Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53b1e58e-ab2a-343f-b89c-d00134057e36.roa
File:                     53b1e58e-ab2a-343f-b89c-d00134057e36.roa (raw, json)
Hash identifier:          11ytP2OVSXU+pXXYFMalG4zX3RIytNNfqENGfoV9tYA=
Subject key identifier:   CE:3A:D8:91:C9:F5:D2:35:DC:22:0A:58:6C:3A:91:6E:F3:93:F8:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D524398472339F0E68CF10580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53b1e58e-ab2a-343f-b89c-d00134057e36.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7016
IP address blocks:        2603:3007:2300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:98:47:23:39:f0:e6:8c:f1:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=076cd1db-bbde-46fd-9ad9-ab7a1f2255ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:6f:93:81:f3:d9:e7:ca:0c:65:97:18:3e:
                    4d:66:1e:b3:41:1b:b6:24:67:44:73:67:f2:6b:1c:
                    8e:3c:1a:3c:fc:96:bf:1a:ea:c9:d1:76:26:bb:61:
                    ca:67:ba:22:ba:a1:ef:27:02:cd:7b:cf:d0:0b:a4:
                    46:fb:35:16:65:be:17:29:50:43:9f:ba:c2:61:d8:
                    b0:d7:af:fa:25:e1:1a:73:1f:d5:2b:65:ad:58:49:
                    42:e3:9a:53:9c:a8:ec:8e:72:3c:07:30:21:0c:b1:
                    fa:12:16:a5:f6:dd:55:cf:e2:3a:b5:df:ad:2c:4c:
                    f2:ee:34:05:f8:f7:f8:d4:cf:b3:d4:84:8b:a4:48:
                    0b:7f:16:eb:3b:51:f8:de:22:ab:14:08:6d:a4:44:
                    f3:0d:f9:54:f8:7c:af:d9:eb:69:1e:15:4b:69:19:
                    a8:95:7a:de:f6:24:9f:ab:84:e6:9c:91:52:f5:91:
                    85:1f:f3:59:5c:5f:12:19:0e:4f:c3:14:42:08:7e:
                    4d:99:f1:23:6c:3c:f1:d9:ab:4b:81:b6:1f:e8:11:
                    c8:6c:51:e6:e8:e7:2f:2e:cf:bb:18:dc:57:98:bb:
                    b6:20:9b:24:5a:96:51:0a:96:b8:af:ea:b4:23:41:
                    b9:ea:ff:42:ec:87:0f:76:a2:8a:35:dd:64:43:ce:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3A:D8:91:C9:F5:D2:35:DC:22:0A:58:6C:3A:91:6E:F3:93:F8:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53b1e58e-ab2a-343f-b89c-d00134057e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3007:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:99:46:16:00:70:6d:35:9a:e4:30:76:bb:08:1c:e9:3a:ad:
         f7:c6:5e:d6:46:c5:b4:a4:ed:69:5c:8a:b4:fd:6c:92:53:a0:
         4f:e0:c4:52:50:7b:6a:f0:90:ce:ed:06:73:b7:a9:72:2c:83:
         d4:09:7c:8d:ad:ec:b9:3c:60:16:7a:3c:26:f8:8b:fd:6e:b0:
         24:24:f9:ca:60:77:b3:1c:33:a7:66:14:4b:18:b0:2e:c3:7c:
         83:ff:51:d8:ce:f1:22:2e:27:47:86:9f:3c:99:0f:e5:92:84:
         12:dd:1c:bd:40:67:7f:32:e3:bf:b0:f9:56:d7:d8:96:0d:6d:
         21:1c:6b:50:57:89:86:f0:c3:8e:f0:84:01:9a:27:54:39:94:
         5f:85:a5:9b:23:40:d9:7b:0a:1a:2a:28:0f:d3:3c:41:ce:d9:
         f1:6b:0e:ed:e1:f9:c9:64:64:8f:4e:cd:14:4f:ce:b7:5a:d7:
         7c:ab:17:50:0a:f7:89:16:82:a3:df:d5:76:31:d7:50:7c:9f:
         f7:2f:f5:8e:56:da:ba:c0:48:e1:45:48:73:d5:3c:92:16:8a:
         4e:21:fd:99:3e:48:15:3c:3c:e3:84:6e:2d:f6:27:9b:6e:e6:
         e0:ac:35:69:48:40:db:3d:dd:4a:0d:11:43:b1:af:22:c2:ef:
         9e:88:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:51 2026 by rpki-client