Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b338a43-44ff-3c08-a579-d654f7cbfaf5.roa
File:                     8b338a43-44ff-3c08-a579-d654f7cbfaf5.roa (raw, json)
Hash identifier:          cg7k+KVVwnM/d+/6QWI5Y3k4a4BmJzlCdP5sb4AeS+A=
Subject key identifier:   7E:9F:16:75:98:EB:09:F4:4F:82:17:E1:E4:62:19:9F:B1:26:37:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78952CE0CD4D06A7E654580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b338a43-44ff-3c08-a579-d654f7cbfaf5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21508
IP address blocks:        2603:3021::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:89:52:ce:0c:d4:d0:6a:7e:65:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5936e25d-2575-4409-823b-b320df06d071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:40:86:65:76:dd:eb:48:2a:c6:aa:05:1f:e5:
                    da:f5:29:04:1b:76:a1:23:d9:0c:85:2f:2d:26:12:
                    86:ef:41:b0:69:26:57:5a:2f:e5:bc:47:52:f1:5d:
                    b9:de:2c:a6:cd:32:3e:e5:41:b3:22:dd:a2:1f:08:
                    04:f6:b6:69:0e:26:6d:9e:1a:97:0f:6b:46:11:9d:
                    06:ed:57:e3:7f:57:84:22:1e:2c:21:10:ed:7e:2c:
                    1c:2e:f2:c5:d5:fb:2a:a1:db:c1:09:11:75:92:74:
                    04:82:ba:0d:50:7a:64:ec:79:ae:eb:50:ff:b3:9c:
                    0e:93:1f:fa:15:09:23:25:51:e0:fc:09:aa:0d:dc:
                    56:a6:19:b5:a4:59:3f:df:e9:5e:f2:7d:fc:0f:13:
                    4d:60:72:39:53:91:45:88:d9:6e:6c:02:c4:94:c1:
                    5f:f3:54:52:b7:c8:7d:3d:96:b1:d8:94:60:6c:3a:
                    23:63:07:f7:3a:dc:66:cb:60:8d:57:0d:e7:ab:a4:
                    27:b9:b3:42:24:59:3e:f5:c4:5c:1b:ed:5e:9e:94:
                    45:8b:b3:e2:cc:2d:cb:27:6b:54:41:4f:d4:53:1a:
                    08:ef:32:f5:c4:1e:3c:b1:48:92:8f:96:6d:c9:c3:
                    d0:cb:19:47:4a:00:a9:de:fd:58:b3:8d:48:f8:98:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9F:16:75:98:EB:09:F4:4F:82:17:E1:E4:62:19:9F:B1:26:37:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b338a43-44ff-3c08-a579-d654f7cbfaf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3021::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:54:b8:8d:fb:3a:35:57:ab:02:0b:c9:aa:68:fa:8b:ed:
         26:75:73:c2:02:d4:3e:77:2d:41:fa:3f:19:cc:43:a2:02:d3:
         53:fc:0e:c7:8f:e1:82:ba:a0:2a:22:8a:d9:e1:b5:f7:30:92:
         bd:a8:00:99:6c:15:8b:d9:63:e0:06:6d:9e:78:b9:c2:6f:16:
         63:f3:fb:9f:3d:13:57:71:96:45:31:15:21:01:47:48:bb:32:
         f4:c7:87:d0:88:3c:30:83:73:5d:58:04:f2:2d:f9:09:02:8d:
         76:76:09:88:f6:6e:ad:e5:1e:c8:23:59:3d:be:fa:d5:c0:01:
         68:5b:99:ed:fb:45:66:47:06:f7:9d:ac:e8:d2:99:d6:89:56:
         36:72:e6:5f:6f:6a:31:10:7c:2e:14:b5:8b:9e:18:bc:12:a7:
         e4:5e:46:67:55:45:cf:1d:d6:34:d7:9a:d0:c6:ea:1e:8b:07:
         f8:2b:49:32:84:d1:04:7d:23:89:82:f4:06:73:4f:3c:c2:aa:
         0b:6f:e9:56:fa:91:72:8d:aa:22:20:57:e8:82:51:a1:12:0b:
         89:52:0e:13:ca:da:19:dd:d3:fd:45:c1:21:43:e0:cc:7f:bf:
         ae:42:d6:28:88:97:f6:8c:04:b6:60:72:54:29:c6:bb:12:a9:
         30:b5:65:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:10:47 2026 by rpki-client