Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76c0b026-84ec-3aa3-8c47-b218c7f066f4.roa
File:                     76c0b026-84ec-3aa3-8c47-b218c7f066f4.roa (raw, json)
Hash identifier:          dHYPGQDSFHzSZXLsZjOmMfHeeGcXizbcXVp5+zZrzo0=
Subject key identifier:   03:F3:D6:45:65:1C:B4:52:C5:63:BC:8B:D6:F1:94:E8:53:35:E0:7A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3ABEDF0E6E6537A09BFB8A
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76c0b026-84ec-3aa3-8c47-b218c7f066f4.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33287
IP address blocks:        2601:46::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:be:df:0e:6e:65:37:a0:9b:fb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=38f10851-4d28-4b0d-a296-ae88b19c8132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:ef:e5:11:0b:2c:4d:d3:bb:41:61:ce:f4:
                    45:ff:90:6c:5e:81:9d:1a:20:30:49:eb:54:4f:75:
                    64:c9:69:59:ce:f9:b8:44:b4:d6:46:fa:e8:97:b2:
                    ac:cc:8d:3f:af:94:93:f5:c9:f0:13:e4:e6:0e:c6:
                    5e:2a:5f:a9:64:0b:63:87:d9:01:7b:9f:e6:23:57:
                    41:3f:dc:61:44:1c:26:3e:43:07:c1:e5:59:ed:87:
                    8d:ce:f1:7d:f0:f4:12:11:08:d3:86:86:0e:73:82:
                    23:b4:ec:a0:e0:93:15:11:81:6d:6f:6e:8e:89:9b:
                    95:7c:0a:2b:c4:8e:a8:cc:61:d6:f3:bd:ef:63:cd:
                    0a:3f:33:75:8f:75:77:67:87:74:b5:f6:4b:24:40:
                    ac:40:75:95:26:be:e2:77:5c:c8:67:88:45:e7:4e:
                    03:fd:77:f9:bb:96:27:0c:97:25:19:4c:b7:bd:f5:
                    d7:5f:55:d5:c5:c6:1e:c0:23:18:65:6f:9b:0b:59:
                    21:f9:12:10:41:77:3b:0d:cc:70:21:cf:e3:e7:85:
                    f3:6e:53:aa:82:2d:67:fe:21:a5:6b:9f:5f:d5:e0:
                    a8:66:00:d6:23:36:d3:35:7d:fb:e3:3e:d5:ce:01:
                    ce:a5:04:f5:5e:24:8e:dc:8c:c6:be:15:8a:4b:77:
                    37:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F3:D6:45:65:1C:B4:52:C5:63:BC:8B:D6:F1:94:E8:53:35:E0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76c0b026-84ec-3aa3-8c47-b218c7f066f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:46::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:54:dd:9b:a8:01:9b:7b:7a:68:83:05:37:25:d7:d8:4e:7c:
         8f:0d:79:67:14:08:25:2d:74:aa:7f:07:19:9a:ed:12:c5:a1:
         73:a2:6f:df:04:a9:15:52:91:60:30:63:83:36:d2:70:6a:be:
         8d:c4:0d:e3:30:b1:80:5b:d5:6f:52:6f:11:15:81:58:c8:90:
         2b:58:de:6e:5b:a0:35:22:fe:c2:de:c5:c5:1f:cc:53:41:53:
         2f:71:1f:a3:25:fe:e4:a4:e2:fc:a2:bf:97:7a:fa:a9:4d:51:
         ff:ee:1a:62:bb:b9:ed:fd:f4:3b:cb:8b:14:1f:c4:d6:4b:66:
         32:31:cb:81:52:89:14:97:21:73:95:9e:36:fa:18:92:9c:d6:
         d9:76:84:27:cb:aa:38:4e:83:e2:8e:3a:ed:6c:63:ed:19:85:
         32:81:2f:e1:56:7c:b6:77:0c:b1:0f:1b:45:fb:8f:eb:59:00:
         6d:00:21:fc:cf:47:35:a4:02:c7:82:d5:ed:bc:ba:cf:05:89:
         0e:78:b3:24:64:ca:b7:b1:68:f3:98:01:af:f2:bc:28:8d:4e:
         b8:b1:6c:9a:c4:ef:10:14:f4:63:cd:d4:2c:d0:0c:8b:f7:4a:
         c0:ce:74:95:a7:f5:60:8d:c4:b2:ca:fc:ba:57:75:a5:28:60:
         b9:04:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:48:24 2026 by rpki-client