Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9bc78d1-559f-3a6f-be4c-fac82869f0f9.roa
File:                     b9bc78d1-559f-3a6f-be4c-fac82869f0f9.roa (raw, json)
Hash identifier:          3KLAKGx+3CS+BFEGRn+dAd9xmrCrTLMw5OiQJwGKP00=
Subject key identifier:   5C:63:9D:7B:1E:1E:B0:A8:00:89:0E:9D:07:A6:0A:93:18:C3:65:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA79C5A8A52F4CB7764B37900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9bc78d1-559f-3a6f-be4c-fac82869f0f9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33652
IP address blocks:        2001:55c:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:5a:8a:52:f4:cb:77:64:b3:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=052bcf60-d508-4896-b2cc-df9ef8f799ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:1b:7e:55:c6:b0:a5:ec:14:37:04:e3:f6:
                    af:21:e5:7a:ce:95:dc:7f:65:0e:1d:85:41:7f:6d:
                    9c:61:91:ff:9b:b2:0d:c2:53:8d:de:d4:3f:f6:33:
                    57:60:1c:25:31:a8:e9:8c:79:8f:0a:6c:4a:89:a0:
                    2a:45:05:58:37:21:48:72:e1:70:5a:49:06:27:b2:
                    5e:c0:63:ff:53:c5:6d:ae:e5:93:b7:8e:9d:69:c6:
                    70:01:01:cd:1b:15:a0:46:e5:19:f6:15:a1:0d:bc:
                    9f:c5:dd:e2:1a:f0:43:f1:1b:21:e3:f1:b3:ff:4a:
                    19:1b:98:01:ab:36:f9:46:13:7f:3c:2d:14:63:e9:
                    ac:18:f6:4b:70:cb:ad:4a:f4:d2:65:b6:2d:a6:aa:
                    73:d2:ee:24:12:a7:4a:e5:53:a2:42:91:70:93:37:
                    52:74:f2:57:40:20:ad:8d:0c:47:61:0f:74:fc:25:
                    d6:3f:8a:5c:eb:b0:78:a1:82:63:08:5d:fd:58:6f:
                    d2:ad:32:9c:de:38:1f:38:b6:5c:8e:46:73:0e:48:
                    7e:31:64:44:55:78:2b:4e:15:12:e0:29:fd:02:56:
                    f8:de:79:d1:da:1f:2b:ff:90:e5:fd:29:ed:aa:2e:
                    97:ff:f3:d2:a0:c1:b1:aa:d3:19:70:54:19:21:e8:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:63:9D:7B:1E:1E:B0:A8:00:89:0E:9D:07:A6:0A:93:18:C3:65:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9bc78d1-559f-3a6f-be4c-fac82869f0f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:55c:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:85:81:91:a8:6c:ea:92:6f:63:72:b4:8e:69:84:55:29:90:
         bf:5e:2d:86:16:4a:17:e3:ba:db:7f:8a:71:a8:8b:62:d6:4a:
         4b:0c:48:ad:ab:c0:fd:d1:87:e4:ec:16:17:d4:5d:a5:fb:34:
         fd:4e:8a:2b:38:5c:e5:db:64:a7:7f:91:9f:9c:fd:72:d3:ab:
         b9:dc:22:d8:f3:a2:c7:25:a0:5b:7d:59:f8:ad:20:70:55:5f:
         46:c1:24:36:9c:0c:c9:79:58:57:3f:a2:d8:99:d0:96:bc:b7:
         ae:1f:e5:32:eb:68:f1:ba:62:3c:ea:97:37:d1:6d:c9:3b:f7:
         d2:7c:2b:a3:96:ca:bc:f1:c4:be:00:38:64:46:44:e5:99:ff:
         f3:3e:23:31:cb:26:c5:3f:03:0a:f2:15:da:6d:e7:1f:56:c4:
         75:fc:2a:bd:79:4a:fd:c8:66:9f:f3:59:1a:ac:eb:3c:e6:4f:
         fc:8f:6d:61:55:cc:9b:45:da:51:52:c0:02:85:83:e2:86:fb:
         0d:4c:79:01:a7:d5:8e:42:15:47:2b:a5:f4:3c:8b:f2:e0:e7:
         db:bf:04:73:85:48:8f:de:d7:53:dc:c2:db:6c:40:40:3e:b4:
         ee:70:48:54:d4:27:98:1d:46:27:ee:ba:96:b2:b3:c6:9d:be:
         ff:95:db:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:24 2026 by rpki-client