Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5695f874-95a0-378a-a2d5-3427ef59997a.roa
File:                     5695f874-95a0-378a-a2d5-3427ef59997a.roa (raw, json)
Hash identifier:          ya9/nIgs6rwLCvyUz0lLhsuvcFMN7k+Xcwg/bDo6Km4=
Subject key identifier:   95:F0:C2:94:85:55:DE:E1:35:4E:E4:C0:E3:EB:17:54:40:6E:C5:95
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119DA3142225137C78643C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5695f874-95a0-378a-a2d5-3427ef59997a.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        2603:2805:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:a3:14:22:25:13:7c:78:64:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=821794b5-cef3-4a2b-817b-67e6b4d2624a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:f3:eb:db:06:d5:d3:6d:74:99:10:34:7b:
                    c0:7d:19:7a:48:89:6c:7c:a6:36:64:e7:47:ef:83:
                    1d:63:79:60:f4:9c:12:63:63:12:8b:ca:09:a2:ce:
                    ad:b3:01:c0:e1:5a:29:de:ca:fe:4a:9e:04:b8:57:
                    7b:be:cd:30:40:b2:04:83:b4:a6:0f:c8:d2:83:b6:
                    a8:34:c1:37:c5:e5:ad:8f:70:95:b2:3d:b2:45:be:
                    3b:a7:4c:95:ce:f3:ef:aa:56:8e:23:92:cc:92:32:
                    cc:97:14:8f:64:e1:9d:5c:89:a8:de:c7:eb:88:e3:
                    d0:6c:a6:bc:e5:b5:8f:60:9a:04:c9:0c:f2:df:89:
                    60:2f:b7:af:22:1e:04:4f:f0:00:2d:c2:da:90:bd:
                    29:bc:a6:a8:c4:09:ce:e0:a2:f1:a3:d2:54:67:55:
                    96:a5:84:34:6e:bc:db:99:a2:0d:95:96:13:af:5b:
                    85:40:43:d3:de:d1:39:65:eb:c6:70:a1:95:98:6f:
                    41:34:94:62:47:5c:1d:01:13:27:a4:05:e8:c8:14:
                    38:43:ef:24:20:54:20:46:6b:cc:4a:ef:29:9f:82:
                    83:18:0e:02:c9:a3:97:d7:63:42:d1:70:38:9c:4f:
                    7e:3e:3f:ed:8a:f2:0d:79:dc:5b:65:41:fb:4b:43:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F0:C2:94:85:55:DE:E1:35:4E:E4:C0:E3:EB:17:54:40:6E:C5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5695f874-95a0-378a-a2d5-3427ef59997a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2805:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:39:3b:87:7a:62:24:0a:9c:82:be:21:fc:a4:96:05:a8:
         63:d4:ff:1c:2f:95:81:72:a5:a0:9d:1f:a6:2e:bd:9c:83:e8:
         a9:56:ef:50:dd:f3:bf:31:16:65:36:3e:86:ab:a9:95:e9:2d:
         08:17:f8:2b:c5:fa:52:d6:f6:da:4c:91:03:99:fa:30:c6:6a:
         5e:a8:3c:fd:bd:e8:1f:d3:1d:bd:66:49:df:c8:d3:b8:26:3d:
         da:1a:2f:b5:57:e1:88:5e:a7:52:9c:76:81:5e:6b:3b:13:c5:
         2b:90:36:13:0e:b4:59:9a:ff:d0:ff:3a:cf:af:4e:d3:06:b5:
         a5:91:43:32:96:f0:c2:35:56:dd:ee:17:8f:d3:56:66:9e:ec:
         21:08:87:45:e4:2b:6a:e2:da:3c:89:35:fb:8b:9d:16:93:0a:
         de:c5:90:0c:11:bc:1b:b1:ad:10:e1:b4:cb:de:ac:f5:c6:c0:
         d2:51:b0:28:ce:79:86:b1:e1:8c:f0:a4:0c:fb:ed:de:48:b0:
         7e:1f:92:c3:0c:9c:30:c6:07:0f:77:ef:22:ac:8b:37:47:be:
         bb:47:12:43:14:9d:66:ac:37:d1:5e:b3:14:b7:05:18:8d:11:
         ad:70:c7:bb:a7:3c:d9:5f:89:24:3c:18:26:43:1a:8e:ed:52:
         51:d2:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:27:48 2026 by rpki-client