Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115f12f6-a295-3933-9dc4-f5bb7ef16ba6.roa
File:                     115f12f6-a295-3933-9dc4-f5bb7ef16ba6.roa (raw, json)
Hash identifier:          ySc2bntPa9pDsmBaed+XUpPUjPVvzVozXYs4jfTRIpY=
Subject key identifier:   36:3A:5A:8D:CE:E2:A6:07:4D:20:12:04:52:DC:40:96:22:63:32:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B50279382F833C9118D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115f12f6-a295-3933-9dc4-f5bb7ef16ba6.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        2601:646::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:50:27:93:82:f8:33:c9:11:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=fbfcc128-d0a9-4522-a307-59936f1d5dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:73:e2:c2:45:a7:b4:2a:c1:b7:04:0e:32:d5:
                    e2:5b:e2:ec:cf:02:24:96:2f:5a:7c:05:45:c2:e4:
                    d6:e3:7c:45:3b:5e:d6:a4:ed:96:e8:0d:a9:b0:09:
                    1b:4b:ea:d5:2e:ca:57:9f:6a:d1:c4:3e:6a:e9:2f:
                    b9:54:15:8a:b2:85:b8:97:2e:86:b3:69:ac:06:db:
                    84:60:30:68:4c:29:c4:90:18:0e:51:99:27:3b:3f:
                    0b:5f:30:3b:2f:27:ed:6c:1f:e8:18:34:ed:33:58:
                    eb:b2:32:eb:23:b5:58:e2:a0:23:fa:c9:ed:54:2a:
                    fd:9f:3f:5a:5e:f5:75:92:23:54:c8:a4:e5:e2:cc:
                    c4:c3:93:f7:ba:77:fe:66:44:e3:2d:9e:bd:d9:3a:
                    82:a6:ef:9b:bf:4a:48:a6:9d:31:14:56:a3:78:02:
                    eb:ac:6a:55:e7:59:8e:88:43:76:63:b4:b8:19:1e:
                    e7:06:e8:d5:b0:f0:4e:b4:28:8b:b6:96:80:70:41:
                    7e:56:df:3b:42:e2:96:49:bd:0e:7c:2d:6e:05:fa:
                    38:3d:e8:80:61:20:ad:f6:5d:39:cc:ea:f6:b0:08:
                    6d:4f:aa:5b:28:3e:e1:66:9e:5b:47:62:52:09:a9:
                    86:44:7c:3a:3c:65:c1:7f:00:f4:4a:f4:c1:23:81:
                    28:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:5A:8D:CE:E2:A6:07:4D:20:12:04:52:DC:40:96:22:63:32:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115f12f6-a295-3933-9dc4-f5bb7ef16ba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:646::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:28:cf:22:20:a2:59:77:5f:91:61:0d:59:27:30:28:32:f0:
         9a:e8:25:ed:5c:48:65:ef:83:ed:1f:9b:ea:19:fb:81:e0:f4:
         4a:f1:ea:44:bb:6c:89:77:74:a6:a9:03:cd:c7:89:e3:56:c5:
         26:c3:3c:43:fd:ed:17:5f:2f:c2:5a:f4:e0:0e:0a:f2:3d:e5:
         7e:c7:f9:75:b5:76:ad:37:01:12:62:39:fb:a8:c6:0f:c5:8d:
         38:a9:64:cc:07:32:70:83:d9:bd:e6:51:2b:3c:bc:e9:42:4b:
         e2:97:af:4b:af:b6:71:7d:26:d9:13:2d:05:db:e3:f6:d8:cc:
         18:7b:e6:02:ad:5f:67:b3:46:46:e9:38:fa:e1:46:35:67:cf:
         1a:d8:e2:26:52:b3:c4:87:bf:90:7b:54:1f:d6:65:d5:86:2c:
         79:bc:a6:b4:15:3b:5c:da:03:21:b1:19:fc:0f:30:8a:24:b2:
         11:71:81:84:05:dd:a5:c2:32:46:d2:65:a5:71:d1:46:24:09:
         e6:47:6e:36:19:2f:d0:ff:9c:60:3a:e8:24:26:04:d1:d8:fd:
         22:b5:b5:34:f0:ba:8a:99:1b:5f:11:fb:a1:23:c5:5d:ea:69:
         9c:54:c3:0d:14:71:be:93:49:7a:e8:d4:17:ed:01:40:e8:66:
         02:6e:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:47:37 2026 by rpki-client