Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6828411d-7f74-36fe-8f1b-57356a0f4c7e.roa
File:                     6828411d-7f74-36fe-8f1b-57356a0f4c7e.roa (raw, json)
Hash identifier:          QfjMBX13C/mgOrZEIG08nO3y112PT78y3lWArk78fBs=
Subject key identifier:   DA:7C:57:25:1A:CC:E4:4A:7C:56:DC:3E:08:45:13:C9:53:F3:93:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4F8840FB7FB62F303B9180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6828411d-7f74-36fe-8f1b-57356a0f4c7e.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        2603:2405:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:88:40:fb:7f:b6:2f:30:3b:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=d176f796-4ded-4591-ba15-e1993f0f6603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:4e:6e:a8:03:17:b3:7b:21:7c:bf:0b:93:
                    9b:36:8b:30:f0:96:ef:70:0d:ad:e1:95:56:59:2a:
                    d4:19:77:b4:04:30:22:c4:d0:9e:6a:b6:29:5e:69:
                    5e:72:c6:31:9b:e2:04:0d:e2:ac:d5:4e:bf:36:28:
                    67:ff:d7:64:47:03:8c:d5:77:3a:c3:f6:67:ca:23:
                    4b:db:09:bb:f9:ca:77:16:66:c2:81:57:d9:11:90:
                    1d:50:19:8d:5f:12:19:7d:46:20:bb:7e:f2:56:b0:
                    c9:e4:b5:ff:0b:2a:3e:1b:ea:65:13:cc:d3:06:1b:
                    59:9d:6f:ce:c9:b8:24:06:89:7a:c2:93:a2:f4:df:
                    ec:28:c6:43:5c:ce:8b:a5:5f:70:56:88:4a:92:81:
                    16:3c:f9:87:99:f8:db:29:ac:ba:e2:0c:48:aa:6b:
                    82:0c:f2:dd:ae:2d:79:a5:87:2f:ad:4f:85:0c:e7:
                    23:16:72:be:6b:89:3b:aa:f0:45:e9:a6:a3:fe:29:
                    64:3c:bb:34:75:ba:95:51:dc:36:f5:00:ba:3d:03:
                    13:e2:31:78:86:3e:73:00:68:97:2f:e6:52:f2:68:
                    0f:76:c9:53:28:99:b9:9a:3a:bb:e6:0f:97:d1:96:
                    1f:70:09:45:10:3a:f7:18:f7:9f:d6:4a:68:3e:cd:
                    4c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7C:57:25:1A:CC:E4:4A:7C:56:DC:3E:08:45:13:C9:53:F3:93:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6828411d-7f74-36fe-8f1b-57356a0f4c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2405:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:76:95:dc:bc:44:51:50:67:55:49:1e:bc:73:53:8d:29:e2:
         78:ea:77:a3:6c:8e:f2:1c:2c:1f:8c:25:ea:54:f0:b0:cf:51:
         3f:42:3b:99:c7:6c:f7:06:00:20:81:3f:86:a3:b3:40:41:d4:
         99:4f:fa:62:9a:85:b5:63:d1:fc:65:8c:49:76:ce:9a:5f:16:
         85:b1:37:97:f2:4a:74:c0:5e:83:95:6a:c7:48:7c:ec:c9:3c:
         62:ad:7c:4d:f7:47:78:0d:ac:4e:b7:8b:90:2b:c1:9b:da:5b:
         93:a1:78:a8:5b:8d:98:ae:ee:24:d3:39:70:bc:7f:03:75:14:
         85:09:d1:fa:0b:01:83:13:d0:18:0b:64:85:f9:dd:f1:12:57:
         42:a8:fa:67:9c:ae:3e:15:e1:0d:bf:4d:f7:1e:cb:61:7b:aa:
         9b:71:86:01:ab:af:36:38:61:7f:7e:2c:aa:22:ca:bf:93:58:
         31:10:8d:11:7a:29:59:97:8f:4b:4e:c2:bb:6e:62:34:15:56:
         9b:d6:5a:17:55:ca:b3:bf:7e:bc:9f:71:86:f8:58:df:62:3f:
         ec:19:5f:70:ec:1f:11:4a:d0:2f:70:9b:3c:4a:24:5d:3d:65:
         16:ee:89:a3:0a:ed:0d:40:8d:16:c3:7f:33:8f:78:f5:31:90:
         d9:ff:7c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:17:35 2026 by rpki-client