Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc159ae7-553f-38cb-869f-6b18e52c753c.roa
File:                     dc159ae7-553f-38cb-869f-6b18e52c753c.roa (raw, json)
Hash identifier:          mpBgHtVYE1OWMnIGbobd1BZLFeYZX/an8GJek03iCsA=
Subject key identifier:   59:B1:4E:D7:47:D6:45:EB:69:40:55:69:99:0F:BB:D1:1B:2D:FE:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3D975380E3DC869E5FA400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc159ae7-553f-38cb-869f-6b18e52c753c.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        2603:2644:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3d:97:53:80:e3:dc:86:9e:5f:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=c2c55a13-e127-4a56-89f0-7d3d6827525e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:36:4f:74:3c:8f:53:f4:33:f1:cc:e4:d2:
                    bd:4e:07:c2:c1:1c:58:e7:de:30:49:20:a9:4b:c5:
                    18:fa:8c:f0:ce:14:5b:47:83:28:3d:45:3d:60:84:
                    74:d5:ba:7b:ec:f2:49:c6:fd:f1:ff:2b:7a:9d:1f:
                    55:84:06:df:77:f0:e4:96:8f:75:20:cd:e9:ff:76:
                    b2:4d:40:d4:ff:59:82:df:fd:30:6b:5b:06:75:28:
                    2a:20:a4:43:a4:58:45:49:a7:f6:c4:01:78:91:96:
                    04:9c:db:c9:f7:7f:3b:f4:d6:17:70:78:e3:35:54:
                    4f:0d:bf:a4:5f:68:81:87:b6:e7:d8:8c:4f:70:b5:
                    a2:9a:c7:7d:72:c8:06:f3:39:85:da:57:b8:7d:fd:
                    3c:aa:dc:05:7e:0c:50:79:b2:42:72:ca:2c:d3:e8:
                    27:f6:10:5b:a8:b9:71:01:c0:d3:5f:dc:5b:28:5f:
                    d0:bd:9b:37:5f:5e:51:be:de:ac:2c:16:17:5c:67:
                    bf:99:6a:6e:68:ac:bb:66:09:1c:24:9f:fb:f5:45:
                    a9:a1:31:0a:12:08:f2:d0:91:99:33:51:8f:db:0d:
                    29:8b:00:c1:9e:f6:67:29:b5:a0:43:dc:f5:ae:df:
                    9a:e6:f7:4a:31:49:fe:6b:72:b1:e5:32:26:f7:2e:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B1:4E:D7:47:D6:45:EB:69:40:55:69:99:0F:BB:D1:1B:2D:FE:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc159ae7-553f-38cb-869f-6b18e52c753c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2644:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:30:fc:ea:36:23:6d:f5:d4:a0:d6:f4:97:68:c7:f8:3a:fe:
         08:49:13:e5:74:2a:e5:cf:90:03:cb:94:ec:bb:4c:53:37:80:
         77:eb:62:93:31:d5:45:dc:e3:45:5c:78:11:4e:e6:51:21:dc:
         0c:ed:82:0a:37:fd:6e:d1:4e:a2:46:af:4d:24:b5:10:de:39:
         bb:4e:22:c1:7e:8d:b2:78:87:25:b9:5d:18:11:fd:80:c9:7a:
         d2:b3:8b:b1:c9:6b:50:54:99:c9:30:5e:7f:fc:21:1a:2d:b9:
         d9:c7:11:46:a4:f0:db:4a:a4:2a:1b:4c:74:a3:e5:f4:e4:61:
         c6:db:15:81:bd:fd:91:9a:96:99:0c:35:09:aa:f4:ae:b7:71:
         e3:ca:cb:3d:fd:ad:e2:f5:8f:13:08:48:04:74:d8:5b:58:7b:
         5f:33:f9:62:f8:3c:72:95:e2:88:42:a6:45:a1:f9:96:b0:a2:
         91:ff:4c:f5:75:13:ef:42:5a:8d:7c:4c:a0:e8:d3:19:eb:04:
         61:03:46:d2:90:fc:f5:dd:bf:ed:46:ff:fc:73:2e:3d:5a:f1:
         72:e5:8f:38:8f:0c:5e:9c:22:c9:1a:c8:c2:f7:af:63:34:35:
         e8:0d:d7:e1:cb:e1:33:50:13:e1:5b:4c:b2:16:be:50:05:ae:
         40:d5:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:13:36 2026 by rpki-client