Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/891a204b-d80d-3ec3-af1b-8def9225a6ed.roa
File:                     891a204b-d80d-3ec3-af1b-8def9225a6ed.roa (raw, json)
Hash identifier:          24i6cmqyn70yArqz6ZmcPTCxFF1eFJTbIWTAr7QlQgo=
Subject key identifier:   3C:EB:F0:82:90:36:41:92:3A:39:DB:5A:78:A6:7E:2D:F9:44:92:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862A420A961E0021ADDACC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/891a204b-d80d-3ec3-af1b-8def9225a6ed.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        2603:3015:3000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:a4:20:a9:61:e0:02:1a:dd:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=cf6b5834-2808-4f43-b9b1-1aeaecda7cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:05:71:89:ad:9b:e9:4d:e1:8a:2b:a2:a3:6c:
                    59:bf:a4:33:88:ac:40:bb:fe:e2:4d:71:39:cd:81:
                    12:b7:59:e5:9b:46:83:b2:67:63:01:48:6c:a7:5f:
                    d6:71:0e:7c:3e:41:4f:1d:36:79:c6:9c:11:04:b1:
                    09:c7:55:da:79:d5:f0:b2:c9:76:78:39:77:3b:49:
                    d7:a2:af:22:35:5f:20:fd:80:2d:94:0a:4d:f9:86:
                    2c:3c:06:3b:f4:1a:ed:ee:a7:c9:da:01:35:e4:c1:
                    09:02:ff:d3:b1:0e:75:19:53:2a:b3:38:5b:9a:be:
                    3a:dc:58:41:06:79:fa:df:26:60:a3:19:4d:48:e6:
                    94:41:07:17:02:24:81:55:4e:21:29:87:a1:20:e2:
                    6f:c9:af:b9:82:f2:19:08:0e:b9:72:93:87:49:ba:
                    e4:55:d0:6a:c4:16:be:52:09:30:3e:f0:c9:f0:c6:
                    02:c8:20:1b:8d:c3:54:a9:64:f9:e0:f8:72:b9:82:
                    be:13:36:6b:1b:a8:eb:0c:dc:84:34:80:b9:86:fe:
                    b9:fe:ff:04:1e:10:a1:8e:a1:87:57:8e:00:68:46:
                    e9:18:36:9f:17:74:4f:ea:b2:f0:18:b1:ce:02:83:
                    ad:5e:9e:e4:08:12:7e:5c:3e:18:2e:49:eb:b7:6e:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EB:F0:82:90:36:41:92:3A:39:DB:5A:78:A6:7E:2D:F9:44:92:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/891a204b-d80d-3ec3-af1b-8def9225a6ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a8:82:10:cc:e2:0c:6b:0f:89:d1:42:dd:0f:09:c1:a8:e8:
         fd:c0:78:49:80:f0:55:89:0c:e5:fe:a9:7a:cc:d8:ff:b8:b7:
         3b:fd:00:bc:d0:eb:74:61:d1:c7:72:6c:13:07:94:2b:23:54:
         7c:37:1f:b9:ef:7d:fa:79:75:cc:0d:b8:90:74:0a:6b:bb:b8:
         6b:10:3b:74:4e:c3:e0:1e:5e:81:65:3c:1f:1e:3f:b8:51:00:
         d0:eb:c4:81:cb:2a:dc:cb:f5:5c:24:e3:54:a6:f3:6c:8b:73:
         34:0f:da:85:b7:f9:5b:99:9b:97:e3:fe:ba:9d:93:10:9b:6a:
         96:e6:62:a5:87:5d:dc:21:3f:0c:ad:cb:2f:06:f8:5f:e2:31:
         d6:af:ac:9e:61:32:c4:d5:27:55:f7:f9:89:ac:e2:63:f2:d7:
         f8:13:1d:01:20:ee:fc:52:62:f5:58:b0:4a:67:dd:ba:26:d3:
         4a:97:63:3e:87:61:a0:bf:59:85:2e:d6:7a:1d:df:e1:80:4b:
         9f:0e:02:2e:eb:b5:b6:95:3c:6d:48:40:00:ca:70:b0:f7:76:
         6f:ba:47:40:48:2b:1f:43:cb:6a:3e:66:8a:e8:74:75:15:1e:
         6b:29:6b:d8:92:e1:1d:90:1a:2a:3d:b3:12:08:af:95:bc:9f:
         cd:83:54:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:23:18 2026 by rpki-client