Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/424b9f82-7b89-3f57-ab53-09bf6dc8969e.roa
File:                     424b9f82-7b89-3f57-ab53-09bf6dc8969e.roa (raw, json)
Hash identifier:          YKllFEc3kx+pdFSfJBwWieNa3+YqGg5N02xxx1eMX4w=
Subject key identifier:   73:48:E1:6D:52:28:2F:32:3A:B0:A3:8E:F3:8B:D0:12:25:15:0D:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862352F7893EE4FA41C4580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/424b9f82-7b89-3f57-ab53-09bf6dc8969e.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7015
IP address blocks:        2601:18f::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:35:2f:78:93:ee:4f:a4:1c:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=9cbbb80f-89b0-4db5-b6d5-37844c43fa8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:94:a2:36:87:2f:a5:ac:0f:9f:b0:8f:e2:
                    95:a0:bf:ec:d5:2f:4c:b6:5a:f7:3f:80:61:45:ae:
                    07:ea:4f:87:f7:1b:a0:b8:fa:de:d3:ec:6f:5a:d8:
                    00:a4:ee:c8:6b:a2:b9:10:45:da:81:f1:9d:4a:8f:
                    04:f9:b4:44:dd:ff:f2:93:86:c2:1a:a1:a1:57:6f:
                    21:de:20:14:27:b3:0d:a3:23:1a:bc:3c:5d:82:ad:
                    34:1d:8e:cd:84:40:33:54:30:d5:a7:df:79:3f:16:
                    02:c8:07:17:95:56:34:17:71:73:13:0e:c0:ae:ae:
                    06:32:e3:b0:18:6b:9a:21:56:62:fb:de:15:c6:c4:
                    bc:28:06:5f:f0:0a:c3:73:fa:51:a3:88:de:30:75:
                    f5:7f:59:86:56:04:7e:8e:17:27:7e:64:c7:2b:7c:
                    99:2b:2c:db:67:4e:bc:ce:de:c3:a1:63:2c:ea:c1:
                    cd:10:f7:80:4e:1f:f7:81:34:84:08:28:a8:8a:12:
                    bb:8e:d2:cb:ae:fa:c8:a4:d3:a4:55:fa:47:44:ce:
                    9b:dc:94:41:27:df:15:3f:8d:ea:ec:33:c4:1b:bf:
                    5b:14:0e:b0:ef:0f:d3:00:78:1f:09:d6:54:10:e2:
                    c0:41:b8:4d:78:02:98:4b:7c:9c:31:b3:0d:c2:c7:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:48:E1:6D:52:28:2F:32:3A:B0:A3:8E:F3:8B:D0:12:25:15:0D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/424b9f82-7b89-3f57-ab53-09bf6dc8969e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:18f::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:fe:6a:aa:e7:21:03:76:b9:d5:b1:e9:27:7f:18:0e:89:
         fd:57:6c:b5:c2:8a:9e:74:2e:09:31:1b:61:49:92:4a:ba:18:
         40:51:4a:4b:38:0a:a8:4b:25:65:e3:a6:b5:16:80:1b:8c:cf:
         66:4b:cd:ec:cf:f1:b0:b8:0e:18:08:62:6c:07:7a:91:92:df:
         e0:3a:e5:fe:dd:2a:e8:e6:b1:bc:de:11:85:09:5b:b1:eb:6d:
         05:47:5d:ed:8f:a7:e7:02:5c:37:ed:f8:64:65:2b:fa:98:9e:
         5f:05:43:b6:a6:cd:4a:4d:1e:23:68:95:15:99:7b:f1:7c:64:
         99:d4:ae:97:c7:f5:de:6d:ac:3a:75:e7:1e:6a:33:b7:a9:5b:
         21:ee:b3:7c:ac:18:ef:2d:1a:fb:0a:ad:a5:50:e1:45:0f:b0:
         7d:df:d2:fd:aa:0a:6c:5c:1a:29:e7:9f:b3:89:a5:58:35:ab:
         ac:2e:51:ea:38:9e:44:0c:a4:31:d3:6b:14:cf:20:b5:c3:2c:
         19:29:0c:87:29:fc:22:8a:91:00:2c:a6:7f:b1:ba:d6:9e:0d:
         51:fb:9d:68:57:cd:bf:1f:7c:60:b4:96:6a:19:5c:7a:f1:7f:
         7e:66:9c:67:4f:64:30:28:dd:56:d2:aa:c1:08:4c:a1:e5:98:
         ab:a1:ad:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:32:56 2026 by rpki-client