Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f97e0031-a0d3-3e99-a00e-73899f190687.roa
File:                     f97e0031-a0d3-3e99-a00e-73899f190687.roa (raw, json)
Hash identifier:          hEOWr05RcJ8fbwJun3neQvuhHA9tfp0eAgkTabZZdpk=
Subject key identifier:   9C:DB:17:05:29:2F:17:83:B1:FF:8D:23:2B:BF:AB:6F:79:65:80:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D524392D92F79EC0E9DAA2100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f97e0031-a0d3-3e99-a00e-73899f190687.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7016
IP address blocks:        2601:542:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:92:d9:2f:79:ec:0e:9d:aa:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=59fdbc25-2aa7-43ce-91e0-ba4f35d2bcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:cc:e3:1b:c3:73:b1:2a:1d:ad:a6:2e:5f:
                    c7:20:04:34:01:96:4f:59:20:3c:94:64:18:32:56:
                    da:5d:be:48:34:91:a0:0a:3a:4f:83:58:dc:ee:68:
                    ad:49:41:2b:a2:87:6c:26:e6:65:de:0b:37:c0:68:
                    71:31:29:e8:a8:47:5e:f5:0d:66:5f:f2:91:c0:fc:
                    82:1a:33:44:6e:c4:00:63:13:b6:14:d7:5c:e8:f5:
                    5e:8c:9a:79:28:07:25:62:18:ac:f4:47:ae:72:1b:
                    fb:f9:0d:33:6c:bf:23:0f:3c:93:2d:8e:bf:b2:ad:
                    64:f7:99:5a:8f:ec:04:57:5a:e6:9f:26:01:cb:6f:
                    da:d9:83:7a:b6:ea:0a:43:53:93:90:99:8d:b0:5c:
                    34:39:d8:cc:12:93:99:32:6b:3d:94:f6:a7:40:6a:
                    dd:3c:2d:96:fc:50:52:c2:0e:0e:11:fa:08:de:e8:
                    f0:11:82:27:62:44:ea:c7:79:a1:d1:a7:6b:b5:c0:
                    53:a0:84:13:7b:1e:d2:ab:97:4d:21:2c:65:88:84:
                    99:b1:70:29:ad:73:10:5a:d3:1f:d4:f5:2a:7f:c7:
                    10:eb:99:6d:e7:3c:ae:7c:94:72:3e:4f:96:69:53:
                    8e:e3:72:cb:f3:ab:2e:2d:81:55:b1:60:e8:6e:b2:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DB:17:05:29:2F:17:83:B1:FF:8D:23:2B:BF:AB:6F:79:65:80:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f97e0031-a0d3-3e99-a00e-73899f190687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:542:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:39:87:11:f6:a7:ee:9d:ca:2d:9d:40:9d:1b:e7:0f:8d:a8:
         47:ad:de:26:d1:65:c0:9b:4c:cb:43:d4:50:fe:26:ab:c3:e5:
         47:74:bf:f8:0c:57:bd:60:c2:e5:d1:50:00:31:15:e9:33:86:
         5a:22:51:b9:a8:63:a4:5d:cd:22:26:a0:e8:10:8f:6c:ac:48:
         67:93:3d:77:21:1d:f1:8d:57:a9:1a:c8:fd:f4:75:af:11:b0:
         d1:98:b8:b1:42:d0:33:11:32:3f:0a:fc:03:19:9c:ab:db:19:
         3f:cc:0c:44:73:4e:b7:d5:c4:07:10:c2:26:e1:98:be:6a:b6:
         10:2e:bc:2b:89:71:b6:7f:8c:bb:22:73:6f:ca:e4:c6:88:db:
         b4:30:81:dd:36:d6:09:d8:84:d8:21:7f:d1:c4:d7:7e:db:a0:
         67:95:86:98:63:aa:c6:01:1c:34:80:b5:b8:e8:11:25:7c:07:
         df:99:b1:ab:31:06:54:77:3b:33:db:c9:f1:7c:d1:90:82:01:
         06:28:48:87:ed:31:24:9c:e2:b7:9d:ad:6f:4e:50:9e:1c:5c:
         88:49:05:8d:eb:77:2d:e7:46:53:4b:df:fd:a8:97:04:ec:34:
         a9:46:1a:b5:aa:bf:2a:1b:3d:55:6d:41:a4:cb:5e:2d:32:2f:
         82:c8:a1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:08 2026 by rpki-client