Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6aad003-0b3e-3942-9bbb-e6e7933d1e94.roa
File:                     e6aad003-0b3e-3942-9bbb-e6e7933d1e94.roa (raw, json)
Hash identifier:          vKF87nn+Qf/BOTFU9PQ97vkln0XhH+LAsIlzg8/5EL4=
Subject key identifier:   DB:36:15:10:C4:E4:40:40:79:C7:67:64:45:D2:EE:E1:84:6F:D4:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF86AFF36D0A5970A515E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6aad003-0b3e-3942-9bbb-e6e7933d1e94.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33651
IP address blocks:        2603:2645::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f8:6a:ff:36:d0:a5:97:0a:51:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=651a1537-8c2c-4913-81fc-4a9fa1c8cebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:b3:65:5f:99:79:e7:ad:44:68:de:7c:52:
                    70:57:87:c6:3e:7f:2e:b8:be:20:27:eb:54:62:a0:
                    29:25:53:d7:63:81:80:72:df:76:f5:09:ae:54:77:
                    4f:0f:fd:ad:a2:38:8f:d5:86:5f:f3:6b:94:1b:93:
                    10:8e:13:7b:bb:35:12:6b:df:df:39:4f:f0:d6:46:
                    c9:75:c3:75:e6:c7:38:ba:3c:52:34:c4:63:cd:bb:
                    19:16:21:39:4d:15:2a:ff:44:1d:8d:09:e5:cc:80:
                    e5:1e:e4:5e:33:a3:12:56:a0:e9:88:c1:97:d2:87:
                    2a:b2:62:b4:ce:f0:4f:03:72:24:bb:14:6d:17:40:
                    82:cd:17:9d:ae:d7:f7:1e:e4:e1:1b:34:f4:b9:99:
                    c5:76:9e:5d:5c:85:ee:95:31:e0:22:78:90:9f:33:
                    ea:94:fc:f3:0d:76:df:0f:09:c0:ce:b6:24:29:1b:
                    32:aa:aa:b3:da:90:0a:6f:9b:14:4d:b9:fb:30:20:
                    a5:5d:64:e2:8e:54:7d:c4:79:3e:be:69:7c:df:94:
                    65:98:3e:f8:3f:ee:40:99:f0:5d:6f:2f:44:96:1d:
                    e5:b2:1f:75:f8:32:5e:d6:0a:b5:f4:43:76:dd:fc:
                    90:0c:e1:8d:22:6a:57:de:5b:3e:00:2e:c5:f6:df:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:15:10:C4:E4:40:40:79:C7:67:64:45:D2:EE:E1:84:6F:D4:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6aad003-0b3e-3942-9bbb-e6e7933d1e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2645::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:6c:12:40:23:97:37:80:01:ac:44:58:c2:81:19:f7:85:e6:
         0f:cb:a4:c0:83:d5:59:41:46:83:8b:f3:4a:3a:7e:8f:91:87:
         6a:dd:0d:88:c0:92:08:fc:8f:74:64:8e:5c:1c:b3:01:cf:ec:
         5a:71:e1:16:1e:82:b6:2b:61:88:ae:8c:48:67:59:e8:48:82:
         27:c0:c9:9c:c5:2c:8d:6a:54:af:8c:cf:f7:65:35:ae:b5:8e:
         28:ac:d0:a7:05:f1:12:25:95:de:2b:9c:fb:ef:18:11:ef:65:
         57:ae:d8:5b:8b:a2:93:e8:f3:3d:66:9b:73:db:47:58:40:78:
         e5:b2:fc:e0:96:7d:b2:fd:56:87:87:8e:f1:07:5e:97:26:e1:
         89:8e:9a:00:a3:53:44:51:71:da:44:d7:bd:c9:d9:56:a7:42:
         d2:e6:54:bc:f1:ef:b5:8d:11:da:9d:98:29:1d:4a:0e:01:58:
         dc:b0:26:44:c6:d8:cb:2f:e4:61:b4:c8:d0:41:f9:f0:c8:f0:
         01:e0:f8:e5:54:0e:a7:5c:dd:eb:41:2d:05:61:c3:36:e7:2f:
         99:f4:47:ec:69:3c:ca:a1:68:b8:9d:bc:b4:93:3f:94:5c:b8:
         3b:01:76:70:ac:73:0f:35:28:2c:80:45:cb:51:23:1e:60:6c:
         32:b1:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:13:36 2026 by rpki-client