Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc370ad8-89f3-3e09-bde5-b95aa52345c2.roa
File:                     cc370ad8-89f3-3e09-bde5-b95aa52345c2.roa (raw, json)
Hash identifier:          MN8s7KvXlsHmjhZ2xYbe+uL3t1XqVTdqH8OnGmJ2rXk=
Subject key identifier:   41:60:BD:D5:D6:AF:E8:F9:55:74:D7:F4:47:85:A5:FD:C6:BF:72:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED8623B4574A177A9FFE28E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc370ad8-89f3-3e09-bde5-b95aa52345c2.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        2603:3005:5800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:3b:45:74:a1:77:a9:ff:e2:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=3256cc87-5755-4e75-bbf1-80845bb8c4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:31:e7:47:f1:8e:9a:6b:a9:3b:bb:d8:8d:d1:
                    c3:27:cd:97:39:a9:fb:e2:52:19:d9:b1:db:47:3e:
                    d6:e0:e8:81:f1:a0:c7:69:4e:d1:ad:fd:be:5a:18:
                    f1:3f:16:7f:9c:64:0f:11:27:f3:ce:b3:1e:da:fc:
                    15:20:2c:6c:67:ea:b4:e2:24:96:88:79:3b:ba:76:
                    a1:dd:7b:a5:0c:66:d8:d5:10:20:d3:25:24:bf:87:
                    8c:7d:cc:69:0f:0f:96:f9:75:22:86:b9:c6:7c:80:
                    f8:cf:cf:7e:d2:e8:30:5e:94:97:2b:34:b9:77:46:
                    bd:da:37:50:a0:65:4d:e1:ed:bb:af:fe:02:de:df:
                    3a:a4:82:73:4b:68:d0:2f:72:d4:ab:86:6d:fd:8d:
                    37:bd:3c:8f:18:66:fe:2d:d3:12:de:f4:0f:ab:f7:
                    d1:7b:8e:e7:9f:c8:a6:23:ac:bd:3e:d1:48:2e:ea:
                    74:a4:58:80:23:5b:ee:00:2d:e5:70:37:86:9f:8e:
                    61:b8:23:a9:8e:e5:9e:c6:f1:c8:80:45:a5:65:a9:
                    40:c0:6c:17:3e:ba:65:7c:13:3e:5c:a6:ec:5c:f5:
                    bd:d9:0b:74:68:aa:4d:ed:ab:20:cb:b7:e6:44:f4:
                    15:f0:b0:b4:cc:c3:c6:4b:08:32:56:22:9a:3a:e9:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:60:BD:D5:D6:AF:E8:F9:55:74:D7:F4:47:85:A5:FD:C6:BF:72:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc370ad8-89f3-3e09-bde5-b95aa52345c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:5800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:73:5a:43:90:39:f2:98:cb:29:25:82:cb:66:20:ad:fb:c0:
         90:27:37:dd:cf:af:50:77:8a:5b:84:13:a9:76:13:8f:59:0d:
         10:b9:7e:1e:a3:fb:77:6a:89:c3:89:46:49:98:f3:6a:29:e1:
         f7:8f:14:b6:df:50:42:ec:e4:31:67:e9:3d:b9:e9:47:41:90:
         18:cc:4c:87:68:77:ec:d7:1e:23:20:18:d9:16:a7:ee:88:cd:
         44:0e:30:cb:11:a5:66:7b:6c:d7:06:f8:1f:6d:2b:a2:28:05:
         28:6e:af:78:ab:6d:28:2d:e4:5e:fb:04:3a:f6:18:8d:af:51:
         cb:4b:96:e3:9d:79:e5:a4:f0:6f:9e:b9:d4:2b:7c:46:ff:74:
         52:43:a9:46:32:e4:80:f0:4c:f3:b7:26:ff:31:f4:3b:54:e2:
         5a:c5:b6:3d:57:23:83:b5:ee:12:cf:74:9f:d7:3f:a9:4f:f9:
         93:a5:25:aa:55:ba:07:69:08:74:fc:60:4a:ba:f1:01:ff:dc:
         ac:b0:e0:2a:10:02:79:2e:f1:9c:b2:33:f6:ce:13:d3:20:a5:
         55:32:94:b3:80:b6:1b:6d:66:45:ac:4d:c9:78:bb:a1:0f:64:
         05:51:7c:da:00:01:fa:68:14:98:9b:dc:b9:b7:65:be:c6:0f:
         75:6a:23:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:51:17 2026 by rpki-client