Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d14fef7-9564-3639-a1c0-14214be832f9.roa
File:                     5d14fef7-9564-3639-a1c0-14214be832f9.roa (raw, json)
Hash identifier:          kb4t1eT2Y6JoQ67g37AkgjUp7/5mZ8cZoyjUNcPv82c=
Subject key identifier:   A8:60:B0:5C:34:E1:B9:7F:AF:A2:73:C8:52:CD:9D:0A:CD:0A:66:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78905661861E054AA871380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d14fef7-9564-3639-a1c0-14214be832f9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        2603:2845:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:89:05:66:18:61:e0:54:aa:87:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e46a7590-1cd0-40a6-adcf-2dd3e566d12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fd:0b:b2:c1:c5:63:2e:54:f9:e1:23:15:9a:
                    3b:d5:22:67:9f:ec:30:ee:4c:e9:cc:95:08:91:f1:
                    fe:11:10:33:3e:f1:f1:24:f0:c4:3c:c3:c1:81:35:
                    e3:0c:ec:fc:52:de:ac:4b:92:75:7e:33:ab:71:82:
                    b8:0e:5d:3f:8a:99:ed:a4:9e:d7:2e:f9:88:7d:6b:
                    56:04:f3:49:e7:1e:0c:1f:d1:03:6b:7a:dc:76:1b:
                    49:50:d2:65:9d:65:7e:16:f5:b8:a8:98:3d:33:75:
                    0a:b7:98:ca:33:8a:6a:95:3f:0c:23:5f:54:8d:b6:
                    ad:db:fe:3c:8e:27:cd:d3:00:5e:3f:18:4c:f5:dc:
                    88:d7:95:13:3a:d0:6e:0b:eb:fb:e2:5a:07:32:12:
                    0e:a5:6d:f1:d5:f2:08:dc:09:8c:bb:16:43:61:a6:
                    aa:c1:bb:bc:ea:00:26:85:23:04:67:ce:30:8a:af:
                    32:2b:fd:f2:85:da:ef:5b:f6:fc:97:ca:bd:bc:86:
                    b6:0e:61:fe:be:b8:0d:49:80:33:08:63:4c:87:40:
                    73:ea:f7:de:0e:06:34:07:52:f2:6a:f5:fd:c7:aa:
                    0f:42:3b:ae:91:b0:e9:13:78:80:dd:d0:3e:aa:8c:
                    78:a3:fe:18:b5:54:a4:08:36:f7:97:3b:4d:c7:1c:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:60:B0:5C:34:E1:B9:7F:AF:A2:73:C8:52:CD:9D:0A:CD:0A:66:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d14fef7-9564-3639-a1c0-14214be832f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2845:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:9a:a5:f4:44:cd:c0:e5:98:c2:36:cb:84:a2:7d:9e:a7:0f:
         42:85:ac:75:db:f5:86:0d:01:b9:48:52:c5:c8:e0:90:f4:ee:
         15:32:a3:51:64:1a:4a:fd:80:b8:04:49:47:c8:b8:5b:de:66:
         d6:06:be:08:7b:8a:da:82:ed:f9:33:0b:b4:5a:0e:31:a5:02:
         ab:62:30:50:69:c0:16:d2:4a:d7:8a:bb:76:ed:7f:1c:44:1d:
         6f:8b:c3:d3:77:83:73:0d:e1:ac:f0:8c:5b:a2:3d:b4:ad:6c:
         08:3d:f5:f7:02:5c:9f:5e:83:97:d0:5c:fd:2c:7b:ab:dd:04:
         72:42:17:dc:1b:38:7f:fe:32:3b:5a:ce:6c:cb:be:96:74:7a:
         a3:1e:72:fc:fa:63:9e:c3:02:b8:e1:9b:bc:f3:43:93:8b:1f:
         a1:3d:df:88:46:e4:bf:fb:66:dd:01:9b:9a:36:33:6f:44:89:
         8c:14:95:62:0e:c9:7c:7f:09:b5:5b:cd:01:d2:6e:9c:fc:4c:
         d7:03:3b:a3:97:5f:d7:fe:a1:ea:0e:07:bc:3d:f0:82:01:8e:
         f8:18:0a:0f:b0:ea:57:be:3a:71:bc:6d:ec:33:bb:8d:29:ff:
         0b:cd:11:e5:14:2a:45:f7:c0:bc:ec:69:04:d6:4a:e9:2b:19:
         5a:d3:72:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:03 2026 by rpki-client