Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65d081d9-2a9b-3222-846f-804325e8b329.roa
File:                     65d081d9-2a9b-3222-846f-804325e8b329.roa (raw, json)
Hash identifier:          Qae+y0lPIgW3+mrZyUSoSuk3spIGNw8h6eQPtE9r6so=
Subject key identifier:   8A:04:C7:02:B6:BE:24:89:15:A5:92:D0:5B:EF:23:54:12:40:39:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D810067241E9AA254CC084380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65d081d9-2a9b-3222-846f-804325e8b329.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        2601:c1:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:67:24:1e:9a:a2:54:cc:08:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=c43bf6c6-1b1a-487b-8f84-7f008e521af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:dd:9b:6d:6a:73:76:93:1b:64:47:25:4d:
                    58:13:d5:57:72:ca:4e:4e:3e:bf:b6:30:24:54:13:
                    35:1a:b1:bc:cb:88:cb:83:2c:64:a6:94:e2:ed:6b:
                    1a:a0:36:c7:55:cb:ab:85:67:b9:fb:78:9e:35:85:
                    5d:c9:93:d9:02:bb:4e:76:06:1b:c7:4f:b0:cc:fb:
                    ce:7e:e6:5e:c7:09:0c:45:5b:6d:24:c8:f8:c1:f7:
                    a7:4a:d1:52:68:2d:0f:a3:11:45:88:a9:e0:0a:4d:
                    54:72:6f:77:9a:87:38:c2:bf:8c:bc:d0:9b:6a:a0:
                    cd:85:a1:c0:2f:22:5f:d1:97:47:17:e0:70:79:9f:
                    c8:23:ef:15:ba:e1:20:65:78:7a:ce:ce:9a:f0:2c:
                    fe:5c:94:f0:b1:5b:29:34:32:73:1b:57:bc:fe:34:
                    c6:e0:1e:98:43:1c:f0:54:6b:e5:72:7a:9c:44:0d:
                    7a:51:43:5a:51:88:78:ee:50:ea:48:a4:a2:f5:46:
                    8e:c2:83:8f:aa:4b:e2:0f:47:c5:19:f2:15:46:2d:
                    78:1a:b4:ad:a0:3e:8c:34:61:20:15:3e:b9:3c:50:
                    e3:35:d9:c2:c0:9a:64:bb:81:8b:49:05:24:6a:66:
                    0c:c3:92:c4:d0:f6:54:13:fb:26:2e:e4:82:e9:17:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:04:C7:02:B6:BE:24:89:15:A5:92:D0:5B:EF:23:54:12:40:39:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65d081d9-2a9b-3222-846f-804325e8b329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:c1:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:a8:30:f1:d1:ba:04:d4:9b:4d:b8:87:50:5a:fb:95:4e:
         b9:9d:d7:ca:1f:ee:c8:77:f6:7f:e5:46:20:52:e8:dc:8f:4c:
         bc:44:8e:79:3d:0e:6b:c5:86:ba:71:72:3f:96:54:b9:d2:65:
         43:3a:2c:03:fc:a1:11:53:9d:ea:65:1c:31:61:80:1f:af:b5:
         a4:27:0c:e1:c2:22:c4:5c:f0:06:26:1a:64:67:f6:75:82:42:
         58:b0:f6:f7:4e:35:ce:1c:b3:64:b0:fe:e8:b6:b1:f2:67:0c:
         65:d6:0f:ef:f0:ed:e1:da:5d:6c:eb:5d:ce:06:98:fc:26:37:
         75:92:44:d2:ca:7c:f1:13:1a:bb:bc:16:d2:04:40:c3:0f:41:
         3e:8f:44:8e:3f:f0:23:38:77:35:1b:1f:1d:d6:a6:8c:f4:fb:
         30:29:e3:ab:e2:dd:42:e5:8d:12:a0:1b:5d:2c:6b:41:95:66:
         50:f0:74:0d:e0:30:42:28:e4:b9:c8:f1:a1:d7:6a:3d:68:f1:
         a5:9c:17:58:92:00:ea:fd:3a:4a:64:a6:fc:a4:09:83:f3:4b:
         fb:41:c9:fa:1c:6c:a2:c8:45:25:f7:52:8e:39:8f:83:63:e9:
         4c:98:fb:0f:88:30:79:98:16:5c:b5:3d:87:88:93:7b:8f:89:
         92:5f:cf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:59 2026 by rpki-client