Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/522ee2eb-3cf4-3115-81fa-326bec8644f5.roa
File:                     522ee2eb-3cf4-3115-81fa-326bec8644f5.roa (raw, json)
Hash identifier:          ms7DHqTBouVblX3/CFATgZ3BMyCQS4Or9/rUOT0J6dY=
Subject key identifier:   56:53:EA:F4:6B:D5:52:E0:D6:07:5C:01:0C:12:33:5C:7F:F6:3A:14
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863CEBBFD21A56EDF7AB800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/522ee2eb-3cf4-3115-81fa-326bec8644f5.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        2603:2405:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:ce:bb:fd:21:a5:6e:df:7a:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=3b6d795c-699c-4e88-8daf-9eac3d7026c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:07:36:a6:f4:d3:3d:4d:09:4e:34:7c:96:
                    56:26:e0:b9:b2:dd:74:6e:f5:33:c6:c3:88:34:bb:
                    63:f7:ab:ad:65:06:6f:7d:7d:d3:23:ba:08:f4:a1:
                    8e:fc:d3:81:e8:1d:f2:51:c3:47:94:6a:f5:6b:6b:
                    c4:61:31:76:31:ec:df:69:81:5e:62:5b:46:e1:1c:
                    08:f4:4f:cb:67:c4:9a:f9:1b:c2:d7:f6:e7:d0:19:
                    cc:e2:55:c0:d3:58:7f:47:a9:2e:31:d0:c7:5e:7f:
                    2b:da:03:27:7e:2f:63:b7:11:07:66:c7:9a:ab:06:
                    7c:e4:fb:db:3f:97:13:23:11:fd:c0:d3:d4:d1:29:
                    ab:29:76:75:67:ce:9a:8a:df:24:d6:69:21:86:b8:
                    27:53:36:42:70:37:80:c8:4a:74:77:b6:29:c2:a3:
                    35:dc:d6:f7:c1:79:fd:07:02:5c:9f:8b:da:a5:c9:
                    95:4f:f5:3e:9b:b7:26:39:30:0e:c2:75:13:1e:18:
                    b9:2e:08:90:85:e7:59:02:b2:39:cd:99:05:0c:60:
                    54:22:33:34:ca:c6:53:04:e9:01:d0:9f:5b:27:e8:
                    7f:ba:db:6a:c4:ef:bb:79:6d:77:ef:df:f0:91:6f:
                    39:f8:e4:d8:d5:05:86:35:c8:3f:d1:8c:bf:e1:6a:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:53:EA:F4:6B:D5:52:E0:D6:07:5C:01:0C:12:33:5C:7F:F6:3A:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/522ee2eb-3cf4-3115-81fa-326bec8644f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2405:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:69:dc:5b:c9:e3:60:4f:08:e3:09:b7:b2:2b:4a:27:3f:1d:
         61:18:4f:3e:42:13:bf:a2:7e:03:02:c5:fa:75:3f:ed:77:94:
         c5:b0:d1:89:f3:99:19:e6:e4:4c:36:73:16:11:c1:42:b3:d0:
         eb:60:be:6b:2e:01:27:a8:82:bd:cf:ee:a6:b4:cc:dd:cd:bf:
         1e:29:b1:59:19:80:32:3e:60:af:c4:d3:5c:19:fd:67:77:d9:
         aa:3f:0c:2e:ad:1e:57:d2:df:ee:1c:18:1f:d3:c0:e8:a1:5b:
         5f:5d:95:a3:8b:59:2c:d0:cc:55:77:1d:7b:30:b8:f9:4c:38:
         fe:22:36:94:66:fd:8c:4e:39:60:29:3a:41:4e:6c:cd:8a:c5:
         4b:1a:68:38:0d:06:4b:e6:69:00:05:48:22:00:07:48:c0:02:
         05:fa:32:0f:d6:21:5d:c6:e3:26:40:cc:c7:6b:63:91:05:82:
         ef:c0:89:0f:4b:72:e7:a9:7a:ad:74:d4:92:cd:a6:60:6d:5a:
         33:44:ab:76:c3:46:06:fd:05:83:12:cc:61:32:e5:0f:d8:58:
         78:a5:bf:04:fc:f4:43:79:3f:b9:2d:f7:84:21:af:39:94:ef:
         3d:90:8b:b2:79:24:20:9c:f1:54:78:4b:3c:bd:b6:4a:89:80:
         d3:83:16:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 12:36:30 2026 by rpki-client