Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43550ba9-a2fe-3831-af96-839c5b34c1c9.roa
File:                     43550ba9-a2fe-3831-af96-839c5b34c1c9.roa (raw, json)
Hash identifier:          o4MtobQm552ozJ4eeO4MD2QfHAE597Yp1eYkikakX1Y=
Subject key identifier:   87:79:47:35:4F:8D:A8:27:48:D8:74:70:65:4B:F2:8C:8B:21:8B:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBC8A2156F8A70C6318D68
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43550ba9-a2fe-3831-af96-839c5b34c1c9.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        2603:218d:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:c8:a2:15:6f:8a:70:c6:31:8d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=18167345-dfcc-4d8e-97f8-703d6997c58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2a:dd:b7:e6:d1:4a:6c:e6:06:f2:15:76:33:
                    ff:8a:5a:fd:51:d3:fa:f5:98:06:c2:d9:11:12:19:
                    5b:68:94:5d:be:39:cc:6c:95:02:a3:b1:c0:e6:79:
                    43:51:37:3d:f3:35:ce:49:c5:1d:9a:18:3c:3a:f2:
                    1e:f9:6b:e9:82:85:a0:4e:5a:25:37:1c:c5:b8:0b:
                    0d:52:f7:75:ab:5e:16:65:7d:42:28:1b:35:19:61:
                    00:42:78:be:2c:54:cf:35:ec:da:47:ea:93:66:51:
                    8e:5b:72:4a:08:02:07:95:51:ce:4e:fc:9e:a2:58:
                    ff:9d:7a:cb:e3:d7:43:37:a8:10:26:f0:f0:3b:1c:
                    a4:1d:6d:2c:3d:60:29:13:3b:95:6f:4e:44:04:31:
                    1c:cf:33:ca:e2:0c:f8:74:c6:d8:f8:38:77:1d:8a:
                    f6:1e:2c:1d:a8:d3:a3:c6:a3:f1:bc:10:52:ab:6e:
                    f5:d0:49:e9:f0:87:51:be:6b:60:0d:ee:a1:7b:3c:
                    76:58:d8:91:7e:13:12:23:75:84:14:cd:c9:c5:bb:
                    6b:a8:b9:72:0d:44:ba:3f:44:d6:8d:9d:a4:e7:7b:
                    b9:54:c1:14:e8:21:93:2f:bc:e5:19:ec:5c:9b:22:
                    eb:10:f8:9a:53:66:50:3b:f8:ba:0c:de:d1:31:fe:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:79:47:35:4F:8D:A8:27:48:D8:74:70:65:4B:F2:8C:8B:21:8B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43550ba9-a2fe-3831-af96-839c5b34c1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:218d:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:56:2e:4d:89:01:88:5d:90:ea:98:59:32:ac:65:47:0a:12:
         d4:af:2b:95:c3:bb:4b:d7:6a:c2:03:f1:fb:0f:bb:48:92:fb:
         57:9c:2d:03:b4:20:5a:90:40:32:0c:09:3a:b0:7a:a5:2b:30:
         26:50:74:ed:40:e7:af:fb:8f:a5:01:03:2d:81:10:55:d8:31:
         0b:6a:92:c8:aa:95:aa:f9:d6:59:a6:20:7e:41:13:63:dc:7f:
         11:1d:13:c8:a4:8c:7a:8b:e9:e2:94:ae:13:af:0e:28:1d:c8:
         25:2a:9d:b3:bc:6c:0b:24:0e:8d:16:36:43:67:0e:96:ab:70:
         b2:ca:7c:a9:17:61:b5:62:43:50:d9:82:8e:63:36:b8:9c:dd:
         99:b6:9c:e3:fe:37:83:cf:d3:2c:39:70:74:0f:fd:2b:25:b6:
         b3:a9:18:13:02:d8:96:0b:b3:cb:7d:73:a4:ab:df:3b:d8:f3:
         f6:fd:10:21:24:3f:d2:e1:dc:d7:c2:f5:c5:22:d5:33:9b:e2:
         b2:0a:1a:22:4d:de:7f:fb:f9:22:a8:2b:0c:ce:fa:af:6d:83:
         95:95:e8:0d:fc:17:6b:f0:b4:a8:a7:84:87:1b:5c:da:f0:32:
         f5:59:67:1f:51:86:58:46:5c:c9:d6:1a:65:d4:ae:a5:bb:50:
         13:44:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:08 2026 by rpki-client