Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecac3bf4-88d5-32ee-a3de-78282fc46830.roa
File:                     ecac3bf4-88d5-32ee-a3de-78282fc46830.roa (raw, json)
Hash identifier:          tCYiJsjOPdc/BMFFw+pVDjpKUeZxZIO11kha7fPuXFE=
Subject key identifier:   3A:35:53:FA:95:48:F8:48:B7:72:E3:74:5E:40:14:A6:67:4A:02:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5A93D515D51031A09BE980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecac3bf4-88d5-32ee-a3de-78282fc46830.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        2601:8c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:93:d5:15:d5:10:31:a0:9b:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=ecb0ea0a-5674-4927-88a4-60ff471be17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:d5:ee:9e:cf:33:5d:db:8f:ad:94:e6:10:
                    98:0e:81:84:dd:52:bf:3f:a0:0d:66:e9:b9:69:af:
                    f7:df:e7:aa:f7:92:e0:e4:49:c0:7a:b0:7d:52:30:
                    af:f7:39:95:42:ef:f3:57:38:58:9a:1a:56:41:30:
                    71:ed:03:c1:2b:eb:bd:35:ed:36:b3:db:31:09:25:
                    04:81:a2:1b:74:cc:b7:b3:47:f7:51:1b:a2:0d:66:
                    46:33:7b:c0:85:5b:bf:0b:e7:71:73:fa:58:ee:88:
                    d6:93:f2:27:1f:30:1b:5f:21:91:94:bf:a4:d0:ce:
                    93:6d:30:51:9e:c0:3c:b1:cd:86:66:71:68:5e:65:
                    68:f9:4e:34:6b:da:27:b0:62:97:dd:a7:c3:c7:d7:
                    cc:e0:02:bc:3e:6f:0c:bd:08:83:e2:cf:b5:67:5c:
                    34:af:56:ea:83:66:8c:21:1d:31:11:37:81:4e:54:
                    df:c2:4e:4a:02:b4:fa:9f:ad:87:8a:f4:8e:23:25:
                    32:03:e2:5e:34:3a:9b:39:97:54:ad:6d:ec:1e:ff:
                    8d:bb:fe:47:54:1c:00:a1:75:10:e1:c6:ff:e7:fa:
                    40:3d:da:da:61:fa:61:19:eb:e8:23:ef:e8:68:c1:
                    73:c6:ee:0e:88:26:f3:4e:e3:57:f4:59:cb:d1:ed:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:35:53:FA:95:48:F8:48:B7:72:E3:74:5E:40:14:A6:67:4A:02:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecac3bf4-88d5-32ee-a3de-78282fc46830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:8c:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:ca:0a:f2:d8:55:81:23:de:2b:06:d6:0f:99:74:e1:94:
         b8:e2:69:04:80:7b:53:00:65:1d:37:5b:d3:95:c4:db:d9:ed:
         7f:fc:02:71:07:b0:c0:48:50:50:39:4d:61:28:56:da:ff:34:
         83:57:05:8a:e7:06:59:64:17:af:7c:f6:48:b3:76:8e:3d:5e:
         75:6b:7e:b6:42:a9:18:1e:e8:97:f0:6b:ca:6d:87:49:00:92:
         97:fe:d9:73:15:64:ad:32:4d:ed:9c:90:03:6c:02:3f:b3:07:
         c2:76:12:ba:4e:51:d0:88:d3:c8:27:0e:38:b9:7e:f6:16:4a:
         26:ee:8d:74:8b:41:58:87:05:7e:f5:ad:46:f2:41:12:2a:9a:
         ea:5a:9e:18:d6:b8:92:33:83:36:24:43:85:2d:82:8e:5b:1f:
         0b:4f:d2:9a:9d:c6:6d:08:16:50:e3:66:8c:64:1d:70:a0:ee:
         73:7f:57:eb:91:44:db:90:2e:1a:ef:4b:6d:87:41:6a:a4:25:
         08:0e:5d:12:df:f2:9c:ee:3b:7f:15:83:b3:92:a3:9d:a6:1b:
         a2:c5:f9:04:5b:e8:ca:73:1b:26:aa:77:8e:62:77:23:3e:fa:
         50:36:24:a8:67:3b:e1:78:52:bd:b7:3f:cb:92:ba:3c:b4:56:
         b9:83:e0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:45:14 2026 by rpki-client