Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a5f64a2-6178-3b02-95a8-3b3be3060ea1.roa
File:                     1a5f64a2-6178-3b02-95a8-3b3be3060ea1.roa (raw, json)
Hash identifier:          unC6EP2yVeLjQGxXlmVx+9+i+K/06kBkqSxhr/dxjWU=
Subject key identifier:   A2:B8:C9:0B:DD:26:FE:07:B7:99:A8:46:DF:F2:D4:FE:4B:2B:3C:10
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A8029D0963495B9926D400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a5f64a2-6178-3b02-95a8-3b3be3060ea1.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        2603:20c5:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:02:9d:09:63:49:5b:99:26:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=3b5a5f22-265f-4b69-baef-adff14b6291f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:da:f8:5c:9a:fa:5f:19:de:c3:d6:a7:b7:ee:
                    ef:a6:e4:2e:62:51:d7:4c:7b:b1:72:d4:37:d4:66:
                    4c:01:20:2c:48:2e:82:4b:90:6b:0d:de:ee:fa:5b:
                    0d:ef:bb:59:99:20:be:76:b9:f8:c1:b4:32:02:4c:
                    ce:2b:49:8a:69:99:6c:26:72:0e:1b:ce:df:7c:f4:
                    57:4a:b4:2f:21:2a:08:77:b4:b0:66:6d:eb:db:45:
                    5e:b9:c5:79:ea:8a:08:fd:f5:ae:5a:b6:f4:df:43:
                    64:4e:98:49:3b:05:7d:1f:5b:33:cf:2d:c4:8f:de:
                    67:b7:5b:85:8b:d0:74:9d:11:8f:3d:6b:2f:db:39:
                    fb:ed:8d:35:87:b2:49:e9:14:19:5a:ae:f2:a9:c7:
                    10:01:d3:e2:33:46:d7:45:ea:de:33:b1:fb:b1:5b:
                    9a:c9:46:26:b7:40:9e:37:93:91:02:36:83:01:b9:
                    4f:93:a3:b7:80:5a:d6:ee:f7:61:3d:f9:f3:b4:d5:
                    b7:6a:21:38:3d:95:99:f4:93:f2:b5:74:74:5d:aa:
                    a7:01:a7:c5:d1:70:fd:19:00:07:c9:e0:08:d7:3b:
                    75:57:d0:dc:3d:71:00:d6:ce:05:82:01:a5:01:52:
                    8b:88:e2:1e:26:78:b3:1b:40:ce:fc:0d:62:29:4f:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B8:C9:0B:DD:26:FE:07:B7:99:A8:46:DF:F2:D4:FE:4B:2B:3C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a5f64a2-6178-3b02-95a8-3b3be3060ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:20c5:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:79:87:05:0e:b9:1c:a2:80:e5:7d:34:7e:61:bb:f2:ba:3e:
         27:65:30:1f:f8:8f:06:ec:59:22:cd:f5:80:9c:b0:4e:4c:4e:
         28:36:ae:25:27:cf:d7:ed:66:6f:bd:13:fb:ef:e4:07:b9:76:
         46:e2:e4:b8:38:08:cf:ce:45:97:2d:78:ee:14:1d:08:53:83:
         1a:89:30:be:91:ba:5f:33:70:16:f6:c2:bf:81:02:13:a4:36:
         c9:9a:d0:f7:44:4a:a3:81:09:66:f3:6c:d5:ea:a4:65:c4:32:
         4b:97:9a:30:cf:16:81:5c:81:b9:d1:74:1b:32:e4:fb:95:77:
         38:0e:4c:0a:f6:d3:58:48:aa:54:fa:87:44:b6:e7:c3:c8:55:
         d2:01:58:88:08:1f:2e:e9:be:f1:33:8a:dc:37:34:10:ff:ba:
         8b:35:b2:48:be:03:b0:18:b3:22:bb:03:e8:fa:b2:33:1f:a8:
         09:e7:fd:9f:b5:b8:f7:e1:f1:d6:4a:06:c7:d2:06:21:e6:39:
         af:03:0f:5e:6c:1c:26:87:24:42:57:dc:4c:a7:f7:ae:8f:5f:
         b5:8c:3b:2f:59:12:da:e5:bf:dc:b8:b4:14:d5:b3:b6:f0:c8:
         e6:10:54:ec:8b:b4:bf:8a:0c:e1:68:57:9b:6c:b8:f9:02:4a:
         9f:4f:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:04:28 2026 by rpki-client