Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3d5fb77-a7bd-33cf-afde-26ecb1e1dafd.roa
File:                     f3d5fb77-a7bd-33cf-afde-26ecb1e1dafd.roa (raw, json)
Hash identifier:          pjQPMGxBgcQqlfAMlWVdaNwuGHvvaQRKjxdEoglRNkY=
Subject key identifier:   4F:43:17:58:D8:83:55:DA:F7:D7:7B:BA:36:C9:90:21:F4:F0:AA:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE58BC82672880A149DD8480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3d5fb77-a7bd-33cf-afde-26ecb1e1dafd.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33651
IP address blocks:        2603:3024:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:58:bc:82:67:28:80:a1:49:dd:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=a1e4027e-3938-404d-9c26-969b5f20f1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:1c:d1:ce:a7:ef:0e:aa:74:26:8d:15:ec:
                    a4:2d:c7:38:37:85:26:0a:b4:30:f5:df:54:11:d4:
                    29:c1:33:e8:16:37:3a:5e:df:40:49:8f:8e:82:e5:
                    40:59:20:0f:ba:e0:52:fb:33:e5:0f:e6:2a:b6:69:
                    bc:b7:91:e8:93:ae:05:c8:2a:87:9c:6f:b4:f6:69:
                    5b:d0:2c:b0:04:28:e9:44:a8:df:dd:ed:8c:9b:50:
                    ee:39:d7:5d:92:bd:7d:bf:cc:ef:a7:ab:c3:c3:c6:
                    55:13:b7:e8:20:fb:d6:24:77:aa:cc:f0:87:32:4b:
                    2c:43:b0:e3:d7:d3:ed:ae:e0:47:98:9a:63:de:db:
                    fc:c0:fb:50:e2:a6:35:4a:da:3e:3b:94:37:4f:09:
                    19:de:ab:81:82:81:7c:3f:7c:db:8e:8c:62:42:37:
                    4c:61:4a:12:f2:3f:b7:48:04:6e:e8:20:ac:ce:64:
                    d7:09:fe:f6:19:07:59:d9:4c:18:44:b8:8a:97:b8:
                    86:a1:38:f2:e2:eb:0a:14:eb:61:b3:9f:1b:b0:63:
                    a8:8b:11:4c:e2:01:be:c8:94:49:0b:0c:de:41:53:
                    84:f1:c5:70:a7:a9:fe:e2:6a:d8:bf:57:d0:b7:97:
                    f8:14:0c:8b:7e:75:7e:86:2a:14:b9:9c:b7:09:80:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:43:17:58:D8:83:55:DA:F7:D7:7B:BA:36:C9:90:21:F4:F0:AA:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3d5fb77-a7bd-33cf-afde-26ecb1e1dafd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3024:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:47:94:8d:e5:42:f9:c1:90:5f:6d:fa:2c:fe:82:a9:60:
         a8:aa:bd:93:74:8b:3e:46:7b:60:89:2b:ae:1c:60:19:b3:50:
         21:11:f1:8a:df:ae:34:36:ae:39:7a:63:f9:f2:f1:78:e1:2c:
         7b:fb:96:4c:c1:eb:06:15:5e:51:2c:38:9a:c0:9c:ec:26:83:
         02:94:27:98:4f:b0:f8:16:fc:ef:d4:88:b6:76:78:e3:38:a0:
         a8:13:e0:d7:d6:36:73:b4:f0:ff:b7:7b:8a:a5:04:0e:bb:39:
         31:6d:54:1f:83:1f:bb:d2:7c:bb:33:2c:b6:e4:ab:70:13:3a:
         8e:3e:3d:88:37:3e:5d:1a:83:8e:64:42:f5:fc:24:45:89:eb:
         6f:13:1d:0b:78:c3:47:2e:eb:90:16:5f:cc:14:ee:5c:99:45:
         93:69:1f:ef:8e:af:31:e2:a2:df:13:b3:bd:68:71:41:64:51:
         bd:eb:e2:fc:5d:21:a1:50:88:be:88:6b:fe:5e:b0:81:72:f7:
         0c:85:43:cb:b9:f9:66:59:a4:ea:42:98:d4:cb:91:d4:1a:b6:
         14:65:bf:aa:e4:1c:79:8a:64:b3:9c:71:f8:64:89:0f:c4:9e:
         46:e2:cf:34:31:4e:9f:19:2b:04:77:fd:79:5d:73:0e:e5:30:
         ab:f1:13:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:50 2026 by rpki-client