Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f91819cd-a4b3-3528-b5cd-3ab4bcd75e20.roa
File:                     f91819cd-a4b3-3528-b5cd-3ab4bcd75e20.roa (raw, json)
Hash identifier:          VTdcJgr8ykc3pWuC2stAtFpO2remE8niRc6ly1TvRTw=
Subject key identifier:   5E:46:09:22:59:C0:61:04:33:2D:B5:FE:22:70:E8:31:17:84:CD:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D52439AE97DFEAB2E44410880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f91819cd-a4b3-3528-b5cd-3ab4bcd75e20.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7016
IP address blocks:        2603:301f:2500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:9a:e9:7d:fe:ab:2e:44:41:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=4c7d5f78-bfc3-4519-8451-1570ecf8d713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5c:0d:a5:b5:83:9f:4e:35:1a:a8:4e:bb:ff:
                    33:32:53:00:7a:c5:d4:df:83:f4:f2:ff:50:d6:6f:
                    cf:80:db:d2:20:f3:42:84:72:e4:88:6f:81:b3:7b:
                    2e:fb:e0:66:e5:f6:58:17:d9:86:5d:dc:18:65:eb:
                    e5:ba:aa:59:a0:52:99:90:be:00:ee:72:ca:5f:b5:
                    a9:2e:a3:ad:8d:d5:5d:e7:2c:1c:35:8b:8f:52:59:
                    b4:ca:e4:b7:90:2e:06:5c:01:2e:3e:97:73:83:b5:
                    57:65:e8:67:91:a5:c6:de:9a:a7:7f:a9:07:a5:2c:
                    e2:3c:b4:7f:ee:45:78:cd:c1:3f:5c:70:a1:95:63:
                    a3:3a:e3:d9:4a:58:e4:70:a1:21:60:15:19:64:3b:
                    aa:3e:c2:b0:46:96:4b:81:09:9a:0a:66:c5:60:f4:
                    d2:0d:8d:6e:98:ab:1b:2f:0f:47:42:6b:6d:0c:56:
                    a0:17:cd:59:c4:65:94:ba:4c:79:b0:37:10:71:60:
                    ca:89:65:ca:d0:b8:43:91:4a:c1:6d:bd:6d:ea:15:
                    2e:32:62:6d:6c:fa:cd:70:71:a0:fe:d4:80:ee:20:
                    bc:06:09:08:42:b7:78:68:25:87:44:a8:d2:fc:bb:
                    c2:56:0d:1f:ca:f8:b0:91:84:0d:c1:04:f7:f5:14:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:46:09:22:59:C0:61:04:33:2D:B5:FE:22:70:E8:31:17:84:CD:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f91819cd-a4b3-3528-b5cd-3ab4bcd75e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301f:2500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:aa:6a:fe:11:f2:2a:60:2f:f3:96:3c:02:ea:a5:5d:24:
         59:ef:80:7a:ff:9a:2b:c9:36:92:8d:0c:a7:b8:e2:bd:94:fc:
         f5:f1:d3:e4:9c:a7:90:29:74:48:b0:ed:8d:6b:59:12:3f:b0:
         ae:e2:ae:16:ff:79:ae:eb:81:90:77:f0:d4:56:d8:7b:4c:56:
         90:c3:db:81:3c:ab:b8:a5:e1:a7:a9:2a:7b:22:27:0a:84:78:
         ed:3c:4f:e1:9f:68:f0:ed:19:73:71:9c:70:ba:b9:34:40:e5:
         f6:e4:cb:9b:8c:2c:bb:a5:84:b7:80:71:80:88:72:81:eb:78:
         5b:b5:37:94:95:9b:96:cc:0d:6a:f1:7c:a7:f5:de:9a:c7:eb:
         d6:e8:ce:bc:74:d6:ff:a8:06:fd:24:04:80:68:ee:a9:eb:37:
         79:27:c4:a5:02:4b:b6:34:ff:d2:95:af:fc:f9:12:30:1f:92:
         95:80:75:4c:e5:c8:69:76:3f:55:ca:f9:d4:bc:c2:a4:25:1f:
         fa:fd:63:bb:24:2f:f2:0e:5d:fe:82:97:c3:89:94:37:a2:1d:
         6c:7c:41:70:67:5d:2b:ac:87:22:70:77:8a:cf:75:9b:d2:35:
         d1:da:18:4e:01:22:41:11:fb:98:45:b9:c1:e4:8e:e9:b6:11:
         03:79:d4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:59 2026 by rpki-client