3:eb:
                    30:b6:6c:52:99:ae:04:69:0a:33:08:0a:c1:97:07:
                    50:9a:f9:6d:42:13:e5:99:09:17:d3:2f:33:b8:dd:
                    84:06:e6:7c:83:8e:5d:f7:24:6b:99:f8:89:cd:39:
                    91:8a:8d:79:95:8f:fc:70:11:5e:bc:d5:5f:00:29:
                    96:ae:86:3a:94:ae:24:56:c1:dd:d9:79:10:9d:b4:
                    e1:2f:58:1d:5c:1d:bf:3b:55:52:7f:f9:98:49:fc:
                    a6:92:67:f7:6f:78:1f:2a:55:1f:32:0b:3f:60:f4:
                    4f:48:f4:b2:36:8d:a6:36:d6:fd:21:04:33:13:cb:
                    cc:d5:5a:2f:cb:5b:5c:76:7a:b2:ea:f2:0b:80:07:
                    57:39:b7:8b:1b:dc:bd:2a:87:c1:02:12:bd:b1:26:
                    43:13:cb:96:8b:28:6e:38:8d:8c:42:65:cc:c8:75:
                    01:a9:2e:5d:b7:0a:e0:09:07:27:cd:0d:40:2c:3a:
                    75:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B3:23:DD:68:05:EA:4E:B7:09:D0:8B:AA:D6:F6:87:8B:79:8A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/416237bf-4f32-3291-b6e7-ad856ade5f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:298b::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:b8:11:09:88:34:35:5c:46:b4:20:1d:5c:61:af:38:e3:55:
         c5:c8:c4:c7:94:b9:06:19:e2:82:1f:94:0a:d9:45:63:c8:d6:
         48:fc:18:51:2b:6f:b1:82:93:38:67:48:92:f6:9d:cb:bc:db:
         a5:ed:a9:cf:0a:18:fc:6f:43:54:8f:ab:bd:8a:b8:2d:75:4d:
         c9:39:79:c9:75:44:09:37:dc:0b:c3:ce:e7:e7:f0:8e:7f:89:
         59:eb:36:cb:ce:3a:78:23:5d:23:d8:e1:7e:b6:1e:9e:9a:7c:
         8a:a6:63:51:39:f7:56:ce:ea:ae:7a:c0:4b:8c:31:05:8b:94:
         49:1a:34:34:e6:48:5d:fd:51:3a:4a:a6:fc:28:a8:d7:86:42:
         40:c2:73:a8:d3:62:24:da:ac:64:7b:05:ad:ef:37:87:1a:1b:
         b2:73:4d:23:ad:55:b0:5a:bb:99:6e:1c:db:7d:e3:38:6a:ae:
         a2:56:db:39:98:23:60:a4:84:b5:c3:ff:0b:2f:62:c6:6b:62:
         20:52:98:4d:33:a6:c2:2b:99:f3:a0:cc:97:b9:fe:f0:dd:06:
         53:f1:cb:66:90:c9:4e:bd:53:bf:1e:78:38:7b:a7:4d:55:ce:
         d6:e4:e4:20:26:5c:4f:e9:36:48:35:4a:62:36:e0:52:7c:8e:
         15:94:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:52 2026 by rpki-client