Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a32f30a-91ac-32e2-b7dd-2797e7239161.roa
File:                     2a32f30a-91ac-32e2-b7dd-2797e7239161.roa (raw, json)
Hash identifier:          lt+fohCVrbKIpLKvc9Tmft4FYYPQyib+VcLmHgtRj10=
Subject key identifier:   09:70:51:9E:7F:38:2B:88:89:EC:82:D0:BA:31:39:3C:BF:21:6E:E3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36008554F272510AC810A8B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a32f30a-91ac-32e2-b7dd-2797e7239161.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        2603:2194:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:85:54:f2:72:51:0a:c8:10:a8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=71f8ec7b-af87-44e0-a3ec-636afc33192a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:ff:22:1a:a8:b6:7d:6a:f9:60:16:f5:fd:
                    01:e1:c3:df:6c:ac:71:79:94:db:36:13:03:35:68:
                    61:a4:81:a2:4a:91:cf:ed:8d:49:c5:16:26:8e:e9:
                    a5:b4:79:1b:17:af:0e:f6:47:88:31:31:0d:c4:38:
                    ea:4b:3d:47:ef:72:53:fc:b9:0a:c5:e2:9c:03:b3:
                    a3:71:b4:f5:5b:5d:09:7b:9a:89:cd:3a:68:18:4e:
                    10:73:0b:99:15:69:5e:81:0c:e8:2d:7b:cc:18:5c:
                    bc:81:cb:76:80:c8:a0:de:bf:e7:9f:de:de:54:fc:
                    7e:e0:a0:ff:0e:42:ab:8b:1c:46:38:e2:ec:7d:b1:
                    08:93:f2:41:aa:56:26:6c:a1:2d:51:52:90:ee:c9:
                    c7:68:35:e5:db:e2:0a:36:66:66:9b:b5:68:f4:c7:
                    6c:f6:b7:62:ce:10:50:a5:1f:f8:27:aa:2c:df:25:
                    85:d7:41:bc:d9:15:77:e4:5e:b9:d8:85:6c:27:e6:
                    53:db:de:ee:b4:45:c4:39:8b:64:5a:f6:b9:73:82:
                    72:e3:a3:4d:8c:92:02:ea:bc:89:b9:7e:34:ae:de:
                    b7:a9:13:58:da:b5:66:9c:48:7d:b6:29:c1:5a:e1:
                    1c:5b:72:2b:03:45:42:69:a1:6f:07:80:b7:1a:c0:
                    2b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:70:51:9E:7F:38:2B:88:89:EC:82:D0:BA:31:39:3C:BF:21:6E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a32f30a-91ac-32e2-b7dd-2797e7239161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2194:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ed:f6:8f:6d:75:13:69:e9:12:ad:ee:da:bb:51:fa:42:de:
         2d:bd:86:1e:7e:fe:e2:26:e9:8d:16:93:55:e3:78:e7:5e:5e:
         fd:c3:72:42:28:f2:a2:c1:33:27:47:b4:f5:6e:04:62:c2:29:
         1e:23:88:01:b6:d8:98:a5:25:01:a4:19:ec:9a:d8:23:25:9b:
         14:34:71:68:e0:a9:92:60:69:1f:61:34:7f:dc:da:26:c2:87:
         b7:4b:93:22:44:39:08:c4:6a:8a:d6:1e:5b:72:93:8e:e9:d2:
         b2:d0:56:c2:ba:c7:a5:5c:e2:5c:fe:a7:df:3f:88:7e:e3:a0:
         77:96:50:df:77:8e:c2:05:34:26:34:04:4e:88:a5:44:13:21:
         47:12:12:43:b6:4e:49:29:1c:5d:85:14:54:7e:3a:79:aa:fa:
         9b:d7:19:14:7d:d2:ce:c7:a3:d1:f9:1a:78:0f:0e:3d:3c:ef:
         c1:27:81:6e:12:0b:82:50:d6:d9:44:18:4f:04:27:8c:e6:88:
         5a:71:4d:12:81:a9:cf:e0:92:19:1c:d5:82:ac:70:6d:13:11:
         2e:cf:4e:f8:e3:f1:db:e2:08:5b:58:ab:64:8f:c1:ec:46:76:
         5b:02:cd:0e:f2:69:fc:cc:5b:5e:76:e4:49:99:99:cd:0a:7a:
         ba:f6:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:55:12 2026 by rpki-client