Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/525ed3af-fd37-337f-8455-6e4fb0be5bb2.roa
File:                     525ed3af-fd37-337f-8455-6e4fb0be5bb2.roa (raw, json)
Hash identifier:          5cHnxhlzCvvJRrK9ON77l8OqslJKk9lU59opbliugx4=
Subject key identifier:   60:17:B6:38:15:E9:C6:46:38:30:EE:AD:16:31:55:E8:30:0E:B4:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119F02BBA0E73BF8EC051840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/525ed3af-fd37-337f-8455-6e4fb0be5bb2.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        2601:807:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9f:02:bb:a0:e7:3b:f8:ec:05:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=9f3853f6-4ea6-41f5-99d2-c4e0a32b053e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:39:f8:61:9e:9a:2f:75:ad:ee:a0:bc:bb:
                    c6:ea:d7:dc:65:14:06:1f:1b:2f:aa:56:3f:49:de:
                    ac:d6:fa:8c:23:ed:17:0d:ac:87:9f:44:63:68:67:
                    1b:6b:cb:54:75:63:89:7c:e8:4b:73:14:d7:31:1c:
                    07:9e:ca:2d:43:a1:c1:ee:93:39:e7:1b:fd:7d:2b:
                    1a:fb:ba:c5:e6:50:92:1f:aa:6e:e1:a1:d8:56:a7:
                    9e:4a:67:b3:c9:37:02:1f:39:e1:c9:b7:59:0f:78:
                    d7:a4:bf:c4:0c:67:40:00:7d:94:d8:ee:e4:db:6e:
                    23:66:9f:38:cf:77:a3:82:88:b1:90:5a:bd:e6:ad:
                    d5:7d:49:58:bc:d1:65:ae:56:d1:d6:c1:32:cb:65:
                    92:78:81:c6:5b:b6:28:a0:f5:0e:99:02:cf:f4:34:
                    cc:c3:7f:46:4d:ce:6c:56:86:23:e3:3b:33:91:88:
                    17:0e:d2:ef:8a:80:ff:ca:ee:69:81:58:8a:84:9c:
                    dd:af:c5:6d:ae:9f:49:1f:a5:e2:bc:59:cb:c5:4d:
                    84:1c:f4:2e:ec:9c:0d:4f:3d:5d:b7:ef:8e:e0:54:
                    ea:08:14:76:80:ca:d8:d1:2e:9e:0a:6b:a1:18:09:
                    f1:7f:82:b8:ca:19:75:5a:4c:bd:e3:8e:f7:7d:c5:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:17:B6:38:15:E9:C6:46:38:30:EE:AD:16:31:55:E8:30:0E:B4:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/525ed3af-fd37-337f-8455-6e4fb0be5bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:807:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:7b:f8:16:be:d5:6d:7b:d6:2d:ca:a7:f6:f1:79:6a:c2:
         b8:91:f9:fd:53:e4:6e:06:42:59:84:dc:82:8f:77:2d:61:d3:
         44:7b:dd:e1:a4:6c:93:28:e3:eb:3a:5e:f6:13:e6:cd:2f:24:
         66:57:b9:0d:18:b9:55:43:c0:e6:c4:10:87:e4:0b:3d:e2:c8:
         e2:19:db:41:7a:ec:e8:64:16:59:86:66:2a:ea:c8:82:69:c6:
         76:b7:00:db:10:bf:1d:1b:74:d1:51:4e:61:0e:5e:4d:17:7c:
         6e:66:b5:31:9f:28:82:72:f9:46:89:61:2b:36:c2:f3:1a:41:
         eb:62:f1:e6:7d:94:91:17:31:be:09:00:f1:b2:12:c1:26:e1:
         88:ce:7f:b5:6b:3a:de:3f:ac:3e:77:3b:86:19:8a:78:f8:41:
         b7:87:59:8a:ac:03:14:fd:e4:83:12:24:d6:1d:f9:31:23:2a:
         a8:c3:bd:4f:0c:27:65:41:f4:dd:54:54:dc:ad:fc:3b:bd:32:
         e7:8b:c0:bf:bc:9f:87:8a:0c:30:9d:00:45:b5:4c:e2:a4:84:
         97:55:16:03:8c:57:63:00:39:e6:33:3b:9b:08:b9:db:f7:84:
         76:3c:ed:78:aa:20:06:12:d4:f7:88:dd:d6:a5:f2:c0:5e:9d:
         ed:92:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:55:55 2026 by rpki-client