Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2f7f022-860c-30ba-a085-298f07ee6be8.roa
File:                     e2f7f022-860c-30ba-a085-298f07ee6be8.roa (raw, json)
Hash identifier:          QyNdSCJhUiw2MRuIMCDK9MLQBL3AHXjoYvTzJYGfKfY=
Subject key identifier:   24:6E:F4:C8:FF:05:59:D5:00:18:31:3A:E1:59:4F:B9:2E:4E:8F:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D5243960DEDBD135A0E9E7C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2f7f022-860c-30ba-a085-298f07ee6be8.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7016
IP address blocks:        2603:2540::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:96:0d:ed:bd:13:5a:0e:9e:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=2bd9d88f-b6c5-4078-b1d7-a6db3a630796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:07:df:ee:23:9c:fa:40:63:c0:3d:f4:c0:
                    c5:71:dc:5f:0d:48:7e:40:e3:18:5f:61:b3:0e:2c:
                    c4:76:93:51:55:cf:ff:7d:eb:68:82:b2:12:80:b4:
                    92:b0:e4:f4:37:58:e9:30:f0:aa:9d:0f:d7:b2:c4:
                    0a:ea:6a:07:24:79:e9:43:99:d8:17:c4:ec:aa:5d:
                    20:ca:80:f0:85:5b:8f:f1:c6:38:e9:b4:f2:09:e2:
                    d6:9b:b7:ed:b7:e9:60:84:e0:1f:a9:3a:91:20:2c:
                    0a:8b:3f:18:74:ad:fa:68:27:24:7d:ff:a4:e0:06:
                    0d:76:06:93:9b:0b:b0:20:6f:bf:4f:de:50:15:54:
                    27:18:39:1f:45:c6:fa:7e:e9:a7:d6:e5:a8:83:3f:
                    08:b2:80:53:2d:ca:73:7e:ef:2a:51:33:ef:b2:4d:
                    26:63:bb:ba:19:ad:40:a8:1c:4f:c0:ac:aa:f8:aa:
                    21:c2:14:40:79:b8:b9:48:f4:37:c0:b4:50:c0:8f:
                    60:3f:dc:f6:6f:34:a5:55:1e:b3:96:c0:c5:a4:06:
                    86:41:bd:50:86:dc:64:02:af:b6:d7:b9:04:f6:32:
                    09:e3:20:ac:7f:74:8e:13:4b:bb:24:71:b0:b6:f4:
                    8e:a1:6d:10:b3:71:5c:3a:a7:6a:54:db:6b:8b:fd:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6E:F4:C8:FF:05:59:D5:00:18:31:3A:E1:59:4F:B9:2E:4E:8F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2f7f022-860c-30ba-a085-298f07ee6be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2540::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:81:63:d5:65:2a:d8:c5:33:94:2a:c5:5d:24:c0:90:6f:31:
         a4:2a:2a:9c:30:42:42:d9:7f:96:e5:1a:bd:cc:e2:a7:68:e2:
         97:fb:ef:7d:1d:bc:ac:b6:f8:78:9c:18:ad:92:8b:38:2b:b2:
         93:9b:96:f2:9e:07:f3:a7:7e:da:c7:35:bb:1d:24:9d:7d:e1:
         50:ef:09:75:2f:b1:ca:7b:29:9f:a1:9c:9d:5e:84:90:31:14:
         dd:1b:c0:6a:09:a7:0e:52:6e:46:5c:ba:b2:fd:d5:43:f1:ec:
         f8:de:ed:ac:39:26:cf:df:40:25:3d:22:13:9d:19:8b:87:77:
         9c:bf:3d:10:54:ea:0e:a0:34:88:0d:93:f1:a2:c1:67:d6:06:
         38:e0:df:f8:b6:28:5f:cb:52:e3:bb:a8:82:6c:64:ab:c2:fd:
         8a:b1:9e:d3:38:92:a8:72:a3:d2:fa:aa:1a:2f:58:d9:c5:9f:
         9d:22:90:d7:34:9d:fe:5f:4b:77:8d:40:43:a5:3d:a1:76:38:
         c4:a7:87:10:80:80:ea:bf:16:3f:3e:9e:93:ac:94:7e:f4:b4:
         88:d3:f5:49:10:a7:22:02:5f:68:dc:f8:c6:79:5a:b0:a8:98:
         56:44:66:c6:e1:b4:d6:a2:fd:20:3d:14:f1:e2:d0:36:6c:27:
         19:e7:7c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:36 2026 by rpki-client