Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9d8b142-4ba1-3e85-8463-ab05c8bc3079.roa
File:                     f9d8b142-4ba1-3e85-8463-ab05c8bc3079.roa (raw, json)
Hash identifier:          PN9OXh1wWGPNUg3Rl11rw7B+yxu/jeEv6A7w/8UHpWY=
Subject key identifier:   14:03:03:75:E2:53:61:0D:F9:41:3B:8E:B8:94:4F:AB:A9:AE:30:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CAE5A989501A3AAB011AE5340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9d8b142-4ba1-3e85-8463-ab05c8bc3079.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     33659
IP address blocks:        2603:2089::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5a:98:95:01:a3:aa:b0:11:ae:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=531e53f1-ebda-426a-9002-ff2ee290c031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:78:cb:5f:27:a7:6e:6f:fc:b8:2b:f1:29:af:
                    c7:72:d3:97:28:48:ee:fb:1e:ef:1a:c8:c9:69:a4:
                    ea:2e:16:d2:82:f0:a6:80:93:7c:46:55:82:47:5f:
                    67:08:f1:8b:ac:60:94:17:74:df:89:ff:51:4e:93:
                    cb:97:b5:8d:cf:ea:37:ad:f0:2f:0c:ce:da:a2:6b:
                    05:3c:4f:2d:f4:50:bc:0a:f2:d1:bb:1c:49:a3:76:
                    42:c3:bf:8c:29:29:1a:ca:c8:a0:cd:6f:66:5a:27:
                    97:ad:ef:29:bb:81:31:04:b8:33:94:29:06:6e:4f:
                    fd:49:fa:22:e0:83:40:aa:38:5a:e7:87:de:1d:05:
                    c1:a3:b5:46:18:30:b1:0c:e8:3c:e9:87:41:bc:81:
                    e5:9b:0d:5f:05:ee:ed:13:73:00:09:4d:3e:9b:fa:
                    0b:7d:dc:a1:78:0e:f1:5b:72:9d:cb:d2:ed:90:47:
                    08:7a:6e:78:8d:2c:4e:f7:c4:ac:bc:8b:92:c3:ff:
                    7e:40:9d:c7:b7:8a:4d:e1:6d:f7:2b:2d:18:62:b9:
                    a5:02:3c:84:58:ca:44:4b:08:ec:ad:4e:95:7d:c7:
                    8c:05:c1:db:71:87:11:1f:b4:a2:5d:c7:78:4d:6a:
                    3b:01:70:50:18:c6:ec:ef:a9:f6:c0:fe:74:0d:83:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:03:03:75:E2:53:61:0D:F9:41:3B:8E:B8:94:4F:AB:A9:AE:30:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9d8b142-4ba1-3e85-8463-ab05c8bc3079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2089::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:70:4b:e0:bc:eb:b0:94:81:c1:2d:e1:f3:c3:1a:d8:f6:54:
         e3:fe:80:03:7a:b0:c2:18:c6:08:4d:19:db:02:96:b1:44:91:
         ea:3f:5a:c4:82:6e:26:86:81:2c:f6:e7:48:70:7d:65:d5:26:
         71:0e:df:4c:94:3d:13:0f:d5:5b:1e:83:02:6e:11:b8:d6:da:
         8c:5e:6a:90:4e:58:52:c8:36:87:97:ca:40:68:cb:be:53:3b:
         a8:01:50:93:00:5f:8e:dc:55:60:51:5a:b4:41:31:91:cf:33:
         7e:8e:d5:a5:1d:fd:61:e1:a6:84:79:c6:a9:30:c9:e1:26:ee:
         ee:57:e3:44:18:58:bc:8c:ac:1e:2e:c3:31:63:2b:b6:d3:d3:
         b5:d3:fc:20:de:7c:ef:79:02:a1:3e:e2:a7:8c:5c:27:5b:2d:
         6a:63:5c:d6:b1:d4:44:cc:f7:d6:77:72:cc:c3:9c:d9:b6:2c:
         0e:23:21:3e:07:11:97:e7:66:fc:5d:35:8e:45:fa:24:21:2b:
         f5:4d:23:25:b9:2b:d4:77:78:b0:f9:ae:2a:6a:76:ac:37:b7:
         ce:87:16:e7:18:d1:0b:99:47:41:12:6d:ea:c5:80:e6:02:02:
         74:8f:9a:bd:3e:a8:47:84:49:1f:07:ef:80:2a:06:71:d9:d3:
         07:3f:79:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:41:01 2026 by rpki-client