Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed943e7f-f6cd-3f20-996d-76a2ce7c3eb4.roa
File:                     ed943e7f-f6cd-3f20-996d-76a2ce7c3eb4.roa (raw, json)
Hash identifier:          NuOqkt4b4U6Pa95PFkM2SoOKGApMDgvWGxAgxSaeyWw=
Subject key identifier:   42:93:3D:41:AC:58:A4:C9:FA:88:AB:DB:1C:BF:C9:55:75:42:56:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52436731C00879F37A3C4400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed943e7f-f6cd-3f20-996d-76a2ce7c3eb4.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22258
IP address blocks:        2603:3014:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:67:31:c0:08:79:f3:7a:3c:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=748e45d7-df0d-427e-a5c8-68a27df75818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:c7:37:a0:3d:c7:c6:90:ea:58:0e:69:5f:
                    0d:01:0e:ef:9f:9a:cb:b7:e8:8c:f6:11:33:48:62:
                    ac:b1:37:ab:ee:ec:9d:24:f5:85:4b:04:e0:8c:79:
                    ce:c9:e1:34:3f:5a:e2:64:6f:6b:e5:19:ad:05:9c:
                    ca:6d:0e:ef:7a:74:e5:8f:c1:35:fc:1c:0d:d1:78:
                    23:5e:07:cc:61:be:9c:f5:71:63:a3:45:b0:b4:a1:
                    34:35:ef:be:55:d6:3b:8f:01:ee:70:d7:89:96:2f:
                    57:16:7b:31:2e:8d:0f:27:d3:63:6d:7d:15:e5:42:
                    c4:50:f8:59:06:35:85:92:f1:f1:37:dd:f6:46:af:
                    91:5d:0f:7e:0b:63:94:e7:4f:65:fb:96:4a:ea:3c:
                    c7:d7:1b:a9:3e:5c:1f:0d:63:cf:1c:df:ec:f4:e5:
                    3e:97:75:f4:9c:86:e3:b4:6a:dd:55:ac:42:36:e9:
                    ea:19:ca:34:35:86:f5:70:56:0c:98:90:77:5b:f8:
                    61:bd:bc:f1:e1:f5:76:55:2f:9e:20:42:b2:27:6f:
                    ab:bf:02:f7:e2:c3:02:87:24:92:48:04:ef:27:72:
                    66:2f:70:db:d9:86:09:57:01:f2:43:e1:86:55:77:
                    a5:f0:5e:43:cd:d4:72:5a:49:a4:f6:4a:ee:3c:87:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:93:3D:41:AC:58:A4:C9:FA:88:AB:DB:1C:BF:C9:55:75:42:56:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed943e7f-f6cd-3f20-996d-76a2ce7c3eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3014:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:fa:4c:65:a1:99:91:61:fe:a4:9d:7c:85:73:09:cf:e6:82:
         11:27:22:85:44:30:85:63:aa:9b:e4:92:1e:fa:26:20:36:32:
         d8:9e:99:8e:ac:40:6e:7a:91:19:85:db:05:58:ef:bf:12:6d:
         73:fd:bc:de:8a:4c:e1:49:a7:27:52:90:88:b6:47:3d:b4:19:
         ad:15:2d:f0:3e:e0:d2:04:eb:f8:1f:ac:17:1d:e7:14:24:13:
         3c:4e:53:8c:95:86:8f:64:36:c5:ab:22:58:aa:e4:c6:5b:60:
         77:1e:e3:97:de:86:65:2b:6d:cb:27:0c:30:99:61:c4:dd:f2:
         cf:2c:28:60:3e:7a:74:00:39:47:d7:7a:72:27:59:e1:99:32:
         1e:d1:6d:7a:f7:1b:8a:bf:ed:72:79:e0:61:41:9d:8e:96:d2:
         e2:95:5c:20:9b:f4:da:5e:87:5c:53:98:c0:d7:ef:f0:ac:71:
         ce:f8:17:58:32:59:4e:3e:d7:76:a2:7f:19:e1:9f:25:36:d7:
         ee:79:6f:c9:2f:cb:c2:4f:f5:20:8c:d8:17:d9:4b:de:4d:ce:
         c1:7a:49:95:d5:9f:5d:7e:d6:cc:13:18:63:a8:42:e0:0b:54:
         5c:b3:bf:22:f2:cc:d8:bd:83:8e:a0:e5:a1:cc:81:dd:7c:fa:
         be:87:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:03 2026 by rpki-client