Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/613c5d9a-e42b-3717-a853-05ed054f22ec.roa
File:                     613c5d9a-e42b-3717-a853-05ed054f22ec.roa (raw, json)
Hash identifier:          keBUqZMGVBZlrlEJ2ho818wa17Ex0keDc5m9obKM7iA=
Subject key identifier:   61:9C:19:A9:47:17:12:BE:77:41:6C:4A:78:A3:41:92:9F:48:BE:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F06725EEEB9DCC138C915CA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/613c5d9a-e42b-3717-a853-05ed054f22ec.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     33655
IP address blocks:        2603:2300::/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:5e:ee:b9:dc:c1:38:c9:15:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=6b6604b9-ce2f-4d06-a6a2-14138a35defe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:6d:d5:c4:ab:b6:ef:6f:ae:96:7c:a2:05:
                    38:5d:4d:87:33:24:a7:2d:d8:b2:29:e4:89:d4:2c:
                    f4:73:e7:11:3a:00:a7:3e:24:3d:41:6b:1d:9f:05:
                    98:a1:91:d2:c3:38:85:f6:c0:b8:ac:60:d7:98:b3:
                    7f:2f:b3:5e:0f:91:9f:4c:eb:e3:65:7c:d3:89:97:
                    70:e4:a7:77:39:ca:63:29:46:09:db:97:41:c9:7f:
                    0a:f0:49:7c:06:c9:36:66:24:ad:8c:c4:46:e8:ba:
                    15:58:b0:cc:64:62:61:45:a0:a7:d8:57:a3:e1:dd:
                    17:6e:a1:f4:a6:1f:cd:12:b0:de:ad:3d:ed:79:cc:
                    48:e9:f8:c4:15:73:e0:c6:d9:52:87:56:66:bd:59:
                    ca:ff:d9:00:c0:dd:bc:5b:4d:42:76:d8:29:06:79:
                    07:c2:6b:f5:92:49:63:f6:3a:8e:8c:d9:ce:ab:94:
                    42:46:a1:26:3f:e0:34:88:3a:8f:f1:7e:a2:55:fa:
                    2e:b9:30:fb:a2:53:fe:92:ea:50:f3:f4:26:99:28:
                    f4:5d:f1:e5:dd:01:c4:fb:01:d6:3e:4c:a9:23:e7:
                    6e:22:03:eb:83:b7:32:90:d4:26:fd:15:56:58:da:
                    9b:dc:ae:b9:4e:55:75:51:55:95:1c:87:e0:6b:55:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9C:19:A9:47:17:12:BE:77:41:6C:4A:78:A3:41:92:9F:48:BE:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/613c5d9a-e42b-3717-a853-05ed054f22ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2300::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b2:15:79:df:cf:78:29:ed:7b:59:8b:a6:7d:6b:f4:a3:e5:
         c3:d5:33:2a:a4:26:c6:b8:48:ef:04:de:87:30:1f:52:06:c2:
         89:68:cb:fa:2c:a6:e2:bd:cd:3f:d2:02:68:29:96:80:7d:4d:
         60:ff:22:ca:92:40:fb:68:6a:6c:e8:a3:e7:7f:15:ad:2e:92:
         d9:5a:a6:97:bc:f4:4d:a0:7d:69:4a:cd:38:4d:24:97:9c:5e:
         a7:ec:bf:9c:71:04:66:8f:40:53:91:57:b9:2f:ea:b8:f2:d1:
         f5:f4:18:57:06:29:41:1c:e4:8d:16:1a:6f:87:d0:db:1f:89:
         0f:75:a7:cc:5f:75:aa:0a:fe:a2:df:0c:12:6c:25:72:a4:c5:
         d0:7a:fd:14:19:56:69:f8:60:80:a7:51:bf:75:42:2c:cb:90:
         03:ac:f3:26:b3:d3:01:1c:79:c2:8f:83:71:3f:86:23:4d:9f:
         46:c3:6c:52:83:fc:c8:47:a2:13:fd:d3:0a:96:5d:a1:dc:19:
         4d:d8:c3:eb:07:12:86:bb:95:eb:59:ef:8e:39:b3:a1:65:09:
         38:9f:c1:ca:89:12:79:9a:7b:e8:5e:22:96:11:15:89:73:72:
         9b:4b:24:d6:c6:75:ce:c2:96:13:47:c1:26:7f:55:10:e5:df:
         eb:5e:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:35:33 2026 by rpki-client