Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40df2267-583b-3a47-bc8e-7d162fb1f407.roa
File:                     40df2267-583b-3a47-bc8e-7d162fb1f407.roa (raw, json)
Hash identifier:          ItHgkmA8Wc8+eMTBcHNxE4L84sOX7zFzR3Ml/KYPNTA=
Subject key identifier:   52:36:A2:A6:56:17:ED:F6:BF:03:74:4C:22:1A:D3:64:33:F2:4D:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119EF4E6A1B7EDB2C264B800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40df2267-583b-3a47-bc8e-7d162fb1f407.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33287
IP address blocks:        2603:2044:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:f4:e6:a1:b7:ed:b2:c2:64:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=35e1ab53-8ef6-47ef-866d-686a2155c932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:72:cd:46:31:ad:d2:3a:a4:f8:ec:95:f2:70:
                    01:34:b8:43:f7:17:04:a2:1f:82:03:64:71:c8:4f:
                    7c:4e:f1:a7:89:ae:8e:60:58:f0:31:6c:5d:58:c7:
                    68:db:19:4a:51:a9:20:b8:be:61:43:61:6a:64:3f:
                    cd:cf:29:c6:7f:bc:87:17:1d:6c:72:78:3d:ec:39:
                    15:6f:54:ca:84:24:67:4d:70:9d:5c:c1:ae:fc:d7:
                    60:21:a3:62:83:ce:c3:91:72:ab:f4:b4:60:fd:92:
                    e5:85:fb:bb:8b:cb:e8:cc:41:5e:69:a8:a9:02:8f:
                    80:55:73:ae:39:ae:e3:4e:0c:a7:3d:f7:68:7b:16:
                    63:e6:ea:dd:90:99:93:fc:4b:ca:32:81:36:4e:7f:
                    ba:8e:8b:64:f9:c9:f6:22:97:37:4c:a0:f0:f9:85:
                    76:3b:b6:31:79:35:1d:67:60:89:27:9e:3f:50:87:
                    77:48:26:95:8a:b7:b5:07:29:90:e9:49:06:3e:3b:
                    01:53:ad:92:ee:2f:79:63:c3:c5:4f:0d:b5:d7:5e:
                    cf:98:d4:c3:37:69:1a:64:32:65:c9:5f:66:25:c3:
                    3f:d7:ac:48:d5:de:f5:dc:07:14:23:a7:88:76:b1:
                    ad:a2:c3:1e:69:b3:4c:47:d0:a0:c8:f7:6c:27:d3:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:36:A2:A6:56:17:ED:F6:BF:03:74:4C:22:1A:D3:64:33:F2:4D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40df2267-583b-3a47-bc8e-7d162fb1f407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2044:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:df:49:53:81:68:22:1a:9e:82:1f:b5:6b:aa:1a:91:b1:a7:
         8e:4c:72:61:06:fd:16:dc:f8:f4:73:b9:50:b9:85:bb:5d:ad:
         3f:0d:b4:33:fa:eb:60:1d:55:05:44:f9:3a:4b:11:07:ec:c0:
         4c:37:44:90:d1:7d:18:f1:22:76:41:a4:40:f4:1a:57:b8:f2:
         83:36:be:31:cb:75:f5:a1:2c:be:86:53:b7:62:90:5d:6e:a3:
         87:13:3e:ed:6a:32:73:92:77:5a:6c:a0:56:e5:29:f5:82:0b:
         bb:18:c8:d4:8d:5b:a1:50:7b:09:8a:4f:6f:1a:3a:45:aa:49:
         91:b0:ca:78:50:66:35:b9:99:7f:15:e9:b9:3e:3d:3c:20:73:
         5e:2f:d6:f1:fb:ec:9a:a2:30:64:16:52:de:8b:56:da:10:76:
         dc:a0:a4:4a:b5:eb:90:0f:d2:a7:7a:ba:82:33:98:59:54:36:
         aa:a3:5e:f6:a7:2e:9f:a1:52:95:d5:c2:19:e6:8e:39:f5:1b:
         fe:0d:81:db:99:6a:fb:70:ba:0b:dd:75:7f:ae:54:d2:4a:96:
         9e:84:23:2f:7f:2d:2d:5e:9e:3c:13:69:b7:16:62:a5:df:19:
         05:3b:19:3d:65:c1:f5:5c:e6:54:22:f6:c9:13:b6:bb:c8:03:
         15:1c:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:40:14 2026 by rpki-client