Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c80e554f-05b3-347e-9f2a-b9ecde8a6cc2.roa
File:                     c80e554f-05b3-347e-9f2a-b9ecde8a6cc2.roa (raw, json)
Hash identifier:          4cLQT9IQ6EYaY1+LzVvRWw+MU/MnAYYT6V9qFpnNrIY=
Subject key identifier:   0B:46:78:38:EA:64:AD:88:C8:13:21:99:3D:13:12:82:AF:4E:89:6E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5A90D45C558F3DD2DE0D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c80e554f-05b3-347e-9f2a-b9ecde8a6cc2.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        2601:85:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:90:d4:5c:55:8f:3d:d2:de:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=abe749cb-5298-4307-95fe-81849bc1ff75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:c3:83:b0:c7:d4:89:1f:25:a5:9a:27:fb:
                    74:f8:3e:f5:fc:3e:94:d9:a7:93:51:f5:92:0a:cf:
                    8d:88:7d:c2:67:63:bd:2f:4f:5b:c7:71:35:1f:c0:
                    87:01:f9:7f:3c:85:f1:32:1a:bd:8c:ac:93:85:95:
                    fb:4f:97:33:89:e7:06:d4:81:d5:b5:e4:63:35:cb:
                    68:6b:1f:d5:f8:bb:5d:67:b6:ee:b9:b3:f7:c6:b3:
                    b1:e2:12:33:ac:50:72:05:85:34:c6:c4:c3:9d:9b:
                    2c:70:ee:d4:68:c4:dd:14:1c:72:2d:53:52:f4:fc:
                    48:47:08:64:c6:b2:dc:80:05:d7:ee:6b:98:1e:90:
                    b9:c7:6d:98:7d:91:60:b5:ba:06:91:76:ed:66:d2:
                    f9:6f:a0:ba:fd:1a:6e:e6:67:7c:3f:08:3d:0f:a0:
                    83:dc:3d:24:ab:6a:e3:3f:c7:bf:94:1e:0d:73:66:
                    f1:f7:45:03:2c:f7:9f:ea:cb:4c:a8:4c:ad:eb:8c:
                    95:16:37:74:4d:ff:c4:00:c3:7f:d5:90:8f:f5:f7:
                    15:ef:53:ca:0e:e3:ff:55:aa:7d:06:d7:48:dd:f4:
                    2a:96:38:5b:80:0d:e5:9c:1e:95:75:bd:7b:04:37:
                    ce:99:93:90:03:6b:45:6d:09:6d:af:0f:78:28:1e:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:46:78:38:EA:64:AD:88:C8:13:21:99:3D:13:12:82:AF:4E:89:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c80e554f-05b3-347e-9f2a-b9ecde8a6cc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:85:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0d:97:32:97:af:39:67:ea:af:65:11:68:67:aa:ac:11:7d:
         d2:13:1e:1f:65:a6:bf:29:8b:1f:fb:53:31:84:06:7e:29:f4:
         4b:e1:07:34:ca:43:53:5d:df:11:49:e7:06:f6:8d:b3:e6:ad:
         03:53:6d:cf:78:ef:1d:93:4c:56:f9:c7:8a:55:e1:c9:29:30:
         50:b3:68:89:3c:3e:c0:fc:47:34:03:52:c4:b1:85:d5:da:47:
         6e:d0:16:35:c0:2b:54:7f:4e:88:0b:07:ae:92:42:26:33:f3:
         e9:ee:46:d1:6f:1c:00:da:28:50:cc:15:bb:3d:91:aa:85:d3:
         bd:6e:57:b8:ee:b5:3a:cd:01:9e:95:e2:5f:bd:de:8d:d1:bf:
         a2:cd:c5:03:7c:3f:60:c5:ee:f1:a0:f0:75:0e:32:0d:a2:49:
         df:5b:23:45:e6:1d:62:10:c6:64:37:ee:6f:ce:f7:03:f4:85:
         b5:5c:16:43:86:cd:84:72:84:96:fc:af:9e:39:d8:d6:c6:6e:
         bf:03:a4:ea:f9:bf:e8:4f:c1:a7:25:20:df:60:49:f6:bf:59:
         84:bc:79:fb:d4:79:a0:da:10:28:ff:67:60:b0:8b:e2:e8:49:
         64:13:e0:c8:d5:b3:c3:a0:f4:14:a3:b6:33:4e:ba:3b:eb:36:
         95:28:87:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:56 2026 by rpki-client