Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44a55b37-7d8e-37c8-8c1b-292382b258fc.roa
File:                     44a55b37-7d8e-37c8-8c1b-292382b258fc.roa (raw, json)
Hash identifier:          ksIR23Vmek631oS8hhJxd1LRt/pQ95vxF4EV+DBzzbI=
Subject key identifier:   C7:68:35:04:B7:FD:A2:E9:2D:A3:EE:3A:5F:78:9D:D5:89:66:88:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243925D04B26932EF489B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44a55b37-7d8e-37c8-8c1b-292382b258fc.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        2601:3ca::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:92:5d:04:b2:69:32:ef:48:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=72f4edb5-2f5b-49bb-841d-1273259b3b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:37:82:dc:f6:78:52:f0:a2:5e:0c:df:0a:
                    b9:90:42:0a:b3:27:16:65:42:93:e1:b2:7b:a9:2f:
                    e2:fb:24:46:0e:4c:44:f8:69:d1:9c:8b:3b:9c:84:
                    c7:ed:ef:1c:16:79:5f:20:de:e1:3d:2b:17:c2:9d:
                    5d:f3:ba:6e:52:c2:bb:de:61:07:36:07:45:ec:0b:
                    4e:d3:3d:2a:55:5e:fe:fa:51:3a:a0:c5:ea:21:ff:
                    30:76:40:44:31:9c:45:2a:74:a8:43:c9:7f:35:f7:
                    38:72:b1:75:af:ee:e1:a0:5b:a1:a5:ae:5b:51:a0:
                    92:17:61:b4:f8:5b:1e:15:c0:7d:56:a1:61:2a:10:
                    61:d2:c3:a9:50:3e:34:7f:69:e1:cd:db:e4:c5:22:
                    14:6f:c6:5e:b9:a1:ef:5b:88:2c:df:7a:06:88:cf:
                    bb:b2:c0:9d:47:3f:ee:95:db:95:7e:1e:13:5c:13:
                    e5:2c:ef:35:63:57:26:ff:dd:ec:40:da:18:92:4f:
                    e0:9e:47:e8:5a:14:98:59:39:d0:8d:d9:b6:49:ce:
                    e2:6a:9c:ba:f2:40:5d:0b:f9:8f:54:1f:57:77:c7:
                    bb:90:09:52:9d:77:b6:14:ab:a5:f1:66:c8:b4:ce:
                    29:78:0b:47:b6:7b:5a:f5:34:0f:e5:c0:3c:4b:96:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:68:35:04:B7:FD:A2:E9:2D:A3:EE:3A:5F:78:9D:D5:89:66:88:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44a55b37-7d8e-37c8-8c1b-292382b258fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:3ca::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:71:9d:b9:c9:6d:cc:ee:91:cc:73:60:4d:29:4a:12:4c:
         51:f9:87:d0:7e:bd:49:20:de:07:fc:1d:9f:6a:8c:68:85:8d:
         ca:a2:49:72:e3:18:73:5e:4a:45:69:d9:98:1c:ef:ca:61:14:
         1d:b6:da:c8:24:e6:60:b8:21:c1:92:97:52:fe:dc:29:4c:1f:
         43:d8:81:fc:74:1e:e5:88:a4:8f:48:98:da:a6:0f:b6:da:d6:
         ec:a0:00:7a:cc:97:0d:11:bb:31:2e:ea:13:07:67:0f:8e:1d:
         95:eb:f7:93:36:4f:99:82:d4:e4:b5:0a:fc:2a:f4:88:bc:be:
         0d:91:9e:11:11:f5:0e:49:8b:37:53:7b:c2:1e:99:ab:88:57:
         33:9c:1e:26:6b:a6:15:01:75:8b:8e:ea:ed:99:55:f4:db:e7:
         51:29:49:dc:54:cd:82:69:87:9b:6c:71:3c:51:f7:7e:b6:51:
         3a:94:64:34:63:2e:f2:c0:96:c9:3c:e3:58:5c:a7:71:00:c0:
         a0:67:2a:59:f8:51:6e:16:d4:23:d0:16:0c:9c:24:72:b8:84:
         7e:c9:aa:8f:e1:61:f8:37:c8:a6:1d:3e:5f:23:f1:9c:b0:bd:
         de:1b:42:c2:19:ce:68:00:9a:c8:a4:99:69:3b:e4:3c:59:6b:
         74:20:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:55 2026 by rpki-client