Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/95a0d28b-e41c-3302-8c3b-2ff8f0354826.roa
File:                     95a0d28b-e41c-3302-8c3b-2ff8f0354826.roa (raw, json)
Hash identifier:          ETElDYs2KsCLDYh6qSkhyAx04qm8bHphq2R4/AFUL08=
Subject key identifier:   33:7B:6B:4D:90:98:3F:35:F4:D3:23:76:31:B2:0F:F7:37:35:AB:CB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E448B531EF2C96733C44500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/95a0d28b-e41c-3302-8c3b-2ff8f0354826.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33363
IP address blocks:        2603:903e:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:8b:53:1e:f2:c9:67:33:c4:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=84c99501-e86f-40c1-8155-fa85c1aa0549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a9:2b:5b:a5:b3:ff:d1:52:10:9b:cf:3c:06:
                    f5:24:6c:d2:16:1b:f2:53:39:5b:f4:07:48:23:3b:
                    e5:3a:3c:93:36:15:83:b7:0b:7b:62:57:39:7e:68:
                    9f:c4:17:62:15:24:3e:f7:c9:67:53:ec:ca:45:06:
                    e8:19:58:c8:7b:05:8c:ce:60:2c:91:7c:12:a4:0b:
                    31:da:b9:57:6d:27:3a:19:78:ec:cf:55:4e:cd:df:
                    66:22:31:25:81:42:d8:75:dc:96:ee:b1:9b:37:24:
                    f4:cc:4e:6f:37:42:8a:c0:fc:24:d3:ed:5c:17:38:
                    aa:80:96:8e:b8:8f:bd:59:13:d0:4f:6c:27:41:0d:
                    f3:13:8c:ba:cf:01:c0:21:40:b4:0c:89:f8:d7:3f:
                    c5:e0:8f:82:ca:3d:ca:55:0f:65:1a:9e:ba:78:64:
                    06:80:24:9c:73:e4:fa:f0:b0:23:75:3f:b8:3e:4a:
                    14:6d:5e:9b:b9:b2:ac:d9:90:2e:a0:d3:3a:ec:2d:
                    2e:4c:be:dd:85:0c:41:e2:d6:25:df:77:c4:18:33:
                    21:d0:8e:15:74:3f:05:e8:4b:a2:fa:fd:db:70:ae:
                    e0:48:f4:61:6d:6e:c6:17:2a:5b:19:c7:6b:4e:3e:
                    be:df:8f:88:64:5e:f8:91:63:da:a0:85:e9:df:25:
                    a2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7B:6B:4D:90:98:3F:35:F4:D3:23:76:31:B2:0F:F7:37:35:AB:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/95a0d28b-e41c-3302-8c3b-2ff8f0354826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c6:27:00:e5:bc:83:dd:97:7d:c2:04:93:ba:60:3c:60:d7:
         d2:27:50:56:85:df:f6:a2:37:3e:01:da:b4:17:0e:00:ec:3e:
         09:02:c7:01:9b:e1:df:28:4c:81:82:8c:22:7c:6e:3c:3c:76:
         23:56:df:48:09:a8:14:f4:61:b8:68:e2:db:d4:d8:c3:9d:08:
         f3:3d:f7:a8:3e:1f:fa:23:5c:63:3f:23:92:95:1d:c1:6b:c6:
         66:f6:2f:cb:9a:c6:bc:b3:ce:13:c4:4d:8c:d5:7a:8a:15:6d:
         bd:51:0c:5b:b1:97:8b:fa:88:5d:4a:cf:3e:78:b3:c0:a8:b3:
         70:16:77:fe:6c:9e:e4:a6:b8:9a:87:ce:c1:94:65:83:98:24:
         c0:da:e9:91:d4:70:d7:f7:e9:15:c3:a7:52:92:d3:42:79:9d:
         99:4b:f8:b3:48:41:12:68:47:94:ff:04:46:ec:ed:e5:64:4a:
         d3:f7:1f:7c:19:cb:b0:78:89:de:76:7b:5f:cb:c5:e5:d2:39:
         f7:30:13:01:3a:ee:cb:31:bc:c3:3d:35:cd:d2:87:ec:5d:8f:
         17:ad:96:05:46:c1:0e:15:53:f3:84:57:e9:23:5f:dd:1b:9a:
         65:95:b5:5a:93:21:e1:aa:95:da:47:33:78:59:1c:d7:db:b1:
         85:41:e9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:45 2026 by rpki-client