Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff486be0-e24a-3668-a27c-4d0bfab58bfc.roa
File:                     ff486be0-e24a-3668-a27c-4d0bfab58bfc.roa (raw, json)
Hash identifier:          Jz5yKCDFWRDlADc6T5SHSkSKm92jzAQlM+oftYFGKCI=
Subject key identifier:   B3:AC:BE:C9:68:4C:68:D6:D8:CB:C4:0E:09:E9:4B:8B:BA:1E:E0:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBC715D76D25E9980EB380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff486be0-e24a-3668-a27c-4d0bfab58bfc.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        2601:190:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:c7:15:d7:6d:25:e9:98:0e:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=968ee253-5b0c-4a29-b42a-155f41eb2df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:16:30:bf:54:0e:5e:3e:1f:0f:ce:8b:e3:
                    13:b2:a7:0b:a3:4a:75:74:d9:a9:42:09:a2:47:7f:
                    29:f1:a6:59:8f:5e:1c:a7:15:20:4c:06:5c:9f:3c:
                    27:86:10:32:9a:2b:73:67:1d:4f:de:33:eb:24:d2:
                    f2:9a:5c:c8:12:1b:87:27:cd:4e:3b:88:b4:a8:e0:
                    34:03:56:9f:41:f8:75:69:40:84:98:cc:55:3d:8c:
                    c4:10:c3:a9:f2:2e:70:88:87:c4:ce:01:a6:55:70:
                    70:a8:0c:f7:f5:74:bb:b9:e2:c7:8f:5f:c1:8e:98:
                    c7:a1:5e:65:cb:03:7b:61:b2:98:87:1c:3a:60:bc:
                    73:30:0e:de:16:33:1b:b8:54:04:7c:3c:bc:66:9e:
                    d4:f2:e2:d5:87:41:51:9f:48:1e:d2:ca:a4:ef:88:
                    80:99:d7:e5:27:a9:1c:eb:4a:28:80:2b:5b:56:2c:
                    63:f4:a2:83:71:ef:39:18:0f:ef:38:9e:c3:41:09:
                    97:a4:6e:ee:2e:61:04:f3:18:6b:1c:03:ea:f7:90:
                    95:7a:7e:32:28:0a:1f:c9:23:8d:20:a5:0a:df:6e:
                    92:af:73:45:ef:21:96:0d:89:2f:f6:ed:22:2d:e5:
                    30:44:9c:86:d9:89:59:ea:4b:eb:b3:fe:5e:3f:21:
                    60:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AC:BE:C9:68:4C:68:D6:D8:CB:C4:0E:09:E9:4B:8B:BA:1E:E0:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff486be0-e24a-3668-a27c-4d0bfab58bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:190:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:67:0d:ee:02:96:13:69:be:9b:92:aa:2e:e6:80:6f:53:ac:
         64:bf:0e:86:b7:51:7a:f2:9f:5d:ae:34:dd:25:d2:ea:4d:ed:
         12:81:43:eb:60:d8:0d:3c:29:d5:a5:ae:97:ba:b9:50:17:17:
         53:e7:f4:cd:13:a3:15:74:43:00:cc:9c:a2:16:12:ec:aa:f0:
         88:07:1d:ec:8d:1d:40:31:1e:13:bc:ee:33:f0:d8:a0:63:ee:
         97:44:4b:fa:87:70:8c:e3:80:68:5d:06:12:e1:3c:01:7d:ed:
         b4:20:b2:c9:cb:4d:01:af:ea:7b:a1:88:66:38:d3:cf:f8:8f:
         f3:d8:b8:d2:e5:ce:ad:02:4f:f9:df:62:38:e4:81:64:9b:3c:
         cd:29:dc:6a:32:5f:38:de:94:50:b0:31:bb:06:68:0c:a0:1c:
         32:02:69:82:2b:ae:cf:64:ec:d8:4a:64:bf:89:9b:4d:be:26:
         0c:3d:62:fb:86:bd:25:36:a2:6a:bd:01:20:e5:c5:99:39:53:
         dc:bf:69:71:30:86:8d:51:13:fc:42:64:7c:ab:fc:23:fe:fa:
         f4:c4:65:03:13:cf:a1:20:df:1c:b0:41:8c:94:14:fe:4b:f0:
         dd:4b:5f:8a:12:a8:30:75:d4:f6:94:ae:a1:74:e4:57:e1:87:
         f6:e3:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:05 2026 by rpki-client