Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b87ac7d-d580-3b76-9d5a-84912b9c5d66.roa
File:                     0b87ac7d-d580-3b76-9d5a-84912b9c5d66.roa (raw, json)
Hash identifier:          4ccyZwMmcuCnMMmP+as9AM1eX0ChQEMG+wbrldyvf/8=
Subject key identifier:   AA:E3:3B:02:81:FC:C9:C3:61:C3:1C:95:A5:2E:EF:C1:3D:44:A5:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863D09CCB6FAEF7CDCEE2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b87ac7d-d580-3b76-9d5a-84912b9c5d66.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        2603:3015:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:d0:9c:cb:6f:ae:f7:cd:ce:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=46b6dbd7-bcf1-449c-ace4-b5d3da4a9e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:76:ca:30:47:92:20:2e:8c:5b:0e:28:37:
                    f6:92:65:45:f2:fa:00:40:9a:e3:82:f7:27:19:39:
                    03:61:0b:bc:aa:66:b5:99:63:fa:fc:07:67:bb:1f:
                    ed:55:67:11:0a:10:f3:1f:d2:e4:fe:01:01:21:25:
                    8d:7f:db:71:63:e1:9d:5e:27:b3:3e:fd:e1:1c:ac:
                    c6:0a:d0:4e:fb:0c:44:5b:04:e4:be:60:54:9c:3e:
                    45:d2:21:17:ea:84:c1:1c:d9:27:44:b5:c8:5d:19:
                    99:ea:a8:1f:63:b8:4a:ae:e5:1f:32:fc:b5:b5:10:
                    58:90:ff:99:84:ee:c0:bf:68:a7:7e:dd:ea:61:64:
                    79:e3:ef:03:80:83:ce:81:58:85:06:be:cf:31:e7:
                    e4:3e:c6:e4:a4:f6:e7:74:7d:14:79:dc:0b:8b:de:
                    e8:b4:bf:51:12:e9:06:a4:2e:ee:e8:f9:4b:bb:dc:
                    44:df:c0:c6:70:f9:7f:e0:bd:ef:78:51:54:69:53:
                    55:2b:fd:88:d1:d3:38:c0:f7:ad:15:4a:db:3d:3e:
                    07:4d:05:22:5e:33:55:7d:c1:6c:98:7e:f9:6a:30:
                    d0:2b:8f:ca:41:34:4e:55:db:29:f0:83:dc:bb:57:
                    53:6f:66:9e:a1:dc:54:65:40:e7:8b:8f:58:d4:b1:
                    49:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E3:3B:02:81:FC:C9:C3:61:C3:1C:95:A5:2E:EF:C1:3D:44:A5:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b87ac7d-d580-3b76-9d5a-84912b9c5d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:6e:7d:84:70:38:75:cc:2f:8d:47:98:c2:79:c3:e0:7f:
         9e:19:6e:59:b7:8a:1d:81:89:f0:29:ca:cf:83:0b:2c:89:52:
         e6:96:50:52:fc:b7:8d:80:fd:dd:7a:04:5a:c6:5c:d8:3d:e9:
         a5:e3:9b:50:aa:b1:7a:87:9c:72:c2:dd:c1:65:44:d6:71:69:
         6d:cf:44:8c:fe:2b:d3:49:ca:ce:29:8f:d0:e7:14:85:9f:59:
         c3:e3:fd:87:7a:d0:d3:20:ec:d5:67:a2:12:2e:07:66:d4:d9:
         5a:3b:77:f7:5b:30:90:8b:d3:72:ef:2e:49:f1:cc:ff:e4:7c:
         ef:66:2c:26:54:cc:48:c8:6e:8c:a8:8c:b3:25:da:a3:a7:c7:
         aa:5c:ef:e2:30:79:fe:0d:c2:7d:72:c5:30:57:0f:7a:7b:44:
         d0:97:fb:b4:b1:5a:e4:21:0c:45:7b:05:53:9a:fd:c4:29:15:
         1a:76:4a:bb:92:14:2d:61:2b:c6:fc:d5:a3:84:c8:2b:22:5c:
         d4:50:75:63:e6:dc:8d:c4:ac:e3:ee:5a:ce:07:58:46:10:ac:
         fb:6d:23:d6:42:3c:56:b8:d7:25:3b:b2:46:f8:78:cb:06:4c:
         97:9f:ee:de:51:ca:e6:72:04:a2:61:e4:f8:48:ef:02:d4:c1:
         6f:80:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 12:00:46 2026 by rpki-client