Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa
File:                     a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa (raw, json)
Hash identifier:          XLJz1DXiHcMNyUfa26l/4j9MOShXXjCKjxnb57SKXZc=
Subject key identifier:   58:5F:7F:6F:90:64:68:BA:3A:B5:9B:67:2A:AB:1E:C1:A1:3C:BC:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B5141E0E78B0FE8E901107200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        2601:ac0::/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:e0:e7:8b:0f:e8:e9:01:10:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=ad842c75-7053-402b-83ce-afcb7f548f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:10:b9:33:cb:90:ac:a4:44:06:f6:9a:8b:
                    95:66:aa:7c:3f:a2:7e:19:e0:47:31:35:b6:bb:58:
                    6b:ba:1a:fd:46:00:79:02:c3:7b:25:d4:51:a3:34:
                    e8:3f:fb:1f:9f:e4:f1:ce:e0:a1:6e:63:2a:27:bf:
                    71:77:4f:39:21:ad:70:65:35:8d:64:4a:cf:56:97:
                    8d:76:80:69:c4:5f:8e:fa:6e:87:51:4f:f9:36:d8:
                    79:5a:e0:4b:22:c6:f6:60:bc:2f:36:2b:57:55:33:
                    a0:49:24:64:35:91:bc:22:f5:58:75:06:95:76:d2:
                    20:76:f3:d7:26:ac:0b:ff:82:a6:a5:03:c1:8b:1e:
                    8f:3e:63:7b:ed:0d:52:b2:34:1f:81:48:41:a1:fc:
                    72:5b:84:da:02:e4:a6:0d:57:23:3f:d7:ce:7c:73:
                    03:c8:47:73:78:cd:41:93:7d:11:b0:87:3b:40:ff:
                    1e:91:10:7e:6c:20:ae:2d:97:8e:0c:81:c6:cc:44:
                    ca:d1:37:53:f3:9a:65:fd:f4:fc:2f:50:d5:36:77:
                    49:ae:6d:b3:be:1e:ba:88:6c:fc:1e:78:8d:f6:a7:
                    cb:3b:e7:34:d2:63:6c:c9:52:c9:41:f9:64:be:ca:
                    20:bd:a7:3a:d9:04:e2:59:ff:b4:a7:4b:43:18:97:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5F:7F:6F:90:64:68:BA:3A:B5:9B:67:2A:AB:1E:C1:A1:3C:BC:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:ac0::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:da:a1:3f:55:0f:f9:07:cc:28:27:41:6f:6d:7f:79:ba:3f:
         2a:58:27:a6:ed:cb:ad:3f:05:73:93:0f:8a:0b:db:8d:a0:1d:
         b9:cf:92:57:97:fc:61:14:63:0f:9c:88:65:83:f5:23:3f:92:
         c3:53:f3:c9:dd:01:44:8a:f3:ee:a0:50:fc:11:a3:12:41:56:
         02:f8:ff:8a:f2:e9:68:86:7c:95:88:d7:1d:36:e6:13:6b:9d:
         93:d4:0e:fd:21:ab:33:51:92:28:8f:fd:39:c2:bb:68:62:a3:
         66:02:f9:bf:40:55:7c:91:46:00:e6:c5:99:aa:a7:7f:a4:02:
         6a:7d:a6:34:b2:25:d4:18:d3:f0:19:fc:3e:30:bb:43:f1:3e:
         54:e5:85:4d:5b:a4:b0:ac:e5:a2:58:1e:3a:db:db:5d:35:14:
         0c:84:26:1a:e0:9b:67:47:15:82:7b:1c:d8:01:86:1d:9d:a8:
         72:13:5f:4e:c6:97:65:a1:e0:04:c4:9d:57:4d:8c:4e:09:52:
         3d:98:b1:26:3d:7e:22:8e:a1:e6:4d:48:98:24:83:1e:ea:6c:
         56:9e:3b:dc:8c:d8:48:4f:8f:e1:91:04:a8:ed:19:5f:bb:51:
         ea:87:4f:d5:27:21:c8:f7:d1:8d:e1:14:00:c9:09:f2:b7:fe:
         e1:f1:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:14:36 2025 by rpki-client