Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09ede2d2-8e58-3a29-8ede-e8fb8796c547.roa
File:                     09ede2d2-8e58-3a29-8ede-e8fb8796c547.roa (raw, json)
Hash identifier:          EQkChu9bFVDpZuM412zCA2tnx08OqgGVH28ywCO2R9A=
Subject key identifier:   9A:E6:F5:9B:98:C8:AF:FA:AD:42:A5:E7:7E:CE:C9:B9:B5:8A:AB:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E2D651DE5CC9393DCA3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09ede2d2-8e58-3a29-8ede-e8fb8796c547.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        2601:643:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:2d:65:1d:e5:cc:93:93:dc:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=244fa28f-0b25-4d6d-822c-854b3b0005ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:ff:f9:00:5b:4b:66:b1:80:43:cc:18:52:
                    a5:73:2f:7d:ac:e5:45:5b:12:ca:ac:7b:88:6d:54:
                    c4:e2:c3:7a:67:cd:2a:ef:4e:ed:21:10:32:5c:53:
                    dd:a6:5e:49:62:a0:a2:f4:3d:46:71:fb:30:17:90:
                    24:e6:5a:bc:29:45:7a:53:da:bc:9d:c0:b6:c8:9c:
                    d9:7d:f5:f3:09:8f:f0:14:2a:be:a2:1d:dc:9f:58:
                    93:db:04:d8:51:b8:be:cf:d8:b0:b6:ca:b3:1c:c6:
                    26:ad:1f:e6:55:cc:58:d2:66:eb:53:3f:62:1d:4d:
                    55:70:07:e0:de:4c:78:23:ac:7e:c4:50:b0:6c:b3:
                    37:d8:36:99:a8:58:78:a7:65:ff:8c:cd:a3:32:6a:
                    bf:fc:41:b4:36:fa:d3:07:0d:41:9f:c5:2e:31:33:
                    34:0c:72:d8:51:8b:31:66:14:b0:f1:3e:50:81:bf:
                    8f:2b:9b:e2:db:82:f9:2a:ff:5c:4e:2f:ff:1b:d9:
                    e4:0e:bb:27:71:8c:6b:71:f3:7b:cf:cb:33:d0:eb:
                    d0:dc:3c:92:6d:1a:4f:ae:05:96:a1:fd:d4:4d:ee:
                    bc:9f:cb:cb:55:b0:d1:50:d8:27:6c:b7:07:6f:46:
                    15:7d:8e:04:7f:61:31:ae:91:45:bb:71:7b:fe:85:
                    23:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E6:F5:9B:98:C8:AF:FA:AD:42:A5:E7:7E:CE:C9:B9:B5:8A:AB:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09ede2d2-8e58-3a29-8ede-e8fb8796c547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:643:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:a8:76:f8:2e:d4:e1:be:6c:5e:f3:74:91:ff:ff:29:9d:66:
         26:1b:70:df:db:5e:30:07:bc:19:a2:63:cd:3c:c8:4f:ce:66:
         8a:32:e9:1f:36:7d:c5:c7:de:41:61:6b:44:03:b0:78:20:23:
         05:3e:09:be:7b:67:2e:89:4b:a3:f9:c9:f4:4f:2c:37:76:aa:
         f4:23:96:60:ef:f3:40:be:11:9f:3f:fb:23:f7:62:93:3d:8c:
         e8:a2:95:e6:9f:a7:70:e9:8e:f3:c5:d1:1c:d2:11:fc:15:3e:
         8f:ea:5d:c6:be:8e:0d:c0:6f:cb:ca:48:61:06:6e:11:a6:81:
         fd:75:67:2c:37:8a:86:ca:03:cf:cd:1d:0e:b9:1a:f4:5b:4e:
         6e:6f:64:6b:32:ac:32:8b:a2:70:80:1d:d0:a7:8f:5a:78:ee:
         48:dd:54:99:11:64:8e:c4:cf:4a:dd:1b:ea:01:5d:40:40:9e:
         5b:ad:62:5f:60:4c:7a:eb:51:c8:8f:f1:ca:2d:ac:f6:d7:d8:
         ab:bd:8b:4b:9e:3c:38:79:62:c7:b5:ae:39:f6:da:14:31:fd:
         9d:e4:f2:75:05:79:b7:97:e8:0f:45:d9:3a:a1:87:63:2d:0f:
         a7:6c:0d:34:db:ef:29:0d:02:2b:42:50:83:d1:fd:d8:81:a8:
         fb:93:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:38:18 2026 by rpki-client