Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ea1272-2c66-3796-aebe-2b899cab9ab6.roa
File:                     b2ea1272-2c66-3796-aebe-2b899cab9ab6.roa (raw, json)
Hash identifier:          xuiU1coJZLHympjIb8dRqwFhOos2ZvBH1WVsaEl6F4k=
Subject key identifier:   57:D0:25:D1:54:72:33:DE:54:F1:5A:8E:8D:15:04:17:95:70:8F:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED4320025623953A378559480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ea1272-2c66-3796-aebe-2b899cab9ab6.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     7016
IP address blocks:        2603:3007:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:00:25:62:39:53:a3:78:55:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=3ba55957-adbd-4cee-bb85-bebe10620524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:ed:eb:07:15:1c:ff:9f:26:3d:13:93:27:
                    83:c6:e8:83:8d:40:9a:2a:0b:93:76:81:1a:8a:41:
                    05:57:b1:4f:31:4b:30:44:2e:62:90:54:1c:77:d9:
                    f1:6f:e4:f7:6d:cc:22:e5:6f:a6:9e:b9:63:fa:3a:
                    a1:ba:b7:a5:43:a5:c7:1e:e2:0b:7d:13:3e:86:a2:
                    3e:51:f7:e3:7d:dd:63:02:e7:46:68:9e:41:e8:ee:
                    ca:fa:5f:74:26:ae:fc:73:7a:90:21:fd:52:a3:a9:
                    52:fd:61:52:bf:67:2d:77:ad:6b:44:dd:40:60:f2:
                    31:9e:19:3f:1e:a4:99:20:17:92:df:a3:41:0b:48:
                    3b:57:b9:c9:01:d5:3d:bb:d1:e1:13:71:7b:a0:ab:
                    1b:d5:95:19:58:a9:66:8e:72:90:f9:3e:fb:be:df:
                    0d:73:ae:1f:d0:db:bc:15:06:5a:66:77:c5:ec:62:
                    9c:fc:69:b5:3a:65:89:a0:07:12:5a:ce:b8:7d:57:
                    55:eb:8b:44:3c:1c:16:37:b9:53:24:c7:ca:4a:61:
                    96:17:97:c5:bd:ed:f8:0f:0b:f4:49:d1:ac:76:c8:
                    c8:27:c8:53:26:03:4e:d3:96:f2:42:a6:0c:7d:b6:
                    ae:90:f3:f7:6d:11:dd:b3:f7:54:74:4e:b4:70:f1:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D0:25:D1:54:72:33:DE:54:F1:5A:8E:8D:15:04:17:95:70:8F:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ea1272-2c66-3796-aebe-2b899cab9ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3007:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:63:a8:3a:bd:d5:10:74:a2:3b:99:ea:5a:7a:6e:41:bf:cd:
         53:ef:71:96:98:4f:11:09:4a:a8:24:77:45:68:ae:85:3c:b3:
         9c:fd:0f:98:08:11:fc:ec:9b:3b:50:88:10:bd:a7:7c:d2:ae:
         f0:bc:6b:51:58:9a:2f:57:44:fe:16:a5:12:53:5f:e4:b8:fe:
         81:94:0e:a2:71:4f:12:0f:59:29:4f:28:47:6a:8c:8b:af:1e:
         05:1b:44:51:1f:9e:12:df:b5:f7:ce:76:6f:9b:d3:9a:fc:65:
         cc:68:24:99:2d:d7:cf:f4:67:52:f8:6d:b1:d7:73:61:b4:29:
         cd:b1:13:2e:69:b7:d6:80:8c:3d:7d:5f:ee:6b:df:c5:bb:15:
         e6:86:6f:f7:87:48:b0:16:ab:fb:93:88:ca:02:63:05:c7:f4:
         83:17:af:12:0f:2f:79:e7:1e:40:ba:e0:3f:0c:34:ce:73:de:
         70:f0:cd:5e:6d:6a:86:1f:b6:e2:2e:29:43:2f:62:30:4b:28:
         a0:7d:36:5c:c6:be:e6:f5:fa:79:6b:4f:43:8c:f9:50:28:19:
         e7:d1:7b:11:95:39:4d:b8:fd:97:c8:0a:5c:d8:32:dd:e9:c8:
         bd:a4:bd:f1:27:ab:c6:ad:4e:b5:a7:91:25:a2:55:46:39:20:
         43:05:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:06:54 2026 by rpki-client