Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c55759c-7721-3dfd-9ab1-3e0c2440f66d.roa
File:                     8c55759c-7721-3dfd-9ab1-3e0c2440f66d.roa (raw, json)
Hash identifier:          Sy1lZ2jAAjIuWUhhHfSYaoq0XXPLECicJ4ivGIp3/Iw=
Subject key identifier:   E6:6C:E0:99:D8:8E:1D:35:FD:A3:4E:99:C7:FD:23:70:DF:A9:C5:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3D93E99C0A91D653C3BC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c55759c-7721-3dfd-9ab1-3e0c2440f66d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        2601:645:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3d:93:e9:9c:0a:91:d6:53:c3:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=75173a57-ebbe-4ee5-b1a4-4b270788ef01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5e:5c:d3:c4:ca:ff:d0:3e:f4:49:5d:f2:b6:
                    d9:f6:ef:32:b3:09:36:0d:24:a4:55:8e:7d:55:f3:
                    31:ff:69:db:1e:05:69:32:83:78:17:4d:fe:d2:f0:
                    b6:81:eb:bf:0d:2c:de:69:35:73:00:bc:99:5d:78:
                    cb:e2:24:98:8f:c9:fb:c1:cb:0b:f0:5c:c5:63:73:
                    3e:6f:9f:3a:93:27:d4:8b:c8:aa:46:74:51:15:ec:
                    ae:d3:36:4f:ac:68:b8:0f:24:45:b2:ba:c0:1f:fe:
                    05:17:c5:2f:66:57:33:aa:f9:99:05:9d:9e:24:3e:
                    21:26:1d:fd:7a:89:e2:7c:aa:80:c9:de:6c:8e:9b:
                    23:89:04:df:b1:de:d3:1e:b7:85:b0:86:34:03:ab:
                    21:06:2b:bd:fa:85:2d:c1:e2:06:e1:0d:b4:13:5d:
                    08:69:88:f4:5b:44:32:10:b8:0c:d1:fd:ee:39:34:
                    79:13:e2:65:08:c3:bc:91:26:aa:f4:8a:db:6c:0f:
                    f8:c3:bb:29:0d:55:c3:4b:be:f9:3b:f4:b0:db:db:
                    88:4c:4e:18:3d:fa:e4:6a:cf:81:6f:4b:0c:59:8b:
                    a1:f1:1c:cf:62:1f:66:c1:77:32:81:f1:1b:22:4d:
                    13:b3:89:50:3d:0e:7a:32:cd:86:f1:b9:93:8a:34:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6C:E0:99:D8:8E:1D:35:FD:A3:4E:99:C7:FD:23:70:DF:A9:C5:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c55759c-7721-3dfd-9ab1-3e0c2440f66d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:645:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:07:55:77:01:06:d4:82:26:8d:78:3b:64:a6:b8:78:ef:93:
         44:a5:e8:f1:f3:81:b0:fd:c9:df:7b:c9:70:32:e4:13:0d:25:
         6c:79:a8:cc:59:2f:1a:3c:6a:28:0f:30:9c:82:f7:f3:94:39:
         ac:48:4e:bc:31:1b:36:21:2b:80:51:bf:a1:1b:d2:4a:94:02:
         b2:31:7c:a8:97:68:79:f4:9c:1d:5d:cd:1c:9c:95:e6:02:f4:
         9e:9c:f0:58:63:33:6d:99:f8:57:04:ef:2b:38:d7:05:8a:8c:
         ec:f9:e7:ac:b8:d8:49:aa:c9:7c:94:6e:46:1b:d8:0e:f6:61:
         61:cd:6b:53:5e:37:67:3e:94:74:5f:3f:a8:fe:3c:7f:33:8f:
         6c:98:52:95:78:ee:81:8d:80:6b:b8:cb:af:42:3b:11:91:94:
         3f:24:c1:f7:b0:d9:b4:e2:94:ed:20:df:0c:76:6a:b5:85:5c:
         72:3e:23:a2:26:7f:d7:fe:dc:0d:ea:34:a0:48:97:27:26:77:
         bd:fc:dd:ff:11:6e:d8:80:50:6b:09:05:ec:02:f0:8d:1a:67:
         5f:61:83:a5:0a:d6:12:ba:17:9d:d1:09:a4:eb:b7:3b:a6:62:
         31:f9:54:5f:b5:89:ca:97:a0:d2:d5:e9:94:cc:42:95:9c:fb:
         88:6a:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:08:48 2026 by rpki-client