Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b216bef-2adb-3ee3-9db6-c08aa45f30ba.roa
File:                     5b216bef-2adb-3ee3-9db6-c08aa45f30ba.roa (raw, json)
Hash identifier:          LFSVAgYZHLPKGtPJt2BhBih/XnEi/GXAiS+Sl7OAsFE=
Subject key identifier:   53:D6:C3:62:26:95:3B:3A:A0:42:CE:89:82:80:0C:3F:9E:B4:3C:70
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58BBCE6B2ABB74AA445A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b216bef-2adb-3ee3-9db6-c08aa45f30ba.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        2603:2640:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:bb:ce:6b:2a:bb:74:aa:44:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=cbd07f29-f078-4a23-b402-d970547bb21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:d2:0d:c9:ee:ed:e8:34:42:10:74:e2:cf:
                    50:60:9a:d1:8c:9b:78:75:c6:ed:8d:26:55:bc:44:
                    cd:d6:cc:66:9a:04:71:24:6b:43:22:24:fd:19:cc:
                    b7:8f:cf:f0:32:6d:a5:64:64:db:37:0f:4e:f6:9b:
                    fc:01:48:ea:58:13:f9:ba:ec:46:bb:0a:84:42:db:
                    a4:3f:ea:25:4c:d3:d8:5a:84:b0:ac:3e:d3:08:ef:
                    d2:a2:d6:33:da:c2:43:c0:9b:da:36:ef:c9:a7:de:
                    80:cf:ad:d5:d7:6d:03:3d:fe:17:17:2c:fc:78:a3:
                    2f:4a:12:91:de:7e:98:8b:7a:7d:cf:d6:42:7f:82:
                    6d:61:75:1f:a9:08:df:20:7b:18:34:13:dd:3f:3f:
                    3a:8b:7f:f3:54:fc:fe:b8:a4:ed:b3:3a:85:20:4b:
                    ae:22:5a:ca:5d:6a:80:c2:da:cd:a9:fd:d1:40:f1:
                    54:8d:5d:cd:b6:0f:f1:2b:6f:64:ec:73:99:ac:2b:
                    4e:ef:9d:34:6e:3f:c9:6e:3a:c8:27:c5:7b:fe:df:
                    69:09:ae:89:c0:4d:57:82:da:f7:4d:ab:3a:da:36:
                    5e:3d:1d:66:ff:c0:85:ff:35:ba:c0:c8:f7:c6:a1:
                    5c:29:2a:50:67:d0:bb:c1:98:cc:cc:a0:6d:23:74:
                    91:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D6:C3:62:26:95:3B:3A:A0:42:CE:89:82:80:0C:3F:9E:B4:3C:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b216bef-2adb-3ee3-9db6-c08aa45f30ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2640:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d4:7d:b6:68:1e:23:37:b3:d3:33:3d:9f:53:cc:ed:a2:19:
         47:6c:ca:b1:c2:e4:50:54:62:be:6c:26:2e:c5:6b:54:62:b9:
         d9:de:65:b8:d4:b4:6b:d6:84:bf:fb:c5:8e:8d:81:92:d3:47:
         da:f3:71:c3:12:f2:02:fa:69:56:78:43:7b:e8:4c:fe:64:83:
         38:f7:47:c7:1d:4b:89:f2:94:79:aa:b3:f4:1c:dc:7e:8a:bf:
         06:50:da:f2:e0:61:11:87:4b:ef:67:64:de:03:7e:51:d3:d4:
         61:37:82:27:09:7e:29:28:87:ac:b5:01:6f:ca:de:0d:8b:59:
         34:9f:a4:18:3c:be:9a:91:15:0f:cf:37:86:f9:c2:f7:ff:f7:
         a0:d6:36:73:f4:d8:6b:ad:3a:7e:dd:9b:06:78:8a:87:d5:9b:
         00:94:0d:64:6b:4b:26:76:d5:0e:1b:63:55:63:0f:7a:cf:2f:
         7e:d0:d3:ef:eb:3e:b3:4e:0d:68:bb:5e:82:52:70:2b:50:c7:
         8e:50:2a:dd:9d:da:9f:a4:28:6e:88:7f:96:4b:22:fc:30:dd:
         de:f0:af:ed:33:ae:92:33:75:97:f3:80:1e:cf:85:2a:ac:72:
         50:51:2d:62:90:d5:8a:86:7b:1a:7c:5c:46:6e:f3:9b:ec:82:
         e8:20:d8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:41 2026 by rpki-client