Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a53e874e-6905-37c1-a564-bf7ba1f2d3c9.roa
File:                     a53e874e-6905-37c1-a564-bf7ba1f2d3c9.roa (raw, json)
Hash identifier:          J+Vl8rjrVhKOfGBUdehVjqp3nOYt1FbT5oMmstrQAlw=
Subject key identifier:   F3:80:74:09:D4:3A:CE:B0:C4:7F:E9:7D:53:FD:1D:2D:80:18:92:3F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6144D04B7A2C4EAD4206F980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a53e874e-6905-37c1-a564-bf7ba1f2d3c9.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        2601:ca:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:d0:4b:7a:2c:4e:ad:42:06:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=633d1553-30e9-4547-a661-5f978b78caa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7d:b2:7a:68:1b:2c:49:cb:70:f6:2e:ac:8d:
                    1d:85:76:93:f3:cf:08:59:a2:6d:51:1b:5a:03:05:
                    31:22:9c:bf:49:17:b0:c4:6a:8a:40:3a:ee:7f:2a:
                    e9:fc:37:ed:41:27:4c:4a:60:0c:cf:fc:b7:25:ef:
                    60:a2:2c:ac:69:fe:e1:61:71:c9:2e:a4:b8:bf:36:
                    4a:b2:b3:9a:40:0b:5b:7a:23:ab:92:a3:29:1b:e4:
                    36:21:ca:47:3f:0d:2a:d5:f7:06:9b:48:d4:77:1f:
                    63:5d:88:e6:5b:6c:ba:42:e7:51:8f:14:88:fc:6e:
                    82:03:92:02:d4:b7:79:84:e9:0b:95:e8:90:8b:84:
                    5c:a1:a7:30:c3:28:98:ae:6d:16:7c:db:59:b9:39:
                    2b:fd:86:12:43:be:be:8d:63:ab:b4:19:24:a9:87:
                    46:3f:f8:6b:68:aa:e8:2d:ce:fc:46:2e:0f:0f:ce:
                    95:78:4c:e1:68:a4:aa:d6:85:f2:5f:c7:e9:70:ce:
                    2a:af:b5:60:be:13:77:71:ba:4a:e3:ce:40:eb:45:
                    fd:de:b4:bd:e0:9a:e3:60:1d:2c:c1:d0:1f:0e:42:
                    8e:9e:73:ce:44:fc:c1:08:bb:67:d3:27:04:98:77:
                    4e:4a:f8:e0:79:3a:92:64:e3:f1:86:95:73:14:31:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:80:74:09:D4:3A:CE:B0:C4:7F:E9:7D:53:FD:1D:2D:80:18:92:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a53e874e-6905-37c1-a564-bf7ba1f2d3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:ca:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a0:9c:13:7d:52:9d:08:51:46:51:02:60:67:e6:c8:6a:bb:
         10:78:39:cc:8e:1f:1b:39:42:74:8a:48:4e:6d:d3:e2:92:43:
         4b:0b:9a:c7:90:b1:ee:0a:58:63:8d:91:97:8b:0e:6b:8e:89:
         9c:57:8d:e9:49:b2:30:e0:ef:c6:da:54:5f:56:0e:50:49:76:
         5d:d9:78:ef:a4:34:83:ae:bb:58:2c:90:ca:85:3f:c5:e4:f2:
         3b:f0:37:ed:79:8e:53:02:85:aa:01:34:cb:5c:b6:0e:14:b0:
         51:02:33:4a:75:6f:14:ac:1a:ad:e8:f3:d5:e0:66:8f:4c:5c:
         6a:54:ec:58:d8:37:dc:09:d1:21:0f:81:eb:c4:8e:ba:8b:7e:
         12:b7:94:c2:a5:51:91:86:b8:a5:9f:c8:a3:d4:34:53:f0:cf:
         83:60:c2:0c:36:2b:bf:3c:f6:3e:02:11:74:af:f5:7c:15:ed:
         b6:bc:28:88:4b:1d:d0:95:ad:50:6d:7f:b2:f8:a3:9c:d3:74:
         d6:c3:a1:21:3d:a9:15:26:65:9b:d7:55:a8:89:c6:eb:e6:d6:
         a5:44:98:dd:1e:56:ee:69:8f:b6:c5:89:f5:7b:83:3e:b9:c3:
         94:91:c5:f6:61:a2:1f:f3:cb:1e:42:25:09:a4:52:ec:06:87:
         bf:d4:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:33:01 2026 by rpki-client