Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/defb97cb-e3b3-3a45-9d87-2c56bfa520be.roa
File:                     defb97cb-e3b3-3a45-9d87-2c56bfa520be.roa (raw, json)
Hash identifier:          Nx1L1PCAMN1X2N6dyqi0/ho2TVxnorPF1ep1YtOh45k=
Subject key identifier:   89:AE:4C:6A:B6:07:BD:EF:30:FF:DE:41:9F:DB:C2:25:73:64:57:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6145295D51906D68DF7F7F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/defb97cb-e3b3-3a45-9d87-2c56bfa520be.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        2603:3001:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:29:5d:51:90:6d:68:df:7f:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=807378cc-2e5e-4a04-b773-279a569cb511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:5f:f4:d7:43:6b:81:18:c4:19:cf:dc:db:
                    cd:70:9c:52:77:a8:d9:ae:80:6e:5d:59:12:fb:a6:
                    01:6d:b4:26:f3:66:e2:92:a5:4c:05:84:ee:fd:96:
                    45:ed:73:2f:06:44:66:18:24:cd:e0:4f:01:38:a3:
                    a2:c3:40:b6:13:dc:73:aa:55:1c:28:0b:c2:13:52:
                    e8:aa:8a:6e:43:6e:d1:bc:45:12:b4:ee:d0:61:1e:
                    9e:97:5a:9d:e9:5d:cf:d8:ec:90:68:d8:0b:1a:f0:
                    a0:54:ba:19:a4:8d:00:7b:1f:24:f7:1f:aa:a3:e7:
                    47:10:0d:5b:cc:76:fc:10:7c:c3:1e:34:f0:bb:98:
                    8b:47:f1:91:af:e0:e6:a5:2b:18:61:b4:34:ad:d7:
                    19:07:2a:1d:f7:07:a0:cb:95:53:50:31:b6:8a:dc:
                    75:74:dc:f5:85:08:60:15:da:24:2e:a3:18:d2:3e:
                    9d:11:ee:1b:ac:b7:2a:8a:a1:d6:88:16:c2:1c:df:
                    82:d4:9f:05:23:36:e3:e2:b9:04:b4:c0:a4:60:97:
                    85:7c:29:77:f4:dd:aa:e7:19:50:e5:69:10:e6:8f:
                    a7:7b:9b:94:ff:55:4a:22:18:98:dd:13:a1:aa:2d:
                    07:5e:68:1c:d3:96:10:88:51:5f:a6:23:c9:56:ac:
                    12:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AE:4C:6A:B6:07:BD:EF:30:FF:DE:41:9F:DB:C2:25:73:64:57:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/defb97cb-e3b3-3a45-9d87-2c56bfa520be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3001:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9d:90:39:ee:d1:d2:90:28:3a:a3:d7:73:1b:06:b3:15:d0:
         2f:98:8a:e8:23:61:56:6f:82:3d:65:38:ec:1a:e1:94:29:71:
         92:78:ea:38:58:03:c7:b7:e2:fa:92:6f:8b:4a:dc:70:a5:e2:
         fc:e6:26:ec:81:89:1e:de:83:8d:8d:5a:a5:7c:08:1c:01:f0:
         9a:5a:66:21:3c:cf:dc:ae:c4:f9:92:e8:0e:41:ff:bb:3b:8a:
         5d:2e:c7:26:fe:0b:ed:6b:d7:94:f6:2e:c2:82:36:19:81:bd:
         16:0e:d9:f4:08:ec:7a:c9:10:0f:d7:03:c2:bb:cb:59:11:91:
         7e:01:7c:a0:19:85:8f:bc:f5:b4:4d:f2:d9:14:a4:3c:2c:09:
         23:21:f4:5b:93:83:36:88:87:d2:62:b8:b4:c4:9a:17:e5:c1:
         3a:44:9f:32:92:53:d9:aa:8f:63:a5:6c:b0:59:b7:44:b7:92:
         54:8b:ff:5a:d3:f4:42:ad:3a:07:1c:0d:0c:bb:d0:99:ec:15:
         9b:68:73:5a:f9:94:3f:14:d2:e6:17:6e:f3:b2:89:99:66:d8:
         3b:47:02:2c:86:bb:d2:92:89:08:49:14:53:b3:a3:10:2b:b7:
         13:32:6c:94:16:07:1f:af:0a:a7:8d:91:0c:da:a9:af:ed:ca:
         36:d1:5b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:19 2026 by rpki-client