Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87295819-93e3-3296-ba93-17abdf7a96f9.roa
File:                     87295819-93e3-3296-ba93-17abdf7a96f9.roa (raw, json)
Hash identifier:          BQcrSZHurX7hba2B5ZbHJHpQA6aeJfJFfIyYaR98Mq0=
Subject key identifier:   61:0D:74:9B:38:89:05:5B:85:16:0C:68:74:2E:E3:DF:6A:ED:51:59
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED43232F371C0F58F07145460
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87295819-93e3-3296-ba93-17abdf7a96f9.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     7016
IP address blocks:        2603:301f:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:32:f3:71:c0:f5:8f:07:14:54:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=71c6d346-938e-4eb4-b236-b66f0bde6910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:d8:d3:62:cb:23:f8:97:5e:02:09:ad:c9:
                    b3:59:d7:85:ec:ac:c7:4b:3f:9d:92:b0:0c:9a:be:
                    a4:76:7b:90:0a:4e:75:bb:a7:94:c0:ce:29:75:ab:
                    0e:d3:85:df:68:d8:4a:aa:bc:f2:23:7a:38:27:94:
                    9b:6f:f4:4d:60:a2:e8:0a:66:c7:65:1b:38:f5:1e:
                    3a:41:02:fb:14:ea:00:d2:17:6d:f1:83:05:81:64:
                    20:8f:f6:73:17:1f:74:21:33:68:e6:d0:f3:29:35:
                    62:1e:3a:3e:82:80:fb:66:13:76:4d:16:4c:dd:1e:
                    09:a5:1c:80:d1:4b:13:9b:66:19:10:59:0b:a2:49:
                    30:91:9c:be:fc:3e:33:80:0c:72:ed:1b:77:06:47:
                    3e:ec:c4:fb:e1:ef:09:20:3d:f7:b6:79:e2:8a:f3:
                    6d:cc:32:1a:d4:cf:82:f4:a7:75:04:7a:fd:ef:de:
                    29:06:6f:dc:79:ec:8f:52:b5:6c:18:7c:67:b0:af:
                    50:14:da:43:33:a4:f1:63:bc:04:4c:4b:04:46:bd:
                    9a:ef:d3:5a:81:ef:ac:7b:3c:24:ba:7f:bb:77:f3:
                    9c:38:ad:6f:ff:36:fc:e1:fa:cd:26:bd:1c:c2:d3:
                    ea:2b:5b:5b:b7:a1:64:0e:6e:30:b6:7f:fa:1e:65:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0D:74:9B:38:89:05:5B:85:16:0C:68:74:2E:E3:DF:6A:ED:51:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87295819-93e3-3296-ba93-17abdf7a96f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301f:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:5f:cc:90:8e:c6:59:15:13:de:4e:00:1d:28:2e:d1:df:c0:
         c2:b2:c9:ed:ec:54:c7:d2:64:19:60:95:9a:42:5e:38:5a:d1:
         86:f8:ea:3a:52:bb:8f:de:ed:38:d2:41:6e:eb:dd:37:89:3c:
         3c:b9:fa:ea:f5:dd:88:50:13:95:1b:f7:93:e4:ee:55:69:bc:
         90:b7:7f:e0:df:01:62:4d:08:d0:e0:c9:c7:bf:23:df:d0:c1:
         2a:6f:ba:f8:7e:f2:91:76:73:8a:52:cb:1f:96:e8:f2:af:ea:
         78:f3:a6:f9:e9:df:bd:ce:d9:71:bc:64:b1:e4:94:1d:fc:a5:
         48:bb:f7:2b:25:91:30:e7:37:7c:1c:d9:69:49:08:bb:0e:c4:
         94:f2:d7:1f:59:ff:e9:f3:ec:b8:65:b5:0e:f2:61:64:0d:c2:
         24:91:ec:94:41:a1:8b:20:e3:52:69:3b:41:d1:5e:df:8c:91:
         b8:5e:8f:15:09:37:7e:2c:75:ec:0b:c4:2a:de:d1:5e:65:e9:
         0a:3d:a8:00:38:0d:d1:d5:c3:93:88:d4:5f:cf:ce:5f:bb:d1:
         7a:e8:33:52:a6:6d:32:86:51:d8:46:b4:4f:b7:54:e3:45:dd:
         46:ec:fd:38:53:4e:42:54:f4:35:fe:6a:b8:22:84:42:0f:63:
         64:3a:5a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:42:37 2026 by rpki-client