Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c55e529-7a71-311a-be9a-32a2f68795f3.roa
File:                     5c55e529-7a71-311a-be9a-32a2f68795f3.roa (raw, json)
Hash identifier:          BohqVAHCOj7B90SAyo0du1oFdWm7HQToBW9/+EZKGvo=
Subject key identifier:   C5:18:7C:CD:18:6E:FC:CF:9B:30:5A:70:82:D5:63:CC:76:AE:EA:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E5707981B0BD44D74EEC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c55e529-7a71-311a-be9a-32a2f68795f3.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        2603:240d::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:57:07:98:1b:0b:d4:4d:74:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=21207dd8-eb0a-4194-9fbd-fbe2641cff3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:ef:ab:83:11:ff:cb:23:89:d9:0b:17:31:
                    3a:83:1f:2e:64:19:3b:00:70:79:cf:dc:71:cb:cb:
                    bd:58:2a:4d:06:bd:4f:b1:e6:06:12:a5:f4:d8:e3:
                    eb:cb:41:2c:81:46:66:b3:3b:6d:f8:5d:e1:ba:11:
                    42:8a:49:72:28:a0:32:b1:97:ea:d5:be:17:9d:2f:
                    f4:74:6a:f6:c9:36:75:80:c6:69:61:c1:b7:0f:33:
                    fb:ac:55:d3:2d:16:90:1b:f7:55:95:8f:2f:59:51:
                    bb:a1:fe:85:13:5b:a2:e2:8e:4b:2a:34:fd:6e:f2:
                    b1:32:f5:16:18:b6:19:e5:ef:a9:c2:9a:f6:c4:85:
                    27:90:35:2d:4b:bf:57:6c:8b:0b:e0:83:9b:82:92:
                    35:0e:c2:30:5f:f4:99:82:26:c4:73:bc:14:72:50:
                    6d:0e:41:45:e7:ad:72:f6:d0:17:65:a6:73:25:92:
                    c0:73:2b:76:07:7e:dc:14:69:de:24:19:4f:36:f1:
                    69:f9:9d:10:58:83:95:eb:46:fb:8c:75:0a:cf:c1:
                    fc:d4:e7:d9:53:f6:45:e1:86:34:9a:c3:0c:35:99:
                    30:9b:13:7b:0b:88:5c:1e:be:1f:3b:44:73:69:a9:
                    49:56:36:25:2b:11:c2:ae:66:29:08:fd:97:8a:28:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:18:7C:CD:18:6E:FC:CF:9B:30:5A:70:82:D5:63:CC:76:AE:EA:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c55e529-7a71-311a-be9a-32a2f68795f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:240d::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:bd:97:52:31:3f:79:da:f1:9c:8d:64:6b:b4:72:ae:5f:
         4b:98:73:43:d5:43:96:77:79:7f:97:2a:56:6d:59:60:a1:07:
         98:76:e5:ee:e3:76:e3:8b:f2:f7:2c:c4:f3:aa:d1:9d:99:6b:
         42:ab:5f:3f:53:73:4a:2f:2e:05:72:c4:8b:1b:ab:47:54:5a:
         4f:94:e3:ad:29:02:07:09:cc:c9:eb:c6:74:47:08:cb:2e:e6:
         4c:fc:46:5c:b2:60:d1:60:14:1f:a6:2b:11:02:4a:2f:ff:de:
         f8:4e:94:80:d6:3d:ce:e6:d6:43:a2:eb:8b:1d:8b:0f:03:19:
         c7:e1:60:bf:51:cf:56:2d:ba:08:27:9f:5c:d7:3d:3e:42:18:
         14:39:b3:9c:de:d0:82:20:5d:c6:db:cc:3c:fb:9d:42:3b:45:
         94:4e:5d:c0:79:a2:08:51:3f:b9:f7:b9:5b:4c:b6:69:09:a5:
         be:fd:d6:68:5f:7f:ec:06:48:45:c3:81:be:ea:c1:e4:53:97:
         22:6c:2b:dd:52:fa:7a:be:f4:dc:95:22:53:9d:ea:77:3f:2b:
         4b:1c:2f:c9:e2:d8:8f:10:37:01:1c:ce:c8:3c:02:92:93:17:
         1c:80:b1:b0:75:1a:d0:e8:00:06:d5:48:ed:af:a7:09:86:9b:
         ec:83:e0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:57:39 2026 by rpki-client