Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf6f0b03-57d6-387a-8555-68800c25c6e0.roa
File:                     bf6f0b03-57d6-387a-8555-68800c25c6e0.roa (raw, json)
Hash identifier:          HywUW4PGMASHESIV3mzPz2Xtpklnqz9EObuxf+swuCo=
Subject key identifier:   84:21:22:94:C4:0D:93:1A:4F:46:3C:BC:ED:7A:0B:BC:89:75:E9:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE57F6BF0212F2E9E6895A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf6f0b03-57d6-387a-8555-68800c25c6e0.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33491
IP address blocks:        2601:247::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:f6:bf:02:12:f2:e9:e6:89:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=445ed4f3-3eb1-48ca-838a-22a05d337d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:0c:56:c5:98:a4:7f:aa:cf:eb:5a:af:cc:
                    ae:a7:3b:34:2d:97:7a:87:70:59:c9:da:72:8d:f7:
                    c2:d3:f0:39:dd:d9:fb:b4:10:9f:ff:7e:d5:42:dd:
                    bb:ed:36:29:7a:27:d9:ce:30:8e:bf:a2:bd:3b:a3:
                    8d:75:ce:41:1b:5d:8d:b6:e3:46:9e:52:27:88:f0:
                    aa:18:a3:73:f9:65:22:e0:d1:9a:be:e2:77:2f:f6:
                    75:43:0e:2d:f5:8c:82:07:a3:91:12:f1:a9:a8:34:
                    34:f8:c7:9f:31:e7:44:88:de:43:0a:03:48:96:0d:
                    5f:4e:95:44:a4:6b:a5:45:11:12:79:09:52:ae:68:
                    51:82:49:6b:f2:1a:cf:3d:c0:2b:bf:51:3e:d6:2d:
                    cf:3f:49:30:66:4b:63:3c:97:bf:7d:a0:30:ed:25:
                    29:e9:41:18:3e:8a:67:88:43:65:2f:44:a4:46:b2:
                    69:98:0e:83:43:77:61:07:0a:c0:2a:55:49:9d:59:
                    4c:26:69:d7:83:60:c3:89:13:b3:22:48:b7:e2:37:
                    7e:2f:8d:27:19:c8:39:8b:2d:d1:f7:f7:23:c6:b9:
                    da:29:e7:e9:e9:af:31:11:97:02:ee:b0:6d:88:9b:
                    88:43:d4:fd:c5:a2:fe:81:03:1c:bd:d5:36:c2:8c:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:22:94:C4:0D:93:1A:4F:46:3C:BC:ED:7A:0B:BC:89:75:E9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf6f0b03-57d6-387a-8555-68800c25c6e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:247::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c6:85:97:cf:e0:e5:65:93:79:25:72:20:25:95:8a:dc:b2:
         11:ef:9e:fa:9c:1b:37:50:3f:f4:6c:ed:ab:bc:25:6f:eb:b8:
         71:18:d5:a5:8d:d6:64:d1:6f:d5:af:c2:69:dc:49:17:37:6a:
         12:1e:e4:8f:4a:54:39:9b:e7:7a:15:6a:bd:3e:b7:06:72:90:
         a4:5c:9f:d7:87:bd:ec:d5:4e:db:26:81:d1:f7:d6:63:51:1f:
         f6:94:e7:e4:f8:3a:b9:ca:25:06:87:c9:c7:12:d1:70:98:c4:
         50:2c:20:3e:03:0d:2d:2d:7f:26:1a:31:32:67:44:58:36:f4:
         02:11:b7:8e:c6:99:c7:07:32:0e:03:4e:73:ff:f6:b0:f3:f9:
         22:92:0f:46:8f:96:36:1f:12:f8:37:4c:a5:c7:69:0d:67:d6:
         da:9a:8e:f0:80:9f:88:e1:e8:4d:9b:68:61:c4:26:33:46:1f:
         f6:5d:b2:fc:1e:2b:01:85:67:1a:08:9b:e8:42:d6:d5:5b:1c:
         7c:f1:d5:11:09:2c:ae:aa:59:8e:4f:bf:0c:81:68:f1:53:0d:
         8d:a9:9f:06:dc:2e:9d:87:36:97:db:e8:5b:83:ea:ba:5a:c4:
         c4:69:dd:8c:c1:17:6e:f1:68:a0:84:55:7c:79:c6:93:4d:74:
         fa:4e:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:05 2026 by rpki-client