Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e6608e8-9a2a-32c8-ae8f-4480f7e68997.roa
File:                     9e6608e8-9a2a-32c8-ae8f-4480f7e68997.roa (raw, json)
Hash identifier:          SoaceXEs4HwlE3PIIRuTpqM1/N7KGk1pttrEiJJPJ5Q=
Subject key identifier:   72:75:E8:53:D2:05:36:87:28:C0:FE:43:60:34:A3:7B:89:F1:DE:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E31CF5156FE89BDFE40907C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e6608e8-9a2a-32c8-ae8f-4480f7e68997.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     22258
IP address blocks:        2601:3c9:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:51:56:fe:89:bd:fe:40:90:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=116f7efe-0d18-4be2-88d2-ed134a6be96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:32:e0:92:92:22:b7:50:d7:f4:6e:34:69:
                    17:ba:76:91:5f:ba:21:ea:0b:8b:4b:f7:d3:01:51:
                    44:91:da:78:0e:ba:30:9c:51:d1:16:c0:00:c9:1c:
                    85:b0:38:2c:f5:c1:2c:1e:a1:ea:85:52:08:31:6c:
                    ea:72:df:31:1d:62:93:b6:54:a1:2f:b0:d8:52:bb:
                    56:b7:07:63:cc:f7:01:c7:01:0f:2b:89:65:5f:e5:
                    42:d1:99:66:b9:07:f0:b3:c1:c9:b6:76:32:24:81:
                    b2:b1:05:a1:9d:9d:cf:45:c3:08:8c:34:e5:0f:5b:
                    ec:da:d5:51:96:56:a4:c3:9b:39:9b:67:f3:a8:8b:
                    ce:74:4e:43:c6:05:33:3f:a4:7f:fc:05:26:36:19:
                    35:91:2f:41:e4:0e:ba:90:c4:81:9e:a9:13:59:eb:
                    b0:e5:90:c3:07:f0:e7:ed:ca:f2:33:ff:ea:b5:36:
                    d4:77:01:2c:78:cf:05:df:f4:e7:a0:ec:0c:da:c2:
                    20:b9:6f:8a:25:9e:22:c3:e3:d4:8c:cb:d3:0c:5a:
                    37:fc:f4:ad:73:9e:a7:e1:01:7b:66:bf:6c:03:84:
                    fb:54:c4:85:94:59:5d:41:08:55:c7:45:23:25:5c:
                    50:1f:28:20:d8:a9:ba:2c:cf:ae:49:51:91:4b:42:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:75:E8:53:D2:05:36:87:28:C0:FE:43:60:34:A3:7B:89:F1:DE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e6608e8-9a2a-32c8-ae8f-4480f7e68997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:3c9:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:48:cb:f6:8c:32:05:74:98:f0:cf:09:0f:56:b6:c4:e7:cd:
         3f:ae:01:05:2b:da:e9:16:bf:e6:c8:52:22:4b:7e:6f:0d:0f:
         fd:d4:a8:be:df:56:c3:89:66:1a:c4:2c:a4:8b:45:89:94:95:
         36:cd:b4:4b:ea:e7:ca:f0:da:1a:48:b3:76:93:2e:68:4d:8c:
         48:f8:e3:f0:fd:2f:50:c9:60:8d:89:e0:54:68:4f:2b:86:c2:
         ab:ff:3c:b5:b3:ad:9d:15:d4:a7:71:ae:4c:25:2d:1d:f2:2d:
         fc:ea:8e:4e:ae:2c:20:f8:86:08:a4:6f:05:68:bc:35:07:ca:
         78:3e:50:f7:90:8e:51:c4:8a:86:fd:ee:2b:50:69:b7:1d:5a:
         fc:5f:fc:e1:ce:3c:b3:92:1d:4b:77:4b:a3:4a:4f:35:70:6d:
         0f:81:2b:72:53:b0:72:a8:8a:90:69:70:ff:ea:fb:99:b7:e8:
         a1:ed:a0:ef:35:e4:10:0e:42:1e:5f:8a:8a:0d:82:16:c2:70:
         b8:88:bf:9e:02:66:11:b2:5e:50:4a:b4:62:c7:eb:eb:fa:9a:
         f2:dd:15:07:7c:c2:e9:36:83:50:ae:3d:03:2e:02:c8:d0:83:
         87:f5:e7:c9:5e:05:44:37:93:8a:fb:c9:79:30:6c:12:2e:e3:
         a5:69:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:18:10 2026 by rpki-client