Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df91331b-a7c9-39df-a96e-b7c7d0b6117a.roa
File:                     df91331b-a7c9-39df-a96e-b7c7d0b6117a.roa (raw, json)
Hash identifier:          8y67NIQnVr8HlPfVsBphgFLwN4MmkqUBCUvL5SzinGw=
Subject key identifier:   58:C5:61:E4:91:0A:5F:14:DC:34:73:DD:B3:D1:8B:B0:43:62:31:F4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D95B6F7118EBB84F7E300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df91331b-a7c9-39df-a96e-b7c7d0b6117a.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33287
IP address blocks:        2603:301d:1800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:95:b6:f7:11:8e:bb:84:f7:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=67e9f048-27bd-44cb-a80b-4bd059f2bc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:20:08:a4:5f:f7:25:71:eb:9d:4e:66:a0:
                    17:e0:df:58:98:7d:c6:b1:d5:cf:bf:77:be:27:ab:
                    bb:f5:99:ad:09:05:74:b5:d5:93:83:45:d1:df:19:
                    de:34:08:46:30:f9:94:fd:47:6b:83:8c:73:7c:cd:
                    74:52:47:9b:30:a7:a5:37:aa:3e:7a:5a:5f:a0:5a:
                    78:09:c5:4d:6e:25:58:0e:52:b2:c1:24:3d:1b:f1:
                    bc:5e:27:6a:d3:e5:47:2c:33:77:2a:e4:15:89:32:
                    ea:fb:ec:f4:a3:bf:2d:24:eb:e1:5d:15:ea:67:f4:
                    0d:e3:9f:22:86:f4:da:b4:bf:d2:6e:7d:37:5d:e9:
                    b1:f6:6e:59:b0:70:f6:30:72:9f:96:52:b1:99:6c:
                    00:f8:77:cf:83:49:d5:9e:4d:a9:d7:e6:bf:12:ac:
                    81:f7:33:9f:de:8a:86:e0:86:5d:80:bf:e5:a1:eb:
                    8f:b1:c6:80:74:04:0d:54:57:17:ab:9a:84:cd:28:
                    e4:82:03:74:e6:bf:2a:cd:73:7d:88:6f:7b:e0:dd:
                    e0:ae:37:d6:1b:bd:ca:33:60:8f:7f:eb:30:36:ec:
                    55:33:39:f1:f3:10:de:79:47:06:1e:9c:76:d8:9a:
                    23:2f:57:d1:8b:64:cd:23:b2:9d:0d:56:d6:a8:23:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C5:61:E4:91:0A:5F:14:DC:34:73:DD:B3:D1:8B:B0:43:62:31:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df91331b-a7c9-39df-a96e-b7c7d0b6117a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301d:1800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:46:fc:47:f1:33:71:53:66:9e:ca:88:0e:96:46:57:e1:
         21:ef:ed:50:5d:a1:80:2c:23:15:8d:a0:d7:d6:bb:2b:65:dc:
         32:cf:c6:dd:9b:c1:00:f7:24:70:fc:9a:ce:7f:46:eb:0e:77:
         72:73:32:d9:b0:3d:d0:b5:2f:cc:b7:cf:18:2a:15:55:aa:b8:
         48:23:22:08:22:fa:0b:28:b7:1a:ce:79:64:74:e4:fe:69:4b:
         66:43:91:2c:c2:a6:5b:9f:eb:61:a1:3f:16:76:99:58:bc:0e:
         f0:f8:07:6f:a8:1d:8e:db:0d:4d:5e:f2:21:e5:5a:7a:d0:84:
         dc:15:78:20:56:94:4d:62:33:c3:56:4b:6f:f1:af:1f:4a:f8:
         aa:b4:3a:bc:fc:8a:c4:5a:be:60:07:63:59:f4:e2:40:74:e8:
         45:e7:58:3b:41:88:4e:1a:c2:16:b8:81:45:5d:0d:c3:a3:5b:
         7f:cb:44:b2:45:51:0b:4a:e4:14:69:a5:c3:fc:ad:5a:b6:ef:
         6b:a7:e9:99:75:03:47:0c:53:fd:d2:2f:17:bb:ef:25:7c:1c:
         57:17:77:23:8f:6a:7e:a2:3c:a5:b4:ff:42:54:c0:c1:7b:2a:
         8c:38:f5:08:18:e2:30:f9:38:13:68:64:8f:ee:ec:d9:ce:73:
         7b:5d:03:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:42:31 2026 by rpki-client