Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d13e468d-3b9d-3146-a788-d50d75c0a622.roa
File:                     d13e468d-3b9d-3146-a788-d50d75c0a622.roa (raw, json)
Hash identifier:          E7Ea/0tGcYA9YRNlO7oGWVaL8MDgcC766vREjzZ+Vx0=
Subject key identifier:   9B:2B:85:7A:7B:65:1E:B9:4B:C4:4F:0C:3A:F4:02:A4:35:C9:7D:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF642D0A4AB447470FC600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d13e468d-3b9d-3146-a788-d50d75c0a622.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        2601:189:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:64:2d:0a:4a:b4:47:47:0f:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=9e996569-1edd-4fac-ba51-573688bf0e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:87:85:97:54:13:89:1f:d2:27:e0:fb:3a:
                    34:ef:8e:cb:36:94:e7:f6:be:e6:f1:75:c1:ce:c9:
                    38:d8:2f:7b:8d:80:41:b2:fd:86:95:22:c7:e4:f4:
                    35:2a:f6:55:f0:3d:a4:5d:c2:ef:1d:0e:5e:2b:67:
                    07:c9:c3:15:d5:5e:97:b4:ca:03:9e:c0:a4:fe:c2:
                    33:fb:b0:63:b9:77:75:f4:d1:b6:2a:f9:2b:4d:e7:
                    da:21:d2:4e:cb:e6:9a:49:5c:73:23:9d:eb:23:70:
                    e7:2a:d6:2a:df:9a:ca:ee:2f:e6:dd:4f:ec:56:c7:
                    34:ac:53:1d:22:5d:ee:7c:a1:14:d4:2e:12:d7:81:
                    b1:31:6a:bb:3c:13:f9:8d:52:63:42:5a:67:41:d2:
                    0e:bf:d2:11:36:53:95:06:7c:02:cd:d1:f6:b8:56:
                    c4:bf:8b:f7:36:ce:35:6f:fe:a0:b4:6f:ec:9c:0f:
                    ea:d1:81:69:55:4f:e1:d4:1f:ec:d2:42:3a:d5:f6:
                    65:d2:28:bf:17:e5:25:11:c4:e0:64:55:0a:2b:ac:
                    c5:ba:6f:f5:71:a6:11:d4:f2:0c:33:22:dc:71:89:
                    88:11:36:d2:70:df:a9:ba:b3:7e:cd:66:68:d5:c3:
                    ae:d5:ac:79:32:e6:8f:79:a3:d6:7b:67:d6:4b:57:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2B:85:7A:7B:65:1E:B9:4B:C4:4F:0C:3A:F4:02:A4:35:C9:7D:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d13e468d-3b9d-3146-a788-d50d75c0a622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:189:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:54:f9:44:58:7c:b2:45:e0:ca:94:0a:e8:4e:89:c2:50:96:
         e9:aa:e9:95:06:6a:b4:b7:da:64:26:ee:30:e0:b1:74:45:60:
         5e:10:4e:14:05:c1:f9:e5:c9:d8:bf:3a:e4:64:f1:11:4a:ca:
         b5:34:93:e9:fd:0b:0b:2b:5b:3a:ae:16:64:f9:91:8f:39:7d:
         0a:35:9e:5e:ff:e3:8a:90:5a:b8:83:4a:7d:92:08:89:12:61:
         b6:6e:64:98:31:24:0a:aa:e4:fa:93:9e:3c:ac:65:1d:ba:df:
         ff:6b:95:c6:b6:6c:bd:13:26:e0:82:27:3d:e2:55:ce:82:04:
         bb:0b:c9:c0:c3:de:18:22:07:a5:10:08:40:0a:f9:36:64:d8:
         98:62:2e:24:78:53:14:c0:e3:e0:df:d0:2f:34:f6:6e:f5:15:
         38:27:1d:17:ba:62:5c:1d:9b:55:1e:8b:3f:15:b6:83:d4:a5:
         19:35:29:a9:37:93:bb:3a:0e:b8:c1:80:36:48:48:66:0a:7b:
         ab:4b:bb:31:d5:9a:c4:e1:07:9d:3f:5f:46:2f:6d:26:b8:71:
         6b:f3:9f:ef:19:fd:4a:78:fc:12:db:ad:16:9b:c0:fe:54:d5:
         74:ba:4d:e2:54:4a:7a:ff:4a:39:3c:81:e9:c8:c9:47:ce:99:
         3f:57:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:40 2026 by rpki-client