Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97f30b06-9212-317b-a4cc-515bc855f373.roa
File:                     97f30b06-9212-317b-a4cc-515bc855f373.roa (raw, json)
Hash identifier:          EPpqTxcd9QANU63zWQVvo8VtDPJ26rTIOhdVkgs4Y0s=
Subject key identifier:   A0:A4:62:96:34:D4:C0:53:35:7D:61:28:EF:70:04:69:5C:80:EE:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52439456C8999CA9522FA6F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97f30b06-9212-317b-a4cc-515bc855f373.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7016
IP address blocks:        2601:98a:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:94:56:c8:99:9c:a9:52:2f:a6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=4edcbbc6-b020-47f2-b47a-b84806b5c5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:f9:58:93:54:67:a8:51:60:07:fc:45:88:
                    8c:df:c6:2f:68:62:ca:13:79:7b:f5:45:8b:c7:da:
                    a4:9e:55:ae:3e:75:1b:3d:2b:e3:25:d2:c7:9f:d9:
                    bb:2f:3b:ae:7f:0c:18:fa:ff:47:7e:9e:37:60:0e:
                    19:55:ab:a7:61:dd:5f:04:ac:5c:e7:51:d2:53:0b:
                    2e:32:66:4e:de:f8:ca:6c:5b:97:e1:07:cb:db:1e:
                    9d:78:78:a7:e2:b6:93:48:9d:f5:3b:3f:28:63:93:
                    e8:97:06:9b:20:e4:c9:e8:a7:7c:93:fd:57:b5:7d:
                    ed:96:52:c4:f9:70:18:6d:e2:30:74:1b:ad:37:cb:
                    00:32:54:e6:ec:f1:c5:61:80:9d:21:72:4a:89:d4:
                    79:04:f6:af:42:3e:57:40:bf:50:59:e1:6e:9b:e2:
                    ab:33:d2:d9:d5:77:f0:a1:26:9a:d7:ce:ae:0d:d3:
                    e4:04:1a:c8:ae:80:6e:8e:ae:44:02:4a:88:ec:cb:
                    f4:12:1b:b5:9c:51:4e:ce:20:75:f5:99:4b:29:69:
                    ca:ba:5a:39:06:af:e5:ac:be:2a:2a:d7:ae:7c:d5:
                    7b:de:ff:82:3e:bf:50:c7:b3:3c:8e:4a:33:a1:b2:
                    a6:01:b6:c0:8f:03:2d:f5:e2:a6:93:40:26:7e:72:
                    3a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A4:62:96:34:D4:C0:53:35:7D:61:28:EF:70:04:69:5C:80:EE:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97f30b06-9212-317b-a4cc-515bc855f373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:98a:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:c9:fa:bb:60:1c:75:29:f0:55:7d:45:40:39:4c:ff:09:d3:
         82:d6:7a:ac:8a:ec:6b:7f:f2:16:0b:82:7c:cb:ef:3f:ac:b2:
         d1:e9:cb:50:d2:aa:87:7a:e9:73:95:c9:f9:69:4b:2e:1e:05:
         9e:20:a7:f0:a1:c2:46:df:01:72:ca:10:91:49:e0:10:bf:78:
         fd:2a:e9:94:ca:47:10:0d:4e:3e:17:c4:3e:cc:ef:ba:0a:f5:
         5e:6b:af:dd:9d:cd:08:5f:48:c1:98:c6:64:14:80:6c:d3:22:
         fa:9f:1b:c0:87:56:14:e2:bd:b4:3c:4e:30:7c:54:a0:ab:62:
         18:06:49:29:38:05:2a:2f:d5:0e:44:9f:91:86:3f:85:0c:1d:
         09:2c:8e:c9:17:c3:57:95:ba:a7:9f:3d:5d:47:3a:c8:03:e1:
         2b:ea:d7:a7:4b:f1:5b:dd:91:42:55:1e:ee:31:d2:72:aa:5c:
         a7:91:a7:40:48:b3:8f:48:a7:da:24:7e:c5:7c:f0:d5:fa:45:
         e4:34:09:ae:2d:57:87:29:89:91:90:6e:6d:b9:f6:ce:94:22:
         fd:15:fb:4c:d2:2f:93:04:a1:48:4d:96:50:2f:bb:57:b6:97:
         bd:e9:db:0d:b5:bb:3e:49:26:26:1b:a9:2a:76:e6:d0:c0:89:
         bf:56:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:41 2026 by rpki-client