Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/727efe7e-5476-39ab-810d-8485299e503c.roa
File:                     727efe7e-5476-39ab-810d-8485299e503c.roa (raw, json)
Hash identifier:          T+4g+2VxIXsVG6opKSkTw4X+LzCTmkRdZotmYq9VO8k=
Subject key identifier:   94:49:8A:DA:F8:FA:64:BD:59:4A:37:9F:DA:36:59:A8:DB:19:C5:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863CF3E12D9A65454B18500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/727efe7e-5476-39ab-810d-8485299e503c.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        2603:240a:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:cf:3e:12:d9:a6:54:54:b1:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=3eaabd48-9e7f-45ee-8e83-c6ab459210ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:c8:70:df:1d:c5:d8:65:32:be:b1:3e:30:
                    de:66:6e:7d:ef:90:3b:ea:9a:d9:fa:94:73:00:c3:
                    fe:6c:67:58:40:5c:5a:90:61:ec:7c:ab:b0:1d:70:
                    85:90:21:ca:d7:c2:33:22:30:3f:83:5c:d2:87:2e:
                    a8:f8:eb:09:67:d4:0a:03:31:ed:a3:fc:cb:6d:69:
                    df:b8:0c:a0:b9:66:b4:92:47:c1:d1:95:fc:48:78:
                    a1:40:49:b1:76:6f:0b:81:8d:22:cc:06:30:10:67:
                    66:29:10:81:82:ef:43:77:6d:b3:25:ff:d8:4f:7f:
                    28:7d:82:18:9d:bb:73:37:a8:51:88:27:7e:aa:b4:
                    55:2a:76:72:5d:be:89:ea:c9:30:7b:ae:be:6b:9f:
                    fd:84:8e:b7:02:79:99:7f:91:c7:be:5f:6c:b1:b8:
                    1c:c2:af:3f:66:56:f5:dd:53:3e:40:da:65:f6:a5:
                    0b:9f:c1:63:0e:0b:0f:85:bc:fe:43:e6:93:74:69:
                    76:b6:55:ad:dd:33:d6:9a:56:ca:c0:86:0d:06:27:
                    2d:86:6c:55:55:d8:ac:41:3a:af:da:69:5a:2f:b6:
                    46:49:b3:50:72:77:ec:7a:d0:74:c0:bf:8f:47:d6:
                    42:d1:cc:eb:aa:f5:e1:09:85:ec:a2:db:34:c4:ef:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:49:8A:DA:F8:FA:64:BD:59:4A:37:9F:DA:36:59:A8:DB:19:C5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/727efe7e-5476-39ab-810d-8485299e503c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:240a:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:35:7c:51:31:8b:ad:92:94:53:8e:8c:63:b2:24:27:db:36:
         0d:7d:48:c2:9d:bd:38:33:ac:c2:03:f6:bd:ec:4d:95:fe:ee:
         56:74:01:b0:4c:38:32:4e:a0:c1:bc:1b:54:96:21:ab:7b:5b:
         4a:2d:c5:4e:ec:ec:13:bb:db:dd:e9:f2:9e:3f:db:7d:8e:0a:
         d5:6d:15:af:3d:16:43:08:aa:c2:f2:b5:44:7d:31:20:4f:89:
         b7:7d:86:3d:e7:7f:ae:1b:1a:5e:8c:57:32:ce:1c:11:d8:72:
         eb:0c:97:cd:f9:b9:62:cd:82:99:7b:95:d4:34:71:fc:87:90:
         4a:10:34:41:3a:09:47:d6:fc:fb:95:d2:60:39:8f:11:24:b8:
         ca:83:96:ff:ae:11:e0:c1:83:5b:f6:71:2d:42:6c:ff:43:45:
         45:0b:e8:85:3c:4d:9b:d1:5d:ed:b3:8b:91:9d:a3:74:20:1b:
         2e:c2:bf:a7:14:10:ec:d2:98:e1:7d:7f:15:24:58:13:ff:67:
         61:89:85:ae:a7:2f:64:0a:16:3c:80:fe:b9:2f:d3:52:de:23:
         b4:50:cf:78:3c:aa:97:0e:ab:ec:18:0c:be:64:46:e9:27:c9:
         f7:80:b0:1b:0f:b5:48:b9:e6:b2:f0:96:df:d9:43:0a:54:6e:
         d6:6b:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 13:23:12 2026 by rpki-client