Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d715d85-6366-3607-b25c-138732004fa5.roa
File:                     7d715d85-6366-3607-b25c-138732004fa5.roa (raw, json)
Hash identifier:          8bssW8765AyixuDSTPkE6wy6EYS0WL2ZK9Id2hKKtsc=
Subject key identifier:   31:AF:73:52:5C:E6:C3:51:04:47:DD:EB:15:86:4B:0C:0B:7F:04:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E31CF56835F9750CBB4C35D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d715d85-6366-3607-b25c-138732004fa5.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     7016
IP address blocks:        2603:2985:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:56:83:5f:97:50:cb:b4:c3:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=0455ffa2-e7de-4076-a7aa-2289d3586cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:04:51:aa:97:d9:95:8e:f4:d8:c0:b0:33:
                    e8:51:bf:bc:de:1f:4c:5d:70:78:e8:b4:d5:bd:c7:
                    5b:82:f5:f4:15:c9:fd:b0:86:68:82:52:1d:f2:cf:
                    f9:3b:38:30:27:b3:96:4f:85:41:03:77:84:82:bd:
                    8a:ff:99:59:4c:d8:26:20:85:df:71:99:69:e7:2e:
                    27:a5:0d:93:af:0b:77:8e:4c:23:aa:08:34:f3:09:
                    10:19:6e:b1:9f:31:90:5f:9b:18:56:7a:8a:5d:38:
                    aa:a4:96:76:70:44:e1:52:9a:00:78:02:3a:d3:6b:
                    ac:04:68:50:a8:60:4c:a6:8d:b7:18:a7:3f:59:a8:
                    cd:20:cc:3e:21:30:73:03:ac:41:e5:da:99:7f:59:
                    a5:db:5d:b7:9a:b1:58:04:88:68:87:2b:97:08:74:
                    10:c2:a0:dd:05:68:81:3a:da:d1:6d:11:d5:5a:c0:
                    91:a0:25:b6:45:5f:7a:4d:1e:b9:47:4d:64:35:3c:
                    80:fa:10:2e:45:13:d4:a9:b6:32:cd:4c:61:fb:2e:
                    48:8a:66:8a:a6:3f:c5:21:cd:bf:91:5b:de:aa:8e:
                    06:b4:34:69:dc:e1:e8:4f:2d:8f:1d:a0:12:9f:9a:
                    cd:eb:32:c7:ef:b7:2c:0a:a2:ec:b1:f0:8e:01:2f:
                    18:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AF:73:52:5C:E6:C3:51:04:47:DD:EB:15:86:4B:0C:0B:7F:04:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d715d85-6366-3607-b25c-138732004fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2985:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fc:56:0f:be:34:20:63:b7:a1:ec:fe:84:ae:a9:47:fd:dc:
         07:23:cb:41:b4:a2:67:e2:89:b9:c4:40:a8:1e:b9:e3:c7:32:
         00:9c:50:a4:a5:f2:74:1d:a7:d6:06:dc:66:24:84:d0:f1:8c:
         75:ab:b3:59:f1:9b:a3:ec:f9:4c:c4:39:d1:4e:55:1e:97:5a:
         72:b2:ed:9b:1a:83:85:cb:de:b3:a0:9a:97:79:fb:10:2f:5d:
         ce:98:1f:e1:1f:8f:7b:fd:dd:4a:ff:58:33:e4:2a:1d:2d:40:
         72:74:46:a6:33:68:d3:21:f6:54:03:2a:d5:a0:ed:fd:08:46:
         e6:a5:4b:f1:59:39:30:9a:cf:52:9f:af:20:4c:57:cc:b3:a0:
         21:53:58:38:6d:62:86:c2:0e:96:94:34:2a:18:4b:0d:3c:eb:
         21:97:7a:e1:19:21:71:5c:24:dd:54:4e:ff:d5:81:87:64:55:
         82:d3:dd:f3:7f:b1:e3:1c:5d:d6:ef:db:99:c3:1b:52:1a:6f:
         d6:95:11:45:06:8e:83:c0:a0:95:34:e7:e6:95:ec:c6:70:71:
         74:bf:71:9c:c2:f7:e4:52:66:25:91:22:3d:04:ed:d1:b5:48:
         83:9c:5d:ff:e7:16:46:b4:cc:2e:19:6a:00:af:b8:16:96:75:
         83:c2:47:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:19:59 2026 by rpki-client