Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/770cd459-1b65-33a4-975c-eb7c05bd78ad.roa
File:                     770cd459-1b65-33a4-975c-eb7c05bd78ad.roa (raw, json)
Hash identifier:          bS+8VhQSgzGEOmbGFr39Lzw4mi0yaVrMZWkCrjVxib8=
Subject key identifier:   BF:67:14:F4:AD:E9:67:CB:E2:D3:FD:08:49:F2:CB:4A:A9:2D:83:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBC840000108B95204FA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/770cd459-1b65-33a4-975c-eb7c05bd78ad.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        2603:2188::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:c8:40:00:01:08:b9:52:04:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=ac87d8a1-99ca-49b4-aa35-33e6a0ecfa3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fb:80:62:91:44:b4:4b:f0:23:30:51:45:5c:
                    47:d5:7d:2d:ef:1f:a1:61:86:5e:60:c4:73:f6:80:
                    fc:d2:64:7a:4d:91:6f:c9:76:79:18:9b:08:a3:15:
                    f8:c2:fb:51:b0:b2:42:88:dd:1e:92:86:ad:6d:20:
                    8d:1f:c3:82:6c:0a:df:d1:0a:1c:0a:76:64:bd:59:
                    d5:34:f9:d6:92:31:48:1c:3f:e1:c7:b8:cf:02:ee:
                    a7:b2:c1:b4:90:ea:9b:a7:26:eb:66:bd:80:5f:8b:
                    5e:9e:f0:59:9f:be:36:38:a5:44:38:7d:b8:1e:ff:
                    cc:21:be:6d:fc:86:ac:90:34:ad:60:3e:b2:a9:a8:
                    a6:e1:94:ae:4b:5d:3f:f3:dd:80:25:a5:46:38:88:
                    79:0c:e1:93:4d:aa:50:25:0a:e8:5f:cf:55:7b:88:
                    c2:10:b4:32:1a:a1:4b:4d:45:95:88:ca:b6:24:5a:
                    35:15:be:04:2a:27:f1:1b:ea:cb:fb:ce:b6:c2:90:
                    c9:c7:c3:a8:be:42:f7:3b:c5:56:05:0e:19:38:69:
                    94:7f:70:79:1d:0f:0a:ab:1e:3b:fa:a6:88:55:ba:
                    a1:26:49:0f:2a:42:7d:22:f6:f6:be:1f:29:a2:23:
                    78:57:9d:53:e9:fd:96:06:50:6f:81:6c:0d:3d:18:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:67:14:F4:AD:E9:67:CB:E2:D3:FD:08:49:F2:CB:4A:A9:2D:83:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/770cd459-1b65-33a4-975c-eb7c05bd78ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2188::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:af:a0:b0:09:d4:f4:b1:e8:ff:c4:17:b0:75:cd:78:cf:e5:
         ab:e5:43:b4:dd:58:d3:7d:d3:2a:04:c6:6c:70:e7:d2:25:27:
         0f:91:13:ec:45:7a:1f:7e:62:26:e2:e4:0e:8d:a3:45:df:19:
         87:0e:a2:c0:9c:0d:4a:d0:c5:af:e3:d8:ea:31:a5:bc:f1:a6:
         c9:b7:b1:ff:d9:0a:c6:c9:8f:b0:bd:b0:aa:2b:6b:12:d6:82:
         35:d1:4c:b8:19:68:fd:71:71:44:3a:3b:df:24:fd:2f:e3:e3:
         10:d5:dd:5f:03:cd:29:29:86:61:2c:d3:40:37:5d:cf:1a:fd:
         58:1e:19:26:7c:91:8a:24:d2:e3:30:de:c4:b8:31:3a:51:0d:
         4a:eb:29:e6:55:01:bc:05:89:3f:11:55:cc:21:8f:0f:c2:fb:
         6a:c1:d0:45:89:e6:43:1f:25:1c:91:e4:fc:3e:03:19:25:c2:
         36:1a:d8:1d:60:81:c6:47:8b:0b:3c:f5:56:db:da:52:0b:13:
         d3:c5:32:2a:03:ea:04:11:2f:9e:d6:04:eb:67:53:b2:da:46:
         e9:f6:33:25:22:5f:b9:af:61:7d:99:c7:8f:8b:47:f4:54:2a:
         1c:87:2c:d7:34:c0:d5:4b:71:d5:77:3a:46:11:4a:7f:cb:b3:
         4c:66:18:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:16 2026 by rpki-client