Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c5f655f-53bb-392c-aec2-882b20873692.roa
File:                     9c5f655f-53bb-392c-aec2-882b20873692.roa (raw, json)
Hash identifier:          0PWPBv355f5Chgdk6ENSG3oNmqGf2JqxxYKAQtD/IB0=
Subject key identifier:   D3:28:C1:48:9C:7F:58:A5:57:43:B3:C4:04:82:0B:58:64:60:A6:D0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A801F012A57F66A1A38A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c5f655f-53bb-392c-aec2-882b20873692.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        2603:20c0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:01:f0:12:a5:7f:66:a1:a3:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=ccb53539-129b-44f3-af98-ec672e34eb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:7f:aa:88:f6:2a:db:bb:88:ea:c8:8e:d0:
                    88:e3:a2:6b:13:df:46:f8:45:ab:ee:81:30:e4:e6:
                    c6:24:7c:55:b4:12:d2:30:19:64:76:fa:51:e2:e7:
                    77:5f:a5:4c:d7:dd:21:98:2f:68:47:a3:48:b7:65:
                    57:37:16:e8:55:05:b3:69:13:26:64:d9:4a:21:3e:
                    f5:20:97:e9:62:0f:e5:cc:23:75:53:f8:cc:1a:64:
                    74:af:ba:2a:31:8f:5f:68:65:2d:e3:de:10:ff:83:
                    b0:1c:0a:dd:9b:de:43:bc:ac:87:d3:0a:80:11:52:
                    73:68:b3:51:a8:3a:10:a7:fe:1c:b1:46:30:46:aa:
                    3a:a6:46:d8:13:a7:e1:f9:9e:fe:03:7c:1a:32:0c:
                    87:d0:57:c9:b7:5c:3f:4a:97:62:15:7e:b7:3a:84:
                    90:c9:c6:56:c7:33:df:0b:02:fa:33:74:37:4d:58:
                    22:fc:db:27:44:e0:69:d3:da:68:e0:6e:58:55:c6:
                    be:0b:38:15:6d:63:cd:6a:27:c6:33:eb:1c:30:8d:
                    9e:7e:c4:e9:03:80:2b:ef:2a:83:11:2c:5d:d9:8a:
                    d3:87:1c:dd:9f:0e:d9:48:aa:b2:bb:4c:a1:22:01:
                    1d:9a:7b:94:c9:d6:93:10:fc:c2:f5:34:a4:e2:f5:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:28:C1:48:9C:7F:58:A5:57:43:B3:C4:04:82:0B:58:64:60:A6:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c5f655f-53bb-392c-aec2-882b20873692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:20c0:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:48:dd:03:0d:9b:11:39:99:77:d3:95:f5:28:0a:14:2d:67:
         78:0a:7c:59:95:8e:c0:69:52:c9:2a:21:37:b7:8f:49:ce:1a:
         6f:25:3d:3d:7c:35:20:7f:13:ef:62:d3:da:65:5e:89:15:67:
         a7:4e:7b:e3:e0:e7:85:13:3e:69:a1:00:0b:08:77:fa:79:87:
         25:8d:6f:fe:cd:43:e9:3a:b6:b0:0f:27:17:91:22:27:e2:16:
         b2:24:cd:61:d3:6b:c0:a6:e8:d4:10:b7:b1:e2:f8:0d:b3:93:
         ac:e2:83:c1:f0:2f:55:f0:ed:12:9b:d3:32:75:b8:cc:ef:94:
         c7:d9:24:d1:77:ed:9f:ed:24:54:21:38:40:43:b9:ff:cc:85:
         8d:bb:e8:e0:ad:ce:ef:03:d7:2a:3c:36:a3:1d:c7:44:ae:e8:
         d9:a0:f9:ba:95:cc:70:3b:56:79:e8:86:88:0a:03:e7:df:e5:
         3c:f3:55:c5:49:41:f4:dd:a3:73:bd:43:d1:7f:61:04:bc:cc:
         6c:3e:6c:ee:e9:b5:f5:72:47:ce:72:1a:66:00:1f:e5:e0:05:
         1f:a8:42:37:47:18:3b:f0:52:48:5f:b6:63:3b:d0:8c:07:61:
         34:48:3b:4c:17:6c:5b:ce:df:b7:00:7c:9d:62:b0:d4:8e:80:
         ca:22:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:40:14 2026 by rpki-client