Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0015dc7-5456-354f-8559-d90db662a257.roa
File:                     e0015dc7-5456-354f-8559-d90db662a257.roa (raw, json)
Hash identifier:          oOJPYeoS+kAA2uZ7qHbuGod6BgmtDAVRb73F6S2Ywu4=
Subject key identifier:   0D:9E:12:70:88:0D:76:4F:AD:5E:D5:02:09:7B:D7:83:86:BA:F6:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF6113B189C1E3ADC260480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0015dc7-5456-354f-8559-d90db662a257.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        2601:246:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:11:3b:18:9c:1e:3a:dc:26:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=028efd92-1dd4-4b05-a919-c6fdc3919630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:13:85:04:98:7b:5e:0c:b7:42:1e:70:94:
                    a8:b0:6a:f1:fa:79:18:5f:82:4c:91:da:3b:d2:21:
                    b1:5a:d4:dc:00:fa:9a:a2:1c:52:df:6f:aa:5a:ba:
                    56:66:90:75:7b:df:31:94:b5:2a:6f:ab:3b:6b:aa:
                    5f:49:5d:b0:c0:d8:cf:c7:59:d6:21:38:d2:7b:6c:
                    bf:9b:66:e2:8b:d0:4f:34:1e:2f:ee:dd:1c:db:e6:
                    0a:90:29:01:bb:7a:ea:99:8d:23:cc:91:55:af:44:
                    92:d5:a6:5a:8c:8d:21:54:7d:49:d8:a4:57:75:0a:
                    dd:3c:53:ba:18:9b:6c:66:ab:a5:82:b8:67:1b:cd:
                    07:16:d6:08:6e:6e:90:d6:03:ca:20:e0:cc:c2:dc:
                    2b:f0:5f:35:3e:04:3b:f5:fd:42:2d:7b:bf:b2:a6:
                    33:06:ea:5b:1f:e6:24:46:b9:f5:26:93:44:af:c5:
                    56:d8:3e:94:c1:3b:5b:28:73:50:34:42:e6:ab:48:
                    58:37:17:4d:c5:f5:62:4a:c2:e8:48:80:90:18:a7:
                    50:65:50:ed:52:99:36:5f:56:d2:c4:9a:ef:7c:0f:
                    7f:45:45:d5:ae:d4:14:ed:e8:83:33:88:84:d9:06:
                    66:97:b0:ef:a5:04:2b:48:24:0b:1b:11:e2:0b:fd:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9E:12:70:88:0D:76:4F:AD:5E:D5:02:09:7B:D7:83:86:BA:F6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0015dc7-5456-354f-8559-d90db662a257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:246:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:1b:1d:82:bb:23:9f:d0:47:dd:f6:7a:5a:02:de:0b:1b:c7:
         bb:da:c1:a1:f9:a3:bd:a7:25:a5:c9:68:0f:2d:81:8c:fb:3c:
         e6:41:0f:9a:05:2f:ca:3e:8f:00:6d:02:75:eb:d2:a4:9b:15:
         3d:f8:04:bd:e0:6f:70:95:c8:89:95:ef:25:4d:3f:f5:6c:3d:
         f7:71:dd:12:6a:36:35:81:e8:26:87:e6:66:f6:21:9a:f4:67:
         bb:04:4a:c2:99:a0:79:f1:b2:db:d7:b1:76:ae:89:38:09:47:
         3d:25:5b:6f:e1:49:01:fb:83:52:02:ee:a3:83:58:97:43:1e:
         3a:c7:24:47:d3:49:58:e1:67:2c:08:30:b0:2e:48:0b:fd:f9:
         eb:34:93:2f:94:d7:64:f7:20:dc:cc:2c:8d:5a:bd:51:62:76:
         d4:4c:d9:c9:57:59:c9:30:1e:d9:f8:fa:03:53:33:f1:20:1f:
         7c:65:87:b2:49:14:de:53:e9:d4:31:77:09:5a:81:eb:1e:05:
         66:97:2e:23:a0:4c:14:3b:7e:dd:4c:f6:40:45:86:b5:ea:c2:
         55:48:07:69:bf:c8:50:ba:b8:ad:73:72:6c:ca:a7:77:ef:da:
         b6:4c:40:02:be:a4:a2:45:9c:66:23:17:cb:ce:c1:bc:f7:ce:
         b0:fb:13:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:33:27 2026 by rpki-client