Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667f74f6-4b2c-3e99-bd74-b34e8f7f1128.roa
File:                     667f74f6-4b2c-3e99-bd74-b34e8f7f1128.roa (raw, json)
Hash identifier:          eSTQJEfyWUCABDjToUQNkOg6cZSnbTJibNFe2pZdsfU=
Subject key identifier:   09:FD:01:A3:AF:EB:43:BB:F2:82:78:72:DF:B1:8E:7B:7A:84:91:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E31CF545D222500D5120C5480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667f74f6-4b2c-3e99-bd74-b34e8f7f1128.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     22258
IP address blocks:        2603:23c5:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:54:5d:22:25:00:d5:12:0c:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=a65c92ee-32f6-46bb-8701-8a60fbb3b416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:52:fa:41:12:ec:15:71:70:a3:26:c0:5b:
                    39:c7:4e:98:62:fd:bf:91:94:f3:ab:4d:37:bf:7d:
                    fa:10:5b:ce:55:06:e3:f3:e3:e3:48:b8:82:b1:b8:
                    dd:a4:2e:38:09:5b:1d:95:44:2f:48:23:b0:2a:dd:
                    91:95:d5:13:37:51:20:e2:d7:71:e8:24:40:58:a7:
                    53:cb:9c:17:5e:bf:dc:b3:64:ef:1d:c8:d4:de:22:
                    08:53:3d:36:16:f9:de:35:c4:69:f4:92:c1:90:4e:
                    ce:3f:65:87:43:07:60:8e:30:2d:dc:67:37:bb:92:
                    45:26:2d:c6:ae:b6:b2:48:41:99:cc:21:9e:e6:9a:
                    bd:37:ab:3a:64:6c:be:cf:ee:dd:22:43:9f:40:fd:
                    ef:f8:58:94:b0:12:d7:67:7c:fc:7b:19:25:f9:6a:
                    3f:91:a5:f1:48:06:22:e6:06:a9:38:31:83:41:03:
                    8c:5c:6a:f2:ef:31:c6:35:ca:a0:6e:37:ac:68:24:
                    2c:94:3b:4b:8b:d4:93:2a:a0:58:c6:26:7c:80:a4:
                    63:fc:82:33:36:5d:ad:b1:0d:af:fc:4d:7a:2b:65:
                    06:21:b2:25:7f:2e:5f:40:6a:6e:82:ef:00:df:ec:
                    c8:76:e9:22:57:28:75:5f:f3:54:b4:8c:86:23:6a:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FD:01:A3:AF:EB:43:BB:F2:82:78:72:DF:B1:8E:7B:7A:84:91:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667f74f6-4b2c-3e99-bd74-b34e8f7f1128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:23c5:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:85:f7:b0:7f:a1:af:1e:ed:a3:ab:86:a7:94:86:68:8b:1e:
         15:2a:81:e4:62:78:97:5b:06:2b:a7:ad:27:03:b0:5c:d0:ab:
         03:62:f9:15:86:ba:b1:e5:15:e5:57:46:24:ed:64:d3:f5:a3:
         97:46:24:be:85:2e:f5:ad:c7:07:d7:d8:11:d9:49:cc:65:25:
         a9:e7:a1:74:3a:89:8e:12:c3:57:91:d0:3a:13:de:ee:c0:52:
         23:f9:9a:71:4d:45:6a:41:3c:2c:d5:e4:54:ea:28:63:8a:da:
         34:88:9b:99:84:2b:40:d8:06:f5:be:e6:78:4a:00:d3:23:87:
         5e:0b:c4:01:1c:59:f9:2f:4f:a1:98:4e:36:b1:a4:83:0d:f7:
         eb:4e:29:7d:24:d6:74:bc:8c:43:c7:05:dd:f1:41:f2:78:71:
         83:95:8e:e5:6f:a8:c3:6c:a4:0a:cd:39:53:2b:62:f2:9f:23:
         13:3f:c4:b8:a6:cf:49:ea:e8:49:1c:84:e0:fd:aa:2b:05:c0:
         0c:7e:eb:b7:bb:71:0d:2c:84:23:f6:12:0d:1b:e5:15:4b:e1:
         5d:21:cd:fe:46:14:ce:d8:37:0e:83:97:19:91:39:67:0b:f2:
         3d:a3:66:0b:a8:7a:e2:cd:98:be:42:19:7e:af:14:e8:20:5c:
         cd:e3:40:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:18:57 2026 by rpki-client